
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier: GR/6crIlLpzcmOcB0R4pxyqA/TyiVd8r4xYvV4A9CE4=
Subject key identifier: 23:14:C2:4D:61:2A:FB:79:75:FA:E2:76:5A:B8:4D:19:4D:DC:AF:CC
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number: 013E
Signing time: Wed 15 Apr 2026 04:56:54 +0000
Manifest this update: Wed 15 Apr 2026 04:56:53 +0000
Manifest next update: Wed 22 Apr 2026 04:56:53 +0000
Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: oJ45Q4MkyPKv8ftN+ry5Os2qUptFQdZzfjftLQAMnXI=)
2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Validity
Not Before: Apr 15 04:56:53 2026 GMT
Not After : Apr 22 04:56:53 2026 GMT
Subject: CN=69df1a96-5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:00:2d:89:de:66:9a:59:e4:a4:c7:67:7c:
12:43:80:aa:19:f5:89:ff:45:af:b9:86:86:b6:3d:
b7:b9:b6:26:fe:32:43:b4:bb:0d:95:2b:a6:16:c9:
a6:f7:b5:3c:73:6e:95:e0:68:01:90:49:45:3f:1f:
0d:39:1c:a7:8a:01:14:52:a7:36:dc:35:c6:13:c5:
e7:2d:6b:6c:29:eb:2b:21:2f:6d:7a:45:6b:7e:84:
1a:05:29:18:c4:9e:d0:c2:6b:2e:2d:e6:5c:f8:7a:
ee:ca:08:a9:f7:0f:6e:67:ca:ef:89:46:9d:70:83:
b8:21:37:24:83:ec:76:17:b8:c7:8b:13:47:cc:bb:
c7:df:75:fb:cf:f4:93:3f:f9:d6:13:9f:5f:6b:d1:
78:94:7a:8d:e5:fa:c7:4b:8f:92:8c:57:93:06:96:
c2:05:45:a5:0f:ee:a2:90:e1:4b:65:22:c9:e3:cc:
08:ec:a5:7d:dc:49:30:8c:36:ee:0b:8f:ff:e9:46:
22:6c:cb:cb:f6:62:0b:8a:66:15:de:10:f6:1c:5e:
40:88:a6:ec:49:9e:d9:95:36:0f:9c:16:bc:ce:14:
8b:e3:28:23:ca:6d:c5:6c:93:f2:5a:c2:4a:f3:79:
aa:35:5b:65:c9:03:56:df:d2:07:a6:d3:cf:44:96:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:C2:4D:61:2A:FB:79:75:FA:E2:76:5A:B8:4D:19:4D:DC:AF:CC
X509v3 Authority Key Identifier:
keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:41:7c:38:dc:d3:ee:ae:64:57:1b:5e:0f:8e:dd:1c:e3:
9d:18:92:18:10:42:ea:69:f5:b5:99:ea:07:24:84:bc:7b:3c:
91:14:bb:ef:27:3a:4b:d9:52:fb:6e:8f:3d:36:f4:e1:b4:72:
17:77:f7:9a:44:ad:6b:11:95:0e:25:15:da:8b:ab:b7:73:54:
18:1c:7d:69:67:54:4f:07:20:25:d3:a7:65:14:8a:0d:2c:87:
65:b1:3f:a9:b9:8c:c1:1d:f3:1c:6a:0c:0b:d7:d9:d9:6b:8b:
62:d7:fa:5a:2f:50:fb:56:50:26:c9:85:9d:0b:20:9c:74:4d:
0d:2f:b6:ba:2f:f3:7b:9a:19:42:aa:a4:74:32:b6:f3:0c:af:
2a:fd:28:37:c5:29:95:99:72:bd:f3:58:c7:8d:0c:ad:32:ba:
4d:5f:d7:36:ce:b2:de:36:6c:00:0e:0d:53:b3:38:11:b6:40:
68:61:c9:83:74:a1:55:49:62:f6:25:71:a7:00:d0:19:29:40:
17:e3:d3:e3:d6:5f:35:11:26:21:b7:da:2e:70:f2:49:89:a2:
6c:70:f2:4b:88:7e:d1:b1:93:91:56:35:ee:6d:ea:aa:b1:13:
7a:5a:be:ab:cc:b8:09:f5:68:28:14:56:e6:0d:63:07:f2:1c:
21:0a:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:36 2026 by rpki-client