
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier: UqoqSiGAXlPyPShxwRTvEer1vtREKMAR669pCSvjpOI=
Subject key identifier: 5B:33:ED:91:DB:CE:6C:7E:7F:1E:97:F3:15:02:C9:F2:D9:45:F2:7B
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number: 68
Signing time: Fri 17 Apr 2026 07:37:07 +0000
Manifest this update: Fri 17 Apr 2026 07:37:07 +0000
Manifest next update: Fri 24 Apr 2026 07:37:07 +0000
Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: ApgRLxIYo4bcNXOIYJoB6gN1wnAJtN6niiCkcNlPk0I=)
2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: GsR/Ts01CmpABMN4kDyTQIg4MbBkjEEMhLEdWWuFsZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Validity
Not Before: Apr 17 07:37:07 2026 GMT
Not After : Apr 24 07:37:07 2026 GMT
Subject: CN=69e1e323-5c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:64:fd:31:1a:3c:a6:84:30:47:96:4f:19:
8e:86:79:1f:fe:70:ff:0e:30:24:dc:b4:f1:3b:11:
7d:ae:0f:76:3c:3f:3e:22:e6:70:2a:42:86:33:56:
9b:a4:8f:0b:52:2e:92:84:7f:df:ad:4e:8d:75:99:
cb:4b:99:b0:28:b9:5c:b1:5b:21:72:72:20:1e:d9:
e9:40:c4:84:65:ff:cb:75:ee:4a:4a:e4:00:9d:5b:
ae:35:10:57:4a:0a:f8:bd:ba:2a:3c:ac:e4:8f:d6:
cc:dc:80:08:19:cc:d8:44:bd:1c:8d:95:c5:51:13:
98:94:d9:ee:ab:b6:5d:a7:8a:c8:10:2b:ba:e8:57:
46:2c:84:9b:42:05:e9:68:54:9a:99:5e:c4:58:55:
73:da:49:b2:33:47:d1:47:0d:e9:d0:8d:47:0f:df:
4e:df:5e:30:59:8e:76:a5:34:a6:cf:6c:17:37:6f:
f6:66:ff:2a:a9:4f:f9:65:43:60:65:27:04:30:15:
84:c8:49:67:57:86:cf:3a:89:42:29:ec:33:4a:10:
19:2e:41:19:df:49:5d:97:b4:ee:78:05:ad:eb:7b:
bb:6a:75:ba:bb:20:7e:6b:a5:97:1d:22:11:52:20:
46:2f:36:86:a8:cc:97:7e:87:25:16:fc:70:ae:f9:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:ED:91:DB:CE:6C:7E:7F:1E:97:F3:15:02:C9:F2:D9:45:F2:7B
X509v3 Authority Key Identifier:
keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0c:29:61:4d:76:47:24:d0:d2:04:14:f6:33:ff:e1:d0:94:
76:a8:3d:65:59:b1:f3:3e:b7:9f:81:9c:56:9b:62:e1:03:09:
d5:70:4e:9b:0b:cd:0a:cb:9d:d9:db:02:db:2d:d5:93:86:4f:
a5:7a:96:d3:1f:c6:39:54:cc:a3:7a:13:ef:2f:e7:d7:c2:da:
6f:f2:ef:b9:56:f9:57:3b:07:04:5c:32:f6:d8:da:82:27:0c:
2e:e1:c8:48:bb:6a:98:b9:40:ef:f3:a2:b5:d4:f0:f1:64:82:
07:c6:c5:bd:0e:87:42:81:8d:ea:76:c5:d1:18:a0:3d:b6:5a:
30:f5:8b:72:ed:d8:c3:a1:e3:e7:4b:eb:7c:e0:6e:47:4e:92:
d8:8d:39:74:a3:ad:bc:be:ce:94:eb:e9:5e:53:e7:80:15:8e:
85:84:76:2a:21:93:7d:35:ff:0e:5e:f4:33:b9:74:89:ed:b3:
eb:d3:74:8a:cc:6a:d4:cf:0e:ea:f9:58:54:a9:b5:1c:28:e2:
2b:02:fd:79:8c:13:eb:6f:5d:4f:fb:7d:f2:0d:fa:8c:e0:50:
e7:49:27:fe:51:82:c1:4f:c0:a1:f4:7a:a8:b7:b6:81:9b:97:
60:bd:9f:17:59:31:4a:2f:86:52:c4:4a:39:0d:ae:27:09:75:
b4:4b:42:1c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzA2MDExMC8GA1UEBRMoRTQ4ODYxQTI2OEEzRTk0RDdCN0U4NEJBNzRFRUFGNDc3
Mjg5NjcwOTAeFw0yNjA0MTcwNzM3MDdaFw0yNjA0MjQwNzM3MDdaMBgxFjAUBgNV
BAMTDTY5ZTFlMzIzLTVjOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUBGT9MRo8poQwR5ZPGY6GeR/+cP8OMCTctPE7EX2uD3Y8Pz4i5nAqQoYzVpuk
jwtSLpKEf9+tTo11mctLmbAouVyxWyFyciAe2elAxIRl/8t17kpK5ACdW641EFdK
Cvi9uio8rOSP1szcgAgZzNhEvRyNlcVRE5iU2e6rtl2nisgQK7roV0YshJtCBelo
VJqZXsRYVXPaSbIzR9FHDenQjUcP307fXjBZjnalNKbPbBc3b/Zm/yqpT/llQ2Bl
JwQwFYTISWdXhs86iUIp7DNKEBkuQRnfSV2XtO54Ba3re7tqdbq7IH5rpZcdIhFS
IEYvNoaozJd+hyUW/HCu+VKXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWzPtkdvO
bH5/HpfzFQLJ8tlF8nswHwYDVR0jBBgwFoAU5Ihhomij6U17foS6dO6vR3KJZwkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDYwL0VGOTQxQTEwOUNF
RjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUxN2ZvUzZkTzZ2UjNLSlp3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNUloaG9taWo2VTE3Zm9TNmRPNnZSM0tKWndrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz
MDYwL0VGOTQxQTEwOUNFRjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUx
N2ZvUzZkTzZ2UjNLSlp3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCrDClhTXZHJNDSBBT2M//h0JR2qD1lWbHzPrefgZxWm2LhAwnVcE6bC80Ky53Z
2wLbLdWThk+lepbTH8Y5VMyjehPvL+fXwtpv8u+5VvlXOwcEXDL22NqCJwwu4chI
u2qYuUDv86K11PDxZIIHxsW9DodCgY3qdsXRGKA9tlow9Yty7djDoePnS+t84G5H
TpLYjTl0o628vs6U6+leU+eAFY6FhHYqIZN9Nf8OXvQzuXSJ7bPr03SKzGrUzw7q
+VhUqbUcKOIrAv15jBPrb11P+33yDfqM4FDnSSf+UYLBT8Ch9Hqot7aBm5dgvZ8X
WTFKL4ZSxEo5Da4nCXW0S0Ic
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:03 2026 by rpki-client