
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File: v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier: 8G4Dln8f7SAYsgBEosTSsSxUIh6GZDXQWBA5aqVeL9g=
Subject key identifier: 32:2F:C2:D3:D6:71:29:C3:D6:CB:93:FD:4C:4E:6F:C2:A1:57:2B:CF
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number: 012E
Signing time: Mon 27 Jul 2026 08:00:09 +0000
Manifest this update: Mon 27 Jul 2026 08:00:08 +0000
Manifest next update: Mon 03 Aug 2026 08:00:08 +0000
Files and hashes: 1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: jtJHoPQGudX0h+dM4WYXoKATRT7svLi89o4eHHdHKHs=)
2: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (hash: YlZFXxDgVw2lX0Yisa6xfNC/n3ndlHwr/LRL23GuQT4=)
3: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: xQa25kfRWK3crvNR1k4YEmeqeNmN93Y1G0UzCQfE2Yg=)
4: 4BF18842284611F1B6B4839A93833773.roa (hash: fHDiteXAsGgy2FduFWNMxKtbex2uLuXFMjObf6Ugpb4=)
5: 2A7B4C14C51511F0B6CAF70BC4F9AE02.roa (hash: TIwZi18b1r7T7Jcwx4mxXvA5li7L1pqj6+p14JyCGxc=)
6: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: ZBurK5Fldfa3BNPTSoV+jhKTVxpqBAuhH+mjtQ5ecNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Jul 27 08:00:08 2026 GMT
Not After : Aug 3 08:00:08 2026 GMT
Subject: CN=6a671008-3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:3f:85:0b:83:26:8c:d8:8b:52:fc:28:2d:
71:51:5e:6f:32:0b:62:c0:75:92:5c:1b:07:3b:f2:
b7:5b:f9:af:7f:41:eb:4e:51:56:95:20:32:68:14:
ba:c1:a9:e4:61:e5:c5:a6:18:13:e6:3f:c6:5a:ca:
d8:d4:d6:8f:7b:a8:4d:ad:ba:e5:65:0b:21:2e:7f:
b3:99:ab:15:b3:36:40:56:bf:03:58:6c:05:0d:ef:
31:6e:b6:48:6a:fe:05:3e:f7:c9:c1:43:88:d2:5f:
86:19:a5:31:01:c4:fc:f1:1a:2d:80:c2:29:1f:2e:
f9:7f:3d:6c:43:20:ab:7c:61:05:74:8e:f6:42:9c:
99:70:d2:e2:02:f0:34:d3:f3:ad:2f:02:13:fd:01:
7e:96:67:7f:27:98:24:ec:e0:13:f3:6e:da:91:60:
86:56:0d:be:3a:6d:ec:48:c7:d6:4d:f7:3a:9a:04:
6c:40:60:42:56:8a:a2:23:49:4e:6a:31:52:0b:8a:
4f:3b:6a:5d:e5:ba:07:7a:62:48:ca:6a:b9:c3:27:
10:17:25:63:6d:34:bc:de:b2:d3:5d:bd:3b:10:71:
75:8b:55:29:45:69:a1:21:b1:3b:dc:59:b6:e9:84:
6e:bf:48:11:14:4e:a3:5f:40:c5:49:51:d1:e8:9b:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:C2:D3:D6:71:29:C3:D6:CB:93:FD:4C:4E:6F:C2:A1:57:2B:CF
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:87:bf:48:25:ee:7e:40:b5:e2:48:7f:df:31:ad:78:a1:
bf:88:69:b7:64:d5:19:4a:a6:ef:fd:32:24:e5:d6:63:da:c8:
6b:3c:51:2b:9e:0e:d1:13:57:63:05:16:78:b1:a7:32:de:5d:
2f:8f:87:d8:70:1e:37:08:8c:5b:0a:60:a6:54:7e:68:5e:cd:
f2:37:6a:ec:66:74:69:9f:8c:72:bf:f1:a2:f6:fe:33:62:06:
be:8b:0a:e8:66:ad:6c:6e:13:a3:fd:d0:14:9b:22:8e:76:b6:
e0:e4:2e:61:ec:79:08:71:f1:b1:1f:d0:10:fb:52:c5:70:e4:
6b:96:3d:bd:80:f7:f3:a2:06:16:75:de:a3:a0:a9:3d:25:fb:
42:cb:ab:e9:97:b5:68:66:c5:ed:c2:25:1d:ed:8e:aa:42:20:
47:30:f1:b4:dc:f9:76:42:89:e2:25:ab:00:ec:98:f2:34:09:
6c:a4:bb:13:ff:09:df:bc:e0:ff:b2:09:30:fc:4b:4e:47:ec:
71:88:b0:31:1c:9d:cc:86:a9:35:83:c0:c1:e0:0c:f9:2b:5c:
78:98:a1:86:d8:06:cf:4d:c2:75:a0:66:b3:b0:68:7e:fe:fa:
51:e5:2c:f1:48:16:39:dd:89:1b:67:d5:96:65:8b:82:15:d9:
bb:b7:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:35 2026 by rpki-client