
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier: QbvS3+kCxC0iuX9Et45zHplFtNjf8xwpL+i9vEHyCXk=
Subject key identifier: 35:71:DB:3D:32:1D:9C:72:F9:5A:02:E8:78:FD:13:17:2A:FA:FE:DC
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number: 69
Signing time: Wed 15 Apr 2026 07:31:06 +0000
Manifest this update: Wed 15 Apr 2026 07:31:05 +0000
Manifest next update: Wed 22 Apr 2026 07:31:05 +0000
Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: jtJxF5i0FG9CVt5gnSjJPCYCRylaJ7aA/eE19skx9iA=)
2: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
3: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: Apr 15 07:31:05 2026 GMT
Not After : Apr 22 07:31:05 2026 GMT
Subject: CN=69df3eb9-6bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:a4:25:0a:50:be:b1:70:d9:97:62:eb:3e:
c8:89:eb:04:56:f5:fb:f8:bb:2b:0b:8b:89:be:a0:
ba:f3:b2:da:67:73:04:cf:f8:f6:c5:78:f9:a6:bb:
89:1e:a5:d1:04:ef:f9:c8:57:15:1a:1d:30:63:06:
59:87:44:0d:cd:4b:45:2d:fc:b0:86:dc:25:fe:84:
17:4e:e1:20:7c:be:ab:c1:a2:ab:31:a2:7c:eb:50:
e1:f3:66:a6:5a:c7:3e:92:85:41:e8:26:ac:0a:09:
00:a1:60:54:6b:1e:6c:61:bc:fd:cb:be:d5:24:36:
b9:c8:0c:0c:95:9e:27:86:87:ad:a4:d3:34:24:4b:
58:9e:16:53:7a:3a:05:76:bb:0f:78:1b:06:78:85:
75:86:16:11:59:1c:e0:12:8f:a9:93:6c:a7:95:b2:
9a:24:33:18:ae:79:9e:44:44:65:3f:a6:be:66:d6:
28:a9:08:05:f4:d7:e6:db:bf:af:08:d6:31:64:33:
79:94:e3:f3:fc:7d:61:c3:db:e6:ff:1a:a4:41:53:
8d:24:6c:f8:60:b3:09:48:c4:79:cb:b3:f2:c5:ed:
62:ac:02:dd:f1:39:d0:f8:f3:bd:d5:60:3c:f6:03:
60:99:7f:24:fd:c4:f2:69:59:99:c1:e2:f3:f4:bf:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:DB:3D:32:1D:9C:72:F9:5A:02:E8:78:FD:13:17:2A:FA:FE:DC
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:be:3d:63:1c:dd:0c:ac:4a:17:93:c4:0a:60:e3:ba:d6:08:
b4:69:c9:84:03:1f:17:d9:b1:c4:6d:8d:a2:23:70:33:e8:b8:
09:68:6e:56:fc:4a:8a:64:db:e3:da:8a:14:3f:b9:0f:28:9a:
24:f1:b6:9d:98:ac:bc:a4:6d:06:30:ca:50:54:d8:1a:7f:fa:
65:2b:8f:f6:5a:5c:b5:68:eb:24:cc:ef:4f:11:f1:b6:d0:e8:
ac:65:bb:a7:ef:d0:65:b7:1d:c1:55:f8:8f:f9:8a:07:71:7b:
de:5f:0f:e1:35:f6:6e:83:06:5c:d6:c8:d2:0f:e7:22:6d:de:
68:9f:d2:d5:82:10:24:e8:6c:59:cf:e3:34:74:d3:f4:26:32:
7d:74:ee:70:80:ed:d1:87:9e:1e:39:91:91:54:87:1f:5f:c8:
be:b0:b7:07:76:26:96:97:de:bd:88:83:bc:2e:27:83:d8:a7:
29:5c:94:b8:97:cc:31:89:a5:5b:bd:90:5b:a7:0d:10:ae:60:
91:93:46:ce:3f:9f:83:5b:ca:44:fd:95:0e:d7:76:08:61:5b:
eb:67:4f:5b:a9:1a:32:85:25:fe:ae:9f:fb:1f:3e:67:34:cc:
73:fa:9b:1e:41:7f:c5:4c:04:bf:e3:0c:e8:36:fb:96:64:8d:
09:f6:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:01:30 2026 by rpki-client