
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: 0ceLNdbiJZEz6Air3QFNrP1PCO+BP9fgNNrxoy7z/3I=
Subject key identifier: 56:E4:E6:B1:F2:B5:DF:A0:94:E9:67:DC:A7:FF:34:2E:64:BE:D9:22
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: E0
Signing time: Wed 15 Apr 2026 06:07:41 +0000
Manifest this update: Wed 15 Apr 2026 06:07:40 +0000
Manifest next update: Wed 22 Apr 2026 06:07:40 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: pen1vj3upUXrlClfUcC5dBEvBjYcOdr1Vh3SG4G4Z2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: Apr 15 06:07:40 2026 GMT
Not After : Apr 22 06:07:40 2026 GMT
Subject: CN=69df2b2d-800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:52:7b:ab:2f:2d:6f:ed:8f:cb:40:0a:27:
3e:99:00:34:29:4c:77:cf:20:96:e9:4c:5c:16:cc:
8b:01:d0:80:4c:f3:40:e8:59:02:2c:2c:e2:56:88:
10:f0:94:7a:8a:22:46:b9:7e:93:1b:cd:bf:32:4e:
87:a9:72:89:3e:ea:7a:de:c2:98:7c:f9:48:cc:c3:
86:96:e2:a6:0e:ce:5e:b2:9b:25:57:ea:6c:e5:65:
01:29:6f:07:85:a2:4e:20:dc:a8:99:1c:6d:a7:a7:
9b:75:64:da:af:b9:b9:ef:bd:8a:b5:68:59:03:62:
16:b6:98:e0:d7:b6:d4:df:d4:50:6e:bf:cf:ea:e7:
6b:57:e5:4e:b0:5c:6f:23:3d:13:29:b8:7b:85:1f:
d0:f0:6b:73:1d:40:61:35:29:02:d0:d5:ec:30:6d:
b4:27:44:04:39:70:ab:19:8c:8a:aa:cc:3c:91:05:
41:79:a1:82:04:e8:df:b2:14:a1:33:11:32:dd:a4:
27:e1:d0:de:e0:e8:06:14:a5:ed:54:69:bf:b1:43:
be:d3:ff:4b:2b:9b:1a:d8:49:66:b6:7c:cf:26:6c:
4f:60:f4:da:c1:21:c4:2f:f0:20:d2:76:2e:d6:c5:
b6:d5:03:6a:27:66:18:ff:9b:16:fa:a4:c9:1b:3f:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:E6:B1:F2:B5:DF:A0:94:E9:67:DC:A7:FF:34:2E:64:BE:D9:22
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ac:f7:b4:3a:5e:94:f0:05:cc:01:eb:f7:2c:9c:eb:94:ef:
60:70:23:fb:f8:97:64:01:e6:31:c3:9e:3e:b5:5c:28:8d:bd:
5d:26:09:06:e2:44:b4:a8:8c:7b:b8:55:28:1e:12:17:0d:0f:
9a:68:34:f5:95:6c:ee:6b:e3:9d:27:93:cc:0a:92:e7:48:76:
5e:fe:ca:ae:8f:71:b1:fe:42:fd:21:df:e0:a2:38:a7:70:fb:
52:28:7a:e0:21:ab:26:df:c6:0c:80:2c:1f:f1:7e:51:6c:5b:
8d:38:82:f0:c1:b5:cc:d5:64:e5:59:de:60:0b:32:e6:c0:44:
39:b1:ed:a7:70:08:41:cd:71:28:dc:ea:6c:03:cc:3b:e6:c1:
12:ec:5e:b1:e2:79:00:08:32:68:f7:b2:67:90:0d:ca:84:36:
e4:46:a6:40:7c:12:3e:85:a3:f0:80:a9:a4:1a:8d:02:93:0d:
2e:9c:33:4c:b6:63:b3:2c:50:2d:0c:5f:e6:47:2a:57:17:42:
54:15:7c:9a:8d:53:5b:4d:ef:4e:3c:89:a3:4d:e2:0f:35:87:
dc:fa:83:ea:cd:2b:9e:02:d5:59:7e:4f:4a:f7:31:a8:92:d5:
7d:4a:81:39:3d:c2:da:e9:ee:9c:18:ef:4d:cc:1d:91:4a:54:
27:b2:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:23 2026 by rpki-client