
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier: NDlgydWMHnkOCExWpCJWg4CNU/5vHRdG/OEB5HOwHWQ=
Subject key identifier: 91:DF:79:07:D1:1B:2F:C6:91:CF:FB:9F:D1:1D:9C:58:D4:0D:9F:23
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number: 0210
Signing time: Mon 27 Jul 2026 04:35:39 +0000
Manifest this update: Mon 27 Jul 2026 04:35:38 +0000
Manifest next update: Mon 03 Aug 2026 04:35:38 +0000
Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: joVUaKEtOdEbAqAQsL5BfXuCaxBlDTrxUje17wEE3u0=)
2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Jul 27 04:35:38 2026 GMT
Not After : Aug 3 04:35:38 2026 GMT
Subject: CN=6a66e01b-9ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:4f:d2:62:13:00:a1:b3:83:a6:d8:da:74:
83:d3:8b:ae:41:e4:e8:c3:fc:ac:ae:1b:96:d3:ea:
1b:d6:be:f7:91:bf:0d:a7:72:c3:5c:ba:5c:f2:02:
0a:30:fd:ce:c6:ec:92:d5:f5:c8:4c:ac:38:a5:8c:
5a:63:f1:91:43:02:6c:28:d2:8a:4d:9b:de:da:23:
0d:ea:95:33:2c:1a:25:fc:af:9a:cf:ae:80:00:4e:
9c:14:d3:cb:c8:46:88:72:cc:6e:0d:75:d3:9d:f3:
12:37:aa:48:3e:cb:77:2e:2f:05:f7:86:8f:8f:08:
1b:fa:55:8a:eb:e7:f3:3a:a7:4e:0c:3d:91:d6:73:
59:97:b4:c3:11:7c:c3:fa:30:d5:2d:3d:4a:aa:ba:
33:9c:a7:90:76:3b:9d:9c:59:9a:e8:c4:75:3e:9d:
03:db:21:a9:b2:16:26:50:70:75:6a:dd:8f:dd:5a:
be:9e:86:a8:99:e1:c8:9d:de:2d:dd:69:39:4f:c1:
c3:5b:d5:88:c0:41:2f:1e:4f:c9:bd:cd:c6:bf:10:
16:8d:8e:64:69:b0:73:88:4c:e6:7c:b8:2a:7c:6b:
8f:b8:ca:b2:e0:4b:6e:fd:48:3a:08:9a:e9:1e:62:
ac:bb:a1:99:ef:ba:6c:66:25:19:6c:82:95:68:8b:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:79:07:D1:1B:2F:C6:91:CF:FB:9F:D1:1D:9C:58:D4:0D:9F:23
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:54:c2:5c:b6:c4:10:a0:9d:fe:e3:d8:f4:8a:54:6f:1d:18:
f4:b8:50:3a:e4:bb:84:40:27:59:81:19:53:c4:3f:80:75:07:
c3:58:35:da:c6:06:3b:c3:a2:00:26:44:d4:35:81:7c:39:b0:
9a:1f:ab:3d:ba:40:1b:0a:ea:0a:36:fa:78:4f:87:28:74:a4:
35:02:7c:2a:50:de:20:bc:bc:d8:03:62:7a:f5:7b:d6:14:89:
0f:f7:a1:40:4b:13:b5:79:c5:4b:4d:b8:4f:51:08:c0:69:39:
03:2c:7c:9c:f0:9b:8e:69:a9:60:8f:d2:e4:06:0a:35:4a:08:
81:8e:7a:bc:66:9d:02:aa:a8:b0:a2:01:ad:49:13:e9:d0:eb:
4b:79:13:20:a2:84:71:23:c0:0e:26:67:f4:a9:72:d0:0c:9a:
9f:43:66:f1:0e:eb:31:82:65:7d:a7:6e:70:f9:9f:b4:54:97:
e1:71:d1:bc:42:91:57:db:ec:00:e1:6e:50:92:43:22:5a:14:
bb:28:bd:43:25:12:64:96:15:88:4a:6a:b0:8b:0d:9a:d5:b4:
54:b0:ec:0b:cc:e6:d5:8f:0a:ef:fa:f9:d2:f8:b5:9d:a1:32:
8f:11:2b:f5:f5:e4:94:19:38:d2:36:9a:db:9e:5a:12:e6:b0:
8e:dd:82:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2
QjMyOEFBOUIwHhcNMjYwNzI3MDQzNTM4WhcNMjYwODAzMDQzNTM4WjAYMRYwFAYD
VQQDEw02YTY2ZTAxYi05Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0xP0mITAKGzg6bY2nSD04uuQeTow/ysrhuW0+ob1r73kb8Np3LDXLpc8gIK
MP3OxuyS1fXITKw4pYxaY/GRQwJsKNKKTZve2iMN6pUzLBol/K+az66AAE6cFNPL
yEaIcsxuDXXTnfMSN6pIPst3Li8F94aPjwgb+lWK6+fzOqdODD2R1nNZl7TDEXzD
+jDVLT1KqroznKeQdjudnFma6MR1Pp0D2yGpshYmUHB1at2P3Vq+noaomeHInd4t
3Wk5T8HDW9WIwEEvHk/Jvc3GvxAWjY5kabBziEzmfLgqfGuPuMqy4Etu/Ug6CJrp
HmKsu6GZ77psZiUZbIKVaIvRwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHfeQfR
Gy/Gkc/7n9EdnFjUDZ8jMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4
QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot
QWNlOGxRaUxfUjVyTW9xcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPlTCXLbEEKCd/uPY9IpUbx0Y9LhQOuS7hEAnWYEZU8Q/gHUHw1g12sYGO8Oi
ACZE1DWBfDmwmh+rPbpAGwrqCjb6eE+HKHSkNQJ8KlDeILy82ANievV71hSJD/eh
QEsTtXnFS024T1EIwGk5Ayx8nPCbjmmpYI/S5AYKNUoIgY56vGadAqqosKIBrUkT
6dDrS3kTIKKEcSPADiZn9Kly0Ayan0Nm8Q7rMYJlfaducPmftFSX4XHRvEKRV9vs
AOFuUJJDIloUuyi9QyUSZJYViEpqsIsNmtW0VLDsC8zm1Y8K7/r50vi1naEyjxEr
9fXklBk40jaa255aEuawjt2Cpw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:21:46 2026 by rpki-client