
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier: FcoGgnE+IeiXuhZC36RG1/YZ5RJdMIGM/U47c6Q4UOw=
Subject key identifier: 2A:2B:F4:53:19:EA:41:02:43:72:01:C7:BB:27:08:4A:AC:32:88:09
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number: 01FA
Signing time: Sat 13 Jun 2026 03:15:35 +0000
Manifest this update: Sat 13 Jun 2026 03:15:34 +0000
Manifest next update: Sat 20 Jun 2026 03:15:34 +0000
Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: CI5HpqQNacUjY2vgebNqP5sqXnD2CGEs5EC8FNQZjEw=)
2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Jun 13 03:15:34 2026 GMT
Not After : Jun 20 03:15:34 2026 GMT
Subject: CN=6a2ccb57-f490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:c7:98:dc:3a:fe:ef:25:fd:58:d7:34:ea:
3e:b4:63:46:63:b9:dc:35:24:ea:62:10:dc:c0:3a:
fc:88:31:27:bf:66:6d:7a:5f:a4:e4:d7:96:2c:6e:
73:e6:f7:45:1d:f6:f6:dc:e9:1a:9d:68:ac:bf:ab:
c3:d9:e2:e8:84:47:aa:ce:b3:cb:ac:de:c2:03:b6:
ea:7c:a7:4b:dc:59:b4:62:d1:4b:51:5f:67:ef:f1:
0d:b7:c4:7a:63:65:fe:0f:2f:12:2d:2e:ca:b1:b5:
db:7c:52:1d:1e:65:e3:3b:8b:22:09:60:40:77:a1:
38:67:8c:b4:f8:d4:b7:00:8c:a0:4d:73:73:2d:d3:
99:f8:e6:6e:10:7e:e1:fa:d1:ca:fe:9c:62:bb:0c:
cc:9b:36:40:47:0e:ac:94:9c:95:34:41:9e:47:58:
0b:5c:e0:04:be:3e:43:da:8e:94:31:d6:90:37:02:
1a:35:cc:49:65:9c:74:02:53:86:4d:dc:36:90:92:
71:a7:c3:58:0b:be:3e:0d:68:cf:4f:b3:0c:3a:0d:
36:ff:11:3d:80:fa:67:af:08:0d:08:fe:dd:ed:da:
57:56:49:9f:83:af:f7:3c:3a:b1:9c:0d:69:d8:9d:
24:c1:30:b0:fe:a4:e9:3e:90:14:f7:51:0e:3e:f0:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:F4:53:19:EA:41:02:43:72:01:C7:BB:27:08:4A:AC:32:88:09
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:51:19:b7:96:f4:df:8c:9c:50:2f:43:19:ae:e0:db:5f:11:
31:72:e3:d6:a9:d8:87:63:6f:b4:e7:c6:84:e5:fd:8b:b8:4a:
47:79:1d:d2:5a:2e:75:46:ec:e9:98:94:12:3b:dd:eb:92:59:
f5:fe:f7:4f:8b:06:7b:d8:2f:d3:f8:0a:47:31:62:b4:50:a8:
d2:73:c6:32:25:6b:0d:a6:2f:d0:03:3e:ac:77:8b:7b:65:95:
12:17:50:b1:6d:19:f4:86:39:63:52:eb:e6:8a:55:e8:fb:5a:
a4:82:33:11:1a:ef:89:a9:52:37:1c:2a:e6:b9:91:e2:d4:84:
4b:5c:6c:a4:2c:32:bd:02:21:b3:47:08:cd:5b:fa:70:4b:1e:
d0:b6:8f:7c:bc:fd:d4:ce:c1:64:3d:9e:90:12:2e:0b:d3:b2:
85:93:bf:34:27:b2:c1:36:82:d3:d2:d0:40:33:84:47:53:e1:
bb:12:2d:e3:9e:5d:0e:e8:5c:46:b6:2a:fc:94:09:fe:d4:ab:
e4:93:4c:20:7a:41:fa:e4:c3:22:e0:1c:ca:6d:49:35:a0:88:
d2:d7:99:1d:47:97:ef:3d:e1:bd:a9:92:f3:e4:19:1a:bd:d1:
4c:16:03:a3:84:05:4b:29:cc:5e:02:73:12:c4:04:2e:74:6c:
ef:21:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:57:56 2026 by rpki-client