
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json)
Hash identifier: vkMrHwMeAneRAW/FAzjN0NlX0YpSlNKIGjgiNeBlozA=
Subject key identifier: C5:96:8F:8D:CF:59:7A:3A:8D:E0:DF:88:8D:BA:25:4A:7F:1D:FE:50
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
Manifest number: 46
Signing time: Mon 27 Jul 2026 10:55:56 +0000
Manifest this update: Mon 27 Jul 2026 10:55:55 +0000
Manifest next update: Mon 03 Aug 2026 10:55:55 +0000
Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: DS4TJ90WAXuj71kUrRo7LRpfO5GmJyxRYw5JWfhr3/c=)
2: 4A79F05471CE11F1BC39DFE663A30FBC.roa (hash: tt1BIck5czmyxUfrc/spGUbtOW46AikfpGJWq4smioc=)
3: 32D300684EFF11F19AA82571A4833773.roa (hash: QkW8hoEVlDhqW1xMLJkGg7Bfu6Vbp9RtQ1kbqUS7Lvk=)
4: 267CF8CC718D11F1BF4206FD8FA30FBC.roa (hash: Bd1cYScj4fmX7aTgDmb2/IxRcYhuT72/NjHechdCWsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: Jul 27 10:55:55 2026 GMT
Not After : Aug 3 10:55:55 2026 GMT
Subject: CN=6a67393c-4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:bd:33:91:0b:89:3b:c8:4d:a5:df:9c:a4:
d7:25:67:b8:f7:00:64:a3:15:4c:0d:5b:cb:c3:b0:
e0:32:ee:23:24:27:9d:de:ae:cb:e3:f5:dc:8e:b4:
6e:63:01:a1:81:6f:76:31:7c:1e:e1:cd:71:58:99:
2c:34:a0:52:a8:af:60:81:aa:c5:f3:b2:4c:43:ad:
0a:f0:e5:a2:56:0e:6b:06:4c:2f:26:a6:5a:f0:89:
3d:f0:2a:3c:cc:d9:b3:b8:ac:df:48:5e:31:a7:a1:
a7:61:2a:ae:28:72:2d:20:a1:8a:a7:e8:61:f4:05:
54:62:f5:ac:98:73:30:e1:d0:57:cd:86:16:9e:27:
c5:52:8a:ea:77:e8:15:43:72:e2:c5:2c:64:a5:ce:
5f:eb:08:20:fa:66:6b:b3:3c:e7:5f:ce:db:6a:b3:
8e:b6:df:6f:d4:db:2e:63:f0:c3:c5:de:90:86:55:
e3:aa:2c:60:59:7b:b1:3d:f6:93:5f:db:b6:53:97:
a4:a8:27:d9:b4:82:36:1e:70:b7:d0:72:3d:d9:80:
fb:2b:ae:8e:1f:c4:06:25:39:34:33:73:21:f0:61:
a7:6e:d9:a1:f5:a8:d1:e1:2d:21:d9:f1:c6:e5:59:
f8:a7:98:52:5f:3b:f9:ff:ca:8f:c7:af:8c:1b:66:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:8F:8D:CF:59:7A:3A:8D:E0:DF:88:8D:BA:25:4A:7F:1D:FE:50
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:8c:39:0e:39:43:20:9d:ed:62:72:8a:33:9b:75:1f:32:
66:d4:c4:25:6b:76:a9:cb:92:1c:7e:98:7b:81:b9:b8:47:b9:
69:2a:39:c3:e4:a1:30:17:76:db:47:dd:ff:15:51:d7:c5:5f:
9c:50:fc:42:9d:79:71:95:6d:90:b0:dd:2b:7c:d6:02:92:07:
45:a3:3c:df:be:e2:f9:a2:36:28:a1:7e:77:7c:3e:bf:06:b2:
3d:a2:0c:00:09:77:b8:ad:82:ab:2a:a8:54:16:cf:0f:35:c0:
3a:ce:68:24:a0:97:f2:24:04:27:1a:8c:ac:c0:bb:f3:01:b5:
8e:fd:1d:a9:e1:ae:ff:c6:79:8e:33:e4:e4:98:41:94:bf:d7:
0a:96:de:38:c3:40:2a:8b:be:87:1e:36:0d:09:2d:79:36:51:
a8:97:f3:0e:ec:f9:a6:93:76:a0:42:d0:90:bf:d0:07:7f:7c:
2e:aa:d0:a3:b0:76:00:c2:44:eb:43:ec:84:a8:8f:7f:dd:36:
65:04:30:3d:61:4f:fe:65:2c:7c:95:e6:a8:c6:28:bb:a9:b2:
e8:02:74:3c:b0:e2:96:de:71:12:c6:18:97:d2:1b:a7:94:64:
aa:11:dc:bb:90:b3:47:2a:7b:08:00:02:1f:9a:3c:18:b9:59:
65:22:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:17 2026 by rpki-client