
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
File: 5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json)
Hash identifier: vElgftO/ei8qp4kopdV1eJWmMv2GIdaNg74DGGWL6fA=
Subject key identifier: F0:8D:02:69:6C:82:B6:DD:AA:7D:4D:25:30:0C:09:04:00:06:BF:87
Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1
Certificate issuer: /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
Manifest number: 0276
Signing time: Mon 27 Jul 2026 03:25:24 +0000
Manifest this update: Mon 27 Jul 2026 03:25:23 +0000
Manifest next update: Mon 03 Aug 2026 03:25:23 +0000
Files and hashes: 1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: C/ao0Sm4/qEQyA5rhsQNrAbDKRRhwO8TA6E7wBVejAY=)
2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl
rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
Validity
Not Before: Jul 27 03:25:23 2026 GMT
Not After : Aug 3 03:25:23 2026 GMT
Subject: CN=6a66cfa3-db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:b8:0a:fc:62:a4:cc:5e:0a:3d:a2:d9:85:
6d:53:c2:f0:f7:bb:3e:c1:80:7b:97:81:42:03:e9:
d4:39:41:ab:fb:52:d5:86:78:33:f4:1d:44:86:bf:
34:f0:4a:b0:81:ef:1e:5a:f7:5d:c5:79:5c:54:55:
ab:69:99:89:54:e0:66:25:12:59:6e:90:06:17:a8:
c3:fb:61:a2:dc:73:df:09:96:51:c1:26:84:6b:ed:
06:a2:f4:95:f1:ef:36:cf:15:87:c9:b3:a0:7a:5a:
d7:41:12:6f:5f:f7:d2:95:ad:58:c1:1e:77:7e:af:
ef:fa:4a:95:82:91:a6:70:9e:b4:da:c5:f3:5d:3c:
90:88:d4:3e:86:fd:ea:4a:53:ff:a6:f9:f5:e1:ca:
2c:31:37:3d:c2:7d:30:08:b6:09:62:63:40:67:9e:
be:e8:f2:ad:36:f9:d0:45:1c:e1:16:ad:7e:d0:42:
cc:45:b2:fa:ca:04:91:22:22:e6:57:95:93:ce:f0:
43:3b:27:66:ff:bb:81:c4:2e:c3:c1:8e:e7:d6:4a:
dc:a8:fe:67:4e:6d:22:62:e8:16:99:bf:68:4a:62:
ee:5a:fb:e4:a2:89:31:51:2c:4e:73:52:81:9c:09:
23:dc:de:9f:ca:91:3a:3a:22:d1:92:65:1f:fe:74:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:02:69:6C:82:B6:DD:AA:7D:4D:25:30:0C:09:04:00:06:BF:87
X509v3 Authority Key Identifier:
keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ad:cb:84:76:0d:fd:61:eb:9f:43:7c:43:78:be:79:58:1f:
3a:e0:a6:f2:f3:98:b1:cd:df:74:72:87:00:a3:b5:98:7e:ab:
25:e9:67:f5:b5:4d:56:dc:c3:55:29:75:3c:12:54:da:cb:b7:
c5:06:fc:f0:b9:d4:83:9d:d5:17:cc:06:1f:e6:4d:b1:1a:86:
48:c4:c1:f4:8c:79:77:66:94:64:41:2a:35:a8:b8:a1:a6:13:
33:e1:71:91:f2:01:fa:10:9b:91:66:ef:04:61:aa:eb:dc:3a:
3d:ce:f6:f1:c3:50:33:f5:b0:b3:62:b0:d9:ad:63:98:31:70:
4d:11:7f:e3:9b:ac:a8:23:cd:77:e1:1e:fa:9b:b7:e0:e8:85:
10:4f:b5:4e:ee:5a:69:4b:10:ad:16:e2:02:09:d2:8a:ed:a0:
4b:f1:38:a8:32:b2:9c:79:c6:4e:6d:07:83:63:a8:ac:c8:60:
cf:48:9f:a3:3c:35:7d:c8:d9:3b:7d:ac:a8:8c:00:34:cc:a5:
4b:12:59:8d:ad:6b:05:04:68:ab:98:7d:7f:d0:71:de:bf:51:
48:28:53:4f:dc:d4:bb:44:57:8d:fa:ae:90:19:46:92:f7:fe:
35:9e:c5:d6:89:df:16:4f:f9:5d:de:9c:21:86:ab:c4:9c:d3:
4b:28:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:53 2026 by rpki-client