
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier: 5r95QcsZ5vhrDdDedMWML/5T3cY8vC/r2oKd82ZL4tY=
Subject key identifier: 02:ED:20:09:5C:E0:DD:D2:81:9F:24:29:EE:49:8B:49:95:6F:9A:24
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number: 0496
Signing time: Wed 29 Jul 2026 00:44:30 +0000
Manifest this update: Wed 29 Jul 2026 00:44:30 +0000
Manifest next update: Wed 05 Aug 2026 00:44:30 +0000
Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: 9YFAsH/f3GANUL6qsAddYg0IHigeV3Zco5HNH1wk+jw=)
2: 06820D08961011ECA540626AC4F9AE02.roa (hash: CzUXYWkkIQDOcHq1RR+8siO68bCnK+19oDi4KioI2dg=)
3: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 2uDIVTyJFeprZ8aKmJZDal4SC0k4TrY+Gr38dV8hu3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Validity
Not Before: Jul 29 00:44:30 2026 GMT
Not After : Aug 5 00:44:30 2026 GMT
Subject: CN=6a694cee-c016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:1e:57:fa:75:ad:e9:f3:b8:bf:42:e9:8d:
0f:b2:a3:3b:1c:67:ec:7b:f8:04:10:9f:e0:59:1d:
8b:14:19:c3:f7:ae:b5:e4:23:3b:27:08:9b:db:1b:
c9:f6:e7:23:86:03:44:90:e0:b8:4f:01:04:98:23:
d1:c1:c0:aa:25:d3:6f:fa:63:2d:37:0b:96:90:3f:
1e:b4:b4:c9:84:45:06:ed:b4:0b:7b:5a:d7:c0:58:
1f:0f:2f:8e:5b:db:61:f1:52:12:76:42:e1:55:32:
f3:10:38:05:bd:91:76:f5:29:3e:8b:b4:a2:25:f9:
e3:a9:90:d0:c5:a3:58:ab:32:77:ba:37:16:75:1b:
78:4f:8d:57:5d:27:ee:0d:74:c7:9c:44:8a:ea:e2:
6a:45:00:a8:50:5c:2d:bd:93:03:da:f6:20:28:db:
20:9a:75:19:36:f5:1f:2e:3f:d9:cb:53:0c:ac:bc:
6b:d4:b9:9c:7d:28:2d:12:76:f2:fa:93:1d:7b:fd:
c2:1a:e6:08:f0:d6:07:cf:cb:a4:60:45:44:30:c7:
59:00:5c:b0:f2:e3:55:19:e0:77:aa:18:49:c8:75:
2c:9f:23:3c:3d:51:d5:c5:66:cd:b4:64:e6:9d:5e:
9b:f1:5b:10:cc:9f:4a:6d:73:7f:c8:f3:c0:8f:0b:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:ED:20:09:5C:E0:DD:D2:81:9F:24:29:EE:49:8B:49:95:6F:9A:24
X509v3 Authority Key Identifier:
keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:df:68:54:b5:3d:08:85:fa:c5:57:89:7b:b8:7b:69:86:c7:
c7:91:92:cd:07:1d:ef:2d:b3:3f:ba:67:48:87:ed:80:d4:4a:
49:cd:bc:ee:c6:55:d6:a0:e2:d6:53:b8:df:5b:8f:e5:84:b9:
61:a9:63:95:e1:36:b5:a0:1e:fe:83:b6:3d:83:dd:27:ef:a1:
a0:59:2b:c0:68:bf:19:7b:f7:68:ac:7b:07:a3:4f:de:3e:d3:
d1:a8:3f:df:0e:de:24:45:e1:8a:75:c0:93:06:98:0f:12:f6:
1b:42:f4:e8:c4:08:da:99:cb:b9:ac:d2:4b:79:22:76:ab:84:
c9:da:4d:8d:4b:b0:24:dc:f7:9d:e4:ab:dc:13:9a:69:6e:d4:
e1:e4:b7:25:c9:57:70:ea:ce:78:9a:42:ee:46:f5:09:9e:d0:
90:6e:a9:22:51:42:cb:5c:38:55:99:68:11:62:1b:d3:88:7d:
91:92:ca:a7:a2:66:9c:50:58:dc:d3:8c:23:74:94:50:b4:33:
9e:a4:fd:c6:8b:73:06:58:67:ae:16:fa:b2:0f:80:9c:a3:25:
56:07:c5:6a:5f:6d:88:42:f7:8a:aa:75:4d:4a:e0:c9:e8:8d:
f2:43:5e:fc:f9:e2:a0:76:7d:5d:c2:1c:16:a7:9c:12:f9:e0:
a1:97:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:36 2026 by rpki-client