
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
File: 5Iv1L7wvU90weLyUo7utCjEm88U.mft (raw, json)
Hash identifier: AfcA2ZufWAqYVOyXji8dkyF0sUN+qXN9341nh4X8ddU=
Subject key identifier: 8D:1A:B1:A6:2F:17:8F:A7:43:23:EE:F0:D1:BD:B8:58:97:70:C6:CA
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Certificate issuer: /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
Manifest number: 24
Signing time: Mon 21 Sep 2026 08:49:28 +0000
Manifest this update: Mon 21 Sep 2026 08:49:28 +0000
Manifest next update: Mon 28 Sep 2026 08:49:28 +0000
Files and hashes: 1: 5Iv1L7wvU90weLyUo7utCjEm88U.crl (hash: VvZcvn7A9p4k3AyUl0N5qjDg0OJSxvM35Uwv1DmcxRQ=)
2: DE76C686889611F1B93BA8C46911F970.roa (hash: qJE6TO8uJYgLahM06vJS4Wmd4X/FNEwPw6/9LFb1+gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Validity
Not Before: Sep 21 08:49:28 2026 GMT
Not After : Sep 28 08:49:28 2026 GMT
Subject: CN=6ab0ef98-1d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:48:dd:ad:ba:43:4c:d0:f1:16:01:42:bf:
4e:d4:8b:31:71:58:06:a2:ec:85:31:61:21:61:1e:
da:6f:5f:00:f4:db:ae:aa:0f:a0:1c:89:f8:80:cc:
31:b6:6b:83:1e:3b:c9:d9:a2:01:a1:64:4d:ca:bd:
b3:3e:dc:b8:d7:0a:44:2a:a7:2d:87:de:d5:99:e5:
c8:7c:32:e0:12:29:84:45:85:0e:51:fb:02:1b:9c:
86:26:9e:ea:79:6a:69:88:bc:bf:c3:fd:cf:03:c4:
54:5e:76:b6:49:e8:8f:28:ec:81:78:44:30:e3:3a:
33:72:c8:16:8a:96:69:08:2d:7f:8a:55:05:db:8b:
a3:86:cb:1f:d5:f2:cb:79:1a:df:e4:55:65:5f:9d:
64:a8:cb:e3:06:68:80:a0:65:b3:0f:9d:1f:0c:ef:
6d:60:a1:32:1b:88:00:5f:a9:48:eb:c6:b3:87:f3:
69:0f:73:68:d9:cb:10:a2:f4:2a:32:a3:69:f8:a9:
e7:17:25:83:23:f7:35:6e:5d:f0:27:17:2b:72:89:
64:df:98:32:da:4c:bc:0b:ca:9e:cb:4a:fa:27:22:
32:e9:24:31:05:33:73:64:62:44:2c:2b:56:c5:cc:
63:02:29:c1:b5:3d:8a:1a:db:ec:39:ba:16:5f:70:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:B1:A6:2F:17:8F:A7:43:23:EE:F0:D1:BD:B8:58:97:70:C6:CA
X509v3 Authority Key Identifier:
keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:b4:cd:1c:6b:f9:89:3e:32:24:44:c1:ce:bb:cc:7c:95:
ad:b3:3e:83:6a:61:5e:74:3f:b1:64:eb:87:7d:7a:30:19:ad:
03:fe:20:54:c6:e8:d9:09:5f:ce:28:14:59:cd:91:04:80:3c:
f7:81:e5:f2:80:4e:9d:23:a9:eb:a9:85:1a:91:14:60:72:37:
cf:f0:de:e0:0a:76:fe:8b:6c:c6:a0:f2:8f:99:27:85:eb:4e:
57:a8:2e:da:3f:35:7a:ac:20:2e:9c:a9:b2:ad:dc:00:d1:df:
ca:52:6a:90:52:97:99:46:13:47:8c:9b:6d:d6:ad:10:cb:f7:
c4:af:74:bf:a7:2e:3c:c5:fc:56:97:bc:80:43:a0:07:38:c9:
b6:86:0b:16:b3:01:f7:5c:68:67:42:48:ab:9f:eb:e1:68:a6:
88:3e:e2:b8:ba:2b:9f:94:fa:10:3e:85:4b:67:c9:e7:8c:25:
ef:a6:5f:cb:b3:5f:f2:d5:6d:c7:d5:c5:4c:0d:96:12:6b:4a:
3f:1d:f1:77:0c:44:cc:d7:58:be:c4:86:0b:df:54:1b:c4:f8:
bb:53:11:87:66:db:54:c5:78:d2:48:ee:e0:4c:f1:e1:21:7e:
ab:6e:d1:e1:47:64:42:72:f8:a1:88:a7:0b:e3:da:2b:67:88:
1b:20:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:45:01 2026 by rpki-client