
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier: 174v6PDvekzFHEdVmXlzCMYHhdy1huk0yAjyPk2nJPU=
Subject key identifier: 72:87:A3:37:1C:E8:14:16:BE:F8:3A:AC:23:71:93:76:61:A5:DA:A4
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial: 35CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number: 3598
Signing time: Sun 20 Sep 2026 15:02:56 +0000
Manifest this update: Sun 20 Sep 2026 15:02:55 +0000
Manifest next update: Sun 27 Sep 2026 15:02:55 +0000
Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: FURfe7NMnEvvOzuQRSPtd6JMnpmGiw2teKTF74xpJbQ=)
2: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: iiBtufSHWf33321WKi8LpLk6XSy2WK+DXaj/oX9ilrc=)
3: 70B22B22950D11F0ACB76B28C4F9AE02.roa (hash: bsyO+xd24543MnKnjSqgPnvGXDSnrTi05p7630zqHEk=)
4: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: lFKHdRG/VsHJ+DcVPofYkA6W4POH4suRyuwB6wTeuGE=)
5: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: jgk1tUOLfmMQ7B3N1+T3FYlJzB2NIx4NII7QMsy+y8c=)
6: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: +cnloCvAjSUYswAcE+33yHayQWC3V459pWxL1JTtDvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Validity
Not Before: Sep 20 15:02:55 2026 GMT
Not After : Sep 27 15:02:55 2026 GMT
Subject: CN=6aaff59f-7089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:01:0f:2e:04:49:3f:f3:83:bd:b8:ff:3a:
23:ea:94:34:4c:4b:65:9f:a9:be:0b:8b:ea:a2:b8:
91:da:d5:3c:4b:a2:01:06:56:a6:85:73:d1:79:b1:
c3:14:db:bd:ed:9f:79:aa:a5:59:c9:b9:31:cd:b4:
c4:63:5b:ca:37:38:90:8e:e0:e3:88:1a:1d:c7:f7:
f1:b1:f7:7e:ff:8f:28:f9:b7:37:2e:b5:ed:02:1b:
73:8e:fd:7a:f6:6c:f9:68:ba:7a:f7:c0:dd:bd:c0:
ab:c9:27:78:93:b2:c8:7c:94:93:aa:1d:01:66:c7:
5e:dc:9f:13:a9:ed:0e:fd:b4:c2:b7:29:11:5a:93:
c9:c2:cd:a7:13:a6:47:3a:8e:7a:ac:d1:43:1f:7a:
3b:5b:a5:d1:f6:1a:6c:54:f4:ca:d8:bd:df:bb:76:
d0:89:0a:60:d4:cb:f0:e9:7c:9d:eb:c7:88:3c:80:
58:93:ef:53:e2:b7:75:06:68:b8:5d:d4:b6:3c:7c:
03:e2:95:4a:d1:12:3e:4a:e4:9b:ea:93:61:2b:c7:
dc:7b:31:c4:e5:de:50:b4:07:76:4b:58:0c:fe:5f:
5f:0b:ba:19:87:36:20:5c:74:02:4b:4e:3e:5a:e6:
22:20:dd:2b:a0:26:a0:2e:de:4c:33:43:1c:88:71:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:A3:37:1C:E8:14:16:BE:F8:3A:AC:23:71:93:76:61:A5:DA:A4
X509v3 Authority Key Identifier:
keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:09:b5:13:3c:32:a4:1f:ae:97:7a:01:5b:77:11:67:da:
44:cf:b0:1e:a9:d0:3b:b4:57:c5:74:54:3a:47:a3:c7:68:57:
6c:24:0e:28:14:3d:c7:2b:4b:6b:68:8d:bb:8d:fc:5b:c5:6a:
71:14:0f:e4:cc:4a:7c:fa:74:25:19:16:8c:8d:c5:b4:1a:68:
49:a8:c7:c9:a2:76:c0:3b:58:be:84:9f:a5:61:50:e4:7e:6b:
3f:af:a7:06:02:81:7f:79:23:b1:dd:02:85:e5:f1:6f:85:d8:
2d:c3:ee:31:f8:ee:51:9b:92:94:b5:a6:b8:49:bf:51:55:61:
71:9f:25:97:d4:34:bc:e6:98:cf:12:0f:d7:40:23:58:43:64:
f0:88:97:fd:83:79:40:af:55:97:6b:d8:0e:d0:2a:10:f1:d1:
c0:04:27:db:3e:33:b6:ee:34:67:9a:2c:22:77:1a:b0:0e:a5:
11:96:e3:26:2a:d7:95:48:f4:35:a9:9f:10:e8:05:1b:d4:eb:
14:8a:5e:a8:ac:cd:b4:ad:50:63:50:f3:cf:aa:dd:82:19:29:
01:0b:65:32:27:ab:15:3d:7f:b4:01:d0:4a:42:52:9f:2c:d4:
59:2b:e8:8e:c2:53:8d:4f:97:f2:62:ef:7e:9e:34:20:85:41:
7b:5a:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:24 2026 by rpki-client