
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: zEW7YNs5eeDxAA4Z/ws+WeXCFRJOcbYxvvgmOBJjTlk=
Subject key identifier: 3B:F9:3A:44:A8:2D:26:D2:F8:6D:DE:C6:78:FE:91:71:2F:EC:AB:3A
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0546
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0523
Signing time: Fri 12 Jun 2026 23:39:32 +0000
Manifest this update: Fri 12 Jun 2026 23:39:31 +0000
Manifest next update: Fri 19 Jun 2026 23:39:31 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: PZv+QAV8A5UtDwhrvyhxXJOyRJfo0NNNxH/YKd/sAW8=)
2: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
3: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Jun 12 23:39:31 2026 GMT
Not After : Jun 19 23:39:31 2026 GMT
Subject: CN=6a2c98b3-7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:8e:9c:dc:33:55:d2:e3:b1:63:0e:28:f2:
e4:88:0f:b7:39:47:26:b6:e4:8e:08:98:5d:ef:6f:
b9:e9:7b:85:8e:5b:77:6f:18:57:16:53:98:9b:01:
4f:b0:d2:c1:ec:9f:66:e7:c9:ae:bd:74:f9:c8:5c:
cc:b8:25:fd:a4:d4:06:c7:ea:a6:cd:19:5b:d6:ce:
02:cd:7c:ab:94:ad:1f:6c:65:6f:6c:d9:dc:a6:1b:
6a:83:fd:44:60:82:59:36:7b:86:53:d7:69:5f:c7:
2f:37:41:6c:27:25:66:0f:ca:b9:f4:da:77:80:13:
ef:00:c4:c2:bc:44:9e:7d:8b:e6:39:ed:a6:f4:6b:
af:0d:dd:b8:50:ab:1d:0e:f7:89:73:83:11:1c:6f:
c3:ac:5d:c6:c9:ba:f7:1a:58:5b:4a:21:c0:e0:17:
69:10:d7:8d:9d:00:38:a5:3c:ba:69:16:f7:7f:5d:
18:2a:66:66:e8:18:9b:84:03:32:be:27:01:83:21:
a7:dd:fd:d5:3e:84:50:41:dd:2b:50:c2:84:35:c0:
c1:d4:94:d7:22:a3:6e:4a:0e:28:28:c0:7d:15:e8:
5c:10:25:14:55:74:80:16:ea:dc:72:78:64:8a:bd:
fb:26:b4:94:96:23:9e:fd:b3:16:d3:b6:1d:46:1f:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:3A:44:A8:2D:26:D2:F8:6D:DE:C6:78:FE:91:71:2F:EC:AB:3A
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ae:f3:91:39:c7:ec:7e:88:46:a1:39:10:8d:ac:53:a2:4a:
82:43:f9:a8:4b:e6:34:63:31:5e:f5:94:a1:65:8b:f3:6c:88:
58:3d:a5:7f:50:d0:60:bd:7b:21:db:3d:c8:19:19:e0:45:a5:
74:ac:34:f5:73:65:64:1e:03:82:03:9f:9a:e0:04:5e:7a:ff:
87:af:9e:04:09:ec:95:d4:55:6f:56:c4:bb:c1:86:a1:aa:de:
1b:f3:7a:8e:bb:a1:6d:41:19:9a:9e:d6:d0:b9:78:c2:28:3a:
14:99:f5:01:5c:17:8a:65:e1:ed:ad:72:e4:d4:7b:d5:0c:42:
a8:60:36:6c:91:ef:a8:cf:72:1f:aa:56:31:1b:fd:af:1f:aa:
ba:78:d3:e3:eb:be:02:93:ac:95:68:60:92:51:d8:8c:23:8b:
49:e9:4b:0b:c9:12:51:a5:3e:92:0e:6d:99:85:5d:e2:26:52:
54:a7:fe:fb:6b:2e:93:6f:d1:5c:60:69:23:60:6b:f7:4a:9c:
e5:b9:08:9d:c9:3b:f6:c3:e0:f7:c6:16:1f:a0:70:fc:4e:f9:
90:a2:8a:a8:6d:d7:1e:67:79:7d:a1:fc:9a:97:ef:1f:7d:8c:
a7:7a:e7:f3:8d:61:3e:f7:6e:02:29:52:db:10:8b:48:39:96:
22:30:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:29 2026 by rpki-client