
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: 9gDDRHTsYFvgPbQlaEygw4FiBkHfTYvznfX8OxY+y5Q=
Subject key identifier: 06:80:B1:02:A3:06:72:0C:33:2B:0E:1F:4E:DA:1D:00:D3:EF:C8:4C
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0506
Signing time: Thu 16 Apr 2026 23:37:11 +0000
Manifest this update: Thu 16 Apr 2026 23:37:11 +0000
Manifest next update: Thu 23 Apr 2026 23:37:11 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: F6Knkr5vy9T6Nylz2In5ekwr1Q9pBYnSCngRi7Hs+ZA=)
2: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
3: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Apr 16 23:37:11 2026 GMT
Not After : Apr 23 23:37:11 2026 GMT
Subject: CN=69e172a7-193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:b0:f0:32:2b:d5:71:fd:d3:49:eb:37:ad:
41:8f:75:61:8c:54:ab:ff:f8:06:c2:0f:7d:7b:9f:
b4:bc:73:55:23:fa:cb:33:ec:74:34:6c:91:7d:43:
71:1c:e8:81:08:ae:68:aa:7d:34:6e:fc:a4:c3:f8:
b7:9f:ef:c6:cf:bd:73:8e:9f:90:7d:4f:19:be:f9:
a0:f9:62:e6:a7:96:ba:5c:40:3a:58:1a:6e:36:d5:
21:14:c6:a8:1f:15:61:e7:42:b4:2b:ba:db:99:5d:
1a:80:53:d7:bb:0e:61:a6:09:40:de:9e:92:14:c1:
3c:db:b6:53:bd:17:89:21:8c:8c:8d:24:ee:80:c9:
b6:3b:68:93:92:8e:b9:1a:25:3b:cd:f0:6a:f8:7e:
ab:6a:b8:b4:40:8b:d5:64:3b:01:b4:4e:db:26:6d:
dc:b9:49:b9:68:f4:e3:f3:80:62:53:67:a8:4c:cc:
04:31:48:fa:5f:b9:b5:49:8b:bf:27:4a:78:91:3f:
64:2a:1e:35:e0:cc:f1:56:56:61:a8:d3:43:92:8a:
87:c4:84:85:3a:da:58:3f:f3:b3:85:60:cc:64:39:
c8:d4:29:fd:2e:37:6b:c3:7d:20:0a:9b:60:4c:0c:
b2:1b:00:46:97:d2:ef:9f:b3:47:5d:d2:27:cb:1b:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:B1:02:A3:06:72:0C:33:2B:0E:1F:4E:DA:1D:00:D3:EF:C8:4C
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e5:12:c7:6a:d8:d9:9d:d8:2f:c8:ad:a1:d5:e4:c6:8b:2e:
02:ff:45:53:98:0d:c2:ab:f5:ed:69:1d:16:d3:91:cc:31:49:
c5:68:89:4d:9a:9e:42:8c:8b:0a:02:6e:9b:6b:19:2e:a8:96:
64:7c:74:36:dd:34:72:f4:32:be:94:2a:c1:f0:5c:1e:3e:e5:
2d:a9:d7:0d:ed:d4:e8:63:e8:33:64:50:67:bd:46:a6:33:8e:
e5:ed:02:c2:da:bb:a0:2e:fb:3a:03:40:38:1a:db:9c:89:05:
7f:ab:a4:fd:4a:a7:2c:bb:ae:46:eb:c3:8c:d2:7d:c6:bc:45:
1b:18:a4:23:e6:cd:51:13:c5:76:20:66:ef:2a:ac:7e:ab:ec:
3f:83:2a:c6:95:e1:51:bd:d4:43:b8:f7:08:f5:d0:da:71:eb:
19:7e:05:e8:23:15:2f:b2:56:e5:6c:c1:5d:8b:d8:47:b3:74:
a8:6b:d2:27:1f:84:79:d1:eb:be:ee:f6:b9:26:d2:c5:74:8b:
8b:41:4b:94:c0:e6:f0:b9:86:2c:cd:ff:a5:f6:2b:14:dd:c9:
5b:ca:45:fe:5a:f5:59:2d:ad:5c:ee:33:80:6c:07:df:eb:76:
df:16:bf:bd:ed:54:d6:53:40:24:18:5c:44:44:df:c9:18:a6:
38:35:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:05 2026 by rpki-client