
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier: XC0mPrRq0OpuaytVN/gfVVh9+AVvePA0YAMDE7yW/Oc=
Subject key identifier: E3:36:85:7B:30:8B:D3:D7:81:1F:05:DE:F0:E6:0B:32:EF:24:96:76
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial: 09EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number: 09E0
Signing time: Thu 16 Apr 2026 19:47:34 +0000
Manifest this update: Thu 16 Apr 2026 19:47:34 +0000
Manifest next update: Thu 23 Apr 2026 19:47:34 +0000
Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: n9l5WNXgaMJfez4p88PjGbNsEu3jIYvq4Zum0DvC32M=)
2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Validity
Not Before: Apr 16 19:47:34 2026 GMT
Not After : Apr 23 19:47:34 2026 GMT
Subject: CN=69e13cd6-847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:74:fd:9c:58:24:88:c5:3d:d8:1f:7e:b4:
8f:2e:cd:b7:2b:81:3b:c1:3c:e0:bd:ae:74:e1:15:
50:d3:85:9d:74:8a:6c:82:d4:a2:97:c1:5a:d0:14:
1c:b7:b5:fb:c1:c5:2c:f1:3f:11:79:79:58:ee:27:
09:d9:c2:02:b6:10:07:4e:d3:40:49:4a:07:b9:c4:
b7:8b:1a:00:b1:49:cd:5a:5e:c4:b1:1e:74:60:b4:
22:e9:23:51:cd:eb:ac:1b:2b:c1:c8:a8:7f:cf:2a:
d6:83:09:c3:dd:ca:4d:7e:7b:da:46:61:6a:63:52:
7d:e1:66:73:25:72:a2:56:ba:fa:11:92:df:9b:64:
76:c8:54:f3:16:58:33:f0:36:49:27:b5:8b:df:09:
6a:87:9c:d3:a5:0a:a8:36:f8:8e:c6:8d:9a:cb:28:
1f:92:23:22:a8:40:e5:ef:79:00:f7:0a:06:41:ad:
dd:03:23:fc:56:23:73:46:11:d7:10:2c:c2:d5:68:
b1:ad:8a:e5:46:0e:90:75:77:7c:07:b7:7c:a3:64:
55:ac:fc:ff:2c:3b:35:ae:9e:35:53:43:b6:12:81:
36:ba:4c:71:ab:b3:47:5b:2a:a1:4e:d7:d5:81:20:
8c:94:af:59:c8:4b:91:cc:e9:5a:fa:60:bf:56:1c:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:85:7B:30:8B:D3:D7:81:1F:05:DE:F0:E6:0B:32:EF:24:96:76
X509v3 Authority Key Identifier:
keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:02:16:e1:a6:41:ad:e8:73:6b:e1:82:f6:69:eb:3c:cb:
c0:80:b8:07:14:74:50:9e:00:b1:89:e8:b8:f3:33:1e:be:0b:
d2:5d:36:8a:0d:0c:81:78:ed:db:7a:05:15:d0:1d:73:56:9d:
b8:21:33:8a:dc:72:c1:46:91:e1:89:6e:b6:6d:21:f7:1e:32:
74:71:b6:d4:68:ae:ef:95:e7:14:a2:62:9b:de:6c:c6:91:0a:
e7:6f:9c:9d:ab:a3:1b:88:32:76:f6:f8:de:7f:0d:f3:47:72:
9f:92:08:82:2c:8e:81:f0:e8:ca:4a:12:d1:92:2c:31:e4:7b:
54:ff:a2:72:f5:76:fb:bf:5f:24:7d:95:d5:d9:bb:66:d1:c6:
62:3c:c2:e1:dc:86:8c:8b:35:87:2a:50:39:eb:a6:1f:7e:a9:
1b:bb:4f:94:d6:81:fe:7d:ad:52:1f:81:d4:f7:5e:e7:66:22:
3b:d5:b8:c0:45:28:24:bf:ee:0a:66:b7:66:cb:30:b0:b3:bf:
cc:ba:cd:66:51:bd:e6:94:83:01:79:e8:8d:7d:9e:51:70:54:
b1:fe:77:9f:52:7e:11:6b:6b:3b:b8:27:62:4e:10:ac:a6:9b:
04:5d:a3:11:4e:fa:c9:78:b1:89:66:86:b0:e5:d8:39:07:df:
c3:62:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:41 2026 by rpki-client