
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: jA9IiUJlGvw5rwp+6KhmTz7DPg/En8Rb4nWMZHJYxHE=
Subject key identifier: 62:4A:8E:9F:B5:C2:04:9D:B4:06:8D:BD:50:C5:52:E9:5C:D7:08:EC
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 07DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 232C
Signing time: Tue 28 Jul 2026 16:00:46 +0000
Manifest this update: Tue 28 Jul 2026 16:00:45 +0000
Manifest next update: Tue 04 Aug 2026 16:00:45 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: DblBOBoCd5URpbxJC1r7lkmhcBclah9xtf5H2xm16Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Jul 28 16:00:45 2026 GMT
Not After : Aug 4 16:00:45 2026 GMT
Subject: CN=6a68d22e-b14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:ff:c8:c6:13:71:7e:6e:9a:43:52:15:72:
fd:6e:79:8c:a6:23:fd:a9:66:ba:5b:9f:17:d3:06:
6c:45:5f:2d:c8:94:8f:c1:fb:70:94:d7:7f:77:21:
4e:ad:bd:74:03:58:d1:d4:a8:64:c2:85:6f:71:19:
3a:9d:37:e7:0b:e0:ea:c4:fd:76:3e:84:93:dc:5a:
86:b6:6b:da:57:89:2f:62:ae:95:2d:5d:5d:9c:25:
09:01:0a:01:18:04:c7:d1:48:b2:7b:87:63:c3:eb:
05:6d:80:f2:77:c9:1f:de:b7:7b:2d:41:64:51:96:
fa:50:b6:0c:32:f5:92:ce:07:83:8f:45:da:16:c2:
00:bf:ed:6d:72:4e:54:a1:9d:80:19:00:7a:69:b4:
35:26:19:7f:ef:ae:54:2f:68:cb:b2:5f:80:3d:cf:
4f:4f:7d:98:a5:77:b2:3f:fa:57:a5:3c:84:c1:34:
21:3c:6e:ed:78:02:85:49:ac:1b:62:f6:d9:12:e9:
0d:eb:2a:09:cc:9b:f4:05:57:44:34:45:05:79:e1:
6d:b2:f1:9f:74:c1:d4:aa:2b:99:cc:e1:59:20:33:
70:12:02:24:36:6f:c1:17:5b:c9:aa:57:c3:33:60:
5e:d1:fe:1b:ea:da:2a:2e:c3:95:bb:ff:d9:bc:48:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:8E:9F:B5:C2:04:9D:B4:06:8D:BD:50:C5:52:E9:5C:D7:08:EC
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:03:ad:7d:a5:bd:e6:c2:3d:dc:cb:f9:89:5d:fd:d3:b0:
6d:d8:c0:c2:4e:5d:df:4a:26:83:28:33:30:bb:8f:48:fa:bf:
8c:3f:66:61:f9:81:99:2c:aa:22:12:fb:d5:8c:85:4d:94:b1:
12:8a:4c:44:e6:fb:4f:14:0e:fd:a2:9f:25:a8:d9:f9:5f:85:
3d:94:3f:df:cf:bf:fd:4e:d1:94:51:db:6c:29:dd:ef:11:9e:
6a:05:a7:49:d9:f3:de:77:9c:8a:b9:08:99:c6:0a:46:9a:72:
3e:00:01:c1:c7:f1:06:59:a8:54:85:d5:14:eb:47:9d:63:5a:
08:85:14:b6:bc:02:d6:a4:7c:35:75:1d:e2:0d:19:49:d1:e9:
37:ca:fd:c4:5c:29:65:8d:0a:6d:39:5d:14:a4:19:9a:c9:6c:
56:65:03:4f:01:d6:a5:d3:28:cc:37:8b:bf:31:27:67:dc:bd:
db:10:9a:1f:12:0f:c5:ef:00:da:80:ed:b7:a6:a5:52:3c:d6:
9e:16:a4:28:fb:5d:89:b5:de:1d:74:e1:7b:2c:23:ad:33:9e:
ea:87:ad:6a:b4:13:9a:2f:79:2f:3a:ce:50:c4:b7:fb:05:92:
cf:bb:8e:fb:3f:15:03:a4:fa:42:dd:e7:92:3f:b1:49:e5:ab:
b7:37:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:32 2026 by rpki-client