
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: gGeMBaiAMWO+RuMylswGo7IMCrbDa+swnqiIFUQlgEw=
Subject key identifier: 91:07:7F:7E:58:52:81:4C:0B:75:F5:18:35:52:54:BD:65:51:38:B1
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 22FE
Signing time: Fri 12 Jun 2026 15:53:54 +0000
Manifest this update: Fri 12 Jun 2026 15:53:54 +0000
Manifest next update: Fri 19 Jun 2026 15:53:54 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: X1WzcFoLXjNZY5lUh31G+Qq6f5X2Nqtn2oypOB/ToTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Jun 12 15:53:54 2026 GMT
Not After : Jun 19 15:53:54 2026 GMT
Subject: CN=6a2c2b92-877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:42:c4:61:99:97:dc:1d:b5:b3:d1:d8:2d:
dd:05:e1:71:bb:78:ee:d5:47:76:b1:2f:d4:f8:ba:
d6:c1:bb:3b:5f:f4:26:5e:01:96:2a:a7:04:28:51:
b4:bc:47:34:a0:bb:52:4f:80:08:7b:11:a0:3c:ee:
f5:c7:b6:c3:30:c4:d1:46:b4:63:33:85:9f:06:ef:
7c:9a:26:ed:f4:56:d2:c1:6e:f5:75:03:18:5a:e7:
ae:4d:34:9d:e0:3c:69:37:d7:c6:b1:4b:bb:c2:7d:
11:27:a3:a2:8f:2f:a9:d7:3f:0a:55:a4:eb:25:e6:
f6:3f:4f:4a:3a:dd:a3:aa:3f:d3:14:0b:4b:72:a1:
bd:6a:d4:61:44:31:89:63:aa:b7:8f:d2:e6:c2:34:
83:03:35:92:48:ca:9e:84:7b:ae:c3:d3:a8:41:03:
b2:12:12:4a:36:6a:b1:1e:a5:9a:3b:7d:0b:23:d2:
2e:43:36:a5:ba:c4:f5:6e:5a:83:f9:13:c4:d6:03:
c9:ba:0f:14:ea:72:7a:18:52:67:81:0c:f5:34:0e:
66:ab:0d:5b:91:d5:e8:6c:7c:cf:90:49:15:f8:53:
90:fa:b2:33:07:c2:59:ea:31:33:78:d4:95:93:97:
b1:65:a8:68:1a:52:76:6e:a9:c7:52:5b:e0:08:a1:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:7F:7E:58:52:81:4C:0B:75:F5:18:35:52:54:BD:65:51:38:B1
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:eb:8a:76:28:a7:56:8e:8d:4f:63:2c:73:dd:23:59:3a:
72:d6:29:8b:3a:d8:64:45:03:b2:bc:b1:c7:4b:56:b8:b4:ce:
e1:bf:99:22:28:01:25:c5:0e:c6:c4:a3:6b:1b:5b:3e:fc:c7:
9f:eb:61:33:73:ba:73:9b:74:6b:5f:f1:6d:04:1d:2d:d0:bb:
33:a7:b0:de:ef:66:9b:96:d0:f4:c5:7a:47:3b:34:06:d2:97:
c9:dd:6d:09:97:cf:1c:89:28:15:42:ce:c6:85:4d:46:39:fd:
d7:97:b4:bb:3a:f8:f8:2b:4f:cb:7b:e8:83:04:69:e3:90:c8:
e9:fe:7a:be:60:40:ea:a4:18:fd:18:80:59:80:a0:f3:cb:f2:
2a:c4:99:84:e0:59:bf:fd:65:84:cd:6a:d8:42:24:b2:36:81:
cb:be:fa:f4:a2:80:f7:6f:6d:04:0a:77:f8:a0:1c:dd:c6:14:
74:ce:3f:aa:c1:dd:8e:e2:41:ac:96:8f:98:df:c0:ed:42:e8:
4f:40:3d:80:8a:bf:d0:09:0b:94:eb:95:9e:85:da:4a:bb:d5:
52:7b:bb:54:13:f5:48:db:8e:4b:17:6b:e3:54:61:29:b8:ab:
6a:78:69:dd:fe:4a:bc:71:cd:b8:b3:dd:3f:bf:11:cc:1b:a9:
11:b2:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:03 2026 by rpki-client