
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier: LS7o0H19/4C9Cz04SDbcjf40PuuSO6fR55Bua8Qg0jA=
Subject key identifier: C0:4C:98:40:BC:5B:E3:26:90:6E:AF:66:78:FC:FB:0A:75:7A:6C:48
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number: 0698
Signing time: Thu 16 Apr 2026 22:23:54 +0000
Manifest this update: Thu 16 Apr 2026 22:23:54 +0000
Manifest next update: Thu 23 Apr 2026 22:23:54 +0000
Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: r/DHzU6VbC9mrVmwA/bEDqYiExAcT7nfAT8f+b94U7s=)
2: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: Q5xlJCAiF8KCnEHIB5dc5jerjCip28+WlID9p/XyUfA=)
3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: zzXvOA3n0XL26um5myog94HDs9qJeV0AH7BZVHkqiz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: Apr 16 22:23:54 2026 GMT
Not After : Apr 23 22:23:54 2026 GMT
Subject: CN=69e1617a-2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:73:13:e3:6f:99:e5:ee:84:8b:71:aa:fb:
64:b3:fd:2d:47:e7:32:15:3c:06:05:ce:fd:98:77:
40:2c:3a:3e:26:07:c8:96:ee:25:d1:ba:13:ee:ab:
f9:5f:80:e3:bd:9d:e6:2c:e4:8f:e4:c6:3a:d7:a4:
a8:80:13:e8:5b:86:14:ad:06:d8:c2:1b:16:0b:b7:
d3:18:77:b7:b0:d0:a4:e7:db:e1:89:61:5f:6d:70:
af:5b:54:a8:31:32:db:b0:71:73:d0:6d:90:ec:e0:
87:d1:7b:74:dd:92:2e:da:33:61:9b:81:24:47:b5:
05:da:c4:60:71:32:ad:db:97:74:1c:5b:07:6d:98:
94:24:16:f4:ec:7f:db:23:b9:56:21:9e:02:74:d6:
dc:a5:95:eb:cb:c8:e6:a7:3f:9d:71:e2:fc:49:65:
af:fd:e5:d1:25:0e:e8:11:46:49:92:57:e1:f2:92:
21:3c:cb:a3:9d:18:69:cf:c8:64:11:2a:3d:da:fe:
8b:9c:dc:e9:c2:20:6f:ee:86:ac:cd:f4:ff:8c:a9:
0c:52:05:a4:95:8d:ab:17:9f:97:d1:67:24:40:f9:
c9:0f:be:27:b5:a0:88:dd:a2:9b:4a:9a:20:f7:b3:
31:85:03:d9:91:9c:bc:d8:bd:75:f1:e1:cc:2c:5b:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:98:40:BC:5B:E3:26:90:6E:AF:66:78:FC:FB:0A:75:7A:6C:48
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:bc:50:66:a3:6d:30:58:eb:81:db:41:cd:f6:85:95:ef:
53:a7:29:19:28:6b:92:57:93:2f:39:05:21:30:0c:89:32:4f:
86:ff:8c:2f:33:5a:b1:af:52:fe:54:49:81:e3:d7:11:88:dc:
ab:62:53:4a:20:bb:0a:b0:ee:94:1d:a2:a3:8b:d7:47:be:05:
39:59:5a:91:3e:5b:ee:1e:a6:12:91:9e:79:b9:de:a5:3c:4f:
d4:b1:6b:b0:17:19:aa:88:17:fa:48:c4:39:c6:6b:42:95:4e:
0e:76:62:ba:46:f7:1f:b6:23:25:2e:68:06:b4:3e:3d:ec:4d:
88:ae:e9:9e:e2:ff:4b:d9:61:0e:d1:f3:51:08:78:af:b0:80:
cd:39:db:58:b1:f2:3c:2c:f5:81:c8:eb:8d:3a:13:67:96:9b:
6e:a3:6a:76:1b:39:b9:78:cf:1e:16:27:f7:c8:6f:21:41:cf:
c7:47:81:fb:2a:5c:4e:93:85:32:c2:9e:69:b6:0a:6f:99:97:
1a:24:0d:0d:5c:52:28:13:51:9f:24:11:5e:43:92:8f:1e:f3:
fe:21:9f:1a:68:2a:a8:1e:07:39:00:e2:98:53:40:c0:5b:3b:
85:ff:79:33:3f:08:3b:ae:23:06:b2:b7:70:eb:61:0c:e9:82:
4b:d5:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:17 2026 by rpki-client