
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: 6X4sG5iiW4Mv6ncRKGnj7mwuF8i5+42eTAMkld3nwFc=
Subject key identifier: 8E:DF:9D:8D:DF:6F:B9:A4:FA:88:BE:49:9F:E3:D9:D2:F5:2F:6F:82
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 0309
Signing time: Sat 13 Jun 2026 01:15:42 +0000
Manifest this update: Sat 13 Jun 2026 01:15:42 +0000
Manifest next update: Sat 20 Jun 2026 01:15:42 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: Gni1WWZwUyOwEN0Ly+k+yrvRNpgFvHxxyvQXiXPVWvg=)
2: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=)
3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
4: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
5: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=)
6: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
7: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
8: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Jun 13 01:15:42 2026 GMT
Not After : Jun 20 01:15:42 2026 GMT
Subject: CN=6a2caf3e-b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:6e:8f:e4:29:86:25:62:fd:16:9f:0a:84:
e7:9a:4e:27:8a:6b:1a:6a:ac:2c:7d:81:f9:3a:3d:
42:38:91:54:90:07:85:7b:b9:00:df:5c:80:82:d2:
be:dd:e5:5d:d2:0a:25:8f:f4:68:df:a1:4d:9a:1f:
e5:9e:42:c3:b1:dc:73:ad:36:ad:90:18:76:4d:95:
6f:c5:89:2b:ba:39:11:e1:15:21:da:b9:cb:27:26:
81:97:ef:1f:3d:0e:1f:b2:5f:7b:25:50:f3:c2:ac:
63:89:ef:ff:4d:34:94:6a:3e:bd:1f:04:e1:7a:9a:
a0:2b:4e:2c:05:bf:2e:b2:96:5f:40:f5:a2:e1:22:
e3:f1:e9:f6:82:9a:e1:55:73:a4:e5:90:39:64:1a:
e5:9f:f1:88:a4:57:14:c9:e4:d2:cc:35:65:11:2a:
f4:15:fa:55:52:e2:2f:72:92:8f:ec:b0:5e:bb:45:
1f:d0:d2:bb:74:83:09:96:ac:ff:7a:2c:e8:2c:d0:
61:b1:87:60:3b:3a:1b:99:e2:5c:ee:c2:c4:24:52:
9d:a1:c7:fa:c4:b3:b5:f4:fd:96:4c:42:7b:0b:0b:
df:12:ef:d7:6c:20:18:58:02:c5:53:42:23:76:78:
11:9c:0b:f9:3b:5c:c1:67:0f:5f:a6:5d:04:d7:61:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:9D:8D:DF:6F:B9:A4:FA:88:BE:49:9F:E3:D9:D2:F5:2F:6F:82
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1c:72:8c:f6:c0:cd:04:9c:bc:34:cb:b0:bc:ae:c8:24:53:
75:4e:ee:6b:0c:88:c7:d0:c4:43:96:9b:6c:14:bd:a0:79:69:
4b:16:72:82:fd:c4:95:22:42:f3:e0:12:8b:e0:ff:44:fc:74:
9b:65:7c:6e:6c:5f:98:31:9e:3d:be:4d:7f:2a:5e:94:eb:24:
35:ad:ae:f3:9a:cb:9a:50:9d:d3:6f:cc:34:7b:40:91:fe:75:
2f:e7:7f:36:50:fb:20:45:79:0c:f5:96:4b:67:24:13:a4:cc:
ca:b1:fe:3e:bd:1e:71:05:f4:55:42:b0:e9:07:c7:03:e4:a2:
99:29:8c:7c:cb:76:d6:46:0c:c5:b7:eb:a0:74:17:d7:65:17:
12:9f:a1:aa:56:1e:58:6d:bb:6d:84:4e:5e:a0:59:47:23:4c:
1d:04:dc:9d:98:09:8e:9f:b0:14:f3:b7:1a:2a:10:e8:92:22:
cf:c2:8d:d4:e8:85:41:e7:4f:20:77:17:da:d5:11:8c:80:cc:
81:52:76:e4:a5:d2:1b:ab:e6:06:dd:d5:ef:e3:cb:0f:ac:54:
2e:a3:e9:d3:ab:a6:0c:49:0d:72:d9:a1:b4:04:c1:53:4c:34:
50:b4:11:25:4d:c5:28:0c:5d:3b:86:ec:bc:c7:cb:df:64:8d:
0d:fc:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:05 2026 by rpki-client