
$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier: Zbso5DXUu6y40VgDkhVLZoz+mVoljPQBjjrsFfA9TYE=
Subject key identifier: 24:79:59:8C:C7:47:4B:03:D8:56:1B:03:8D:3D:B0:D5:00:E4:45:F5
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number: 0200
Signing time: Wed 13 May 2026 03:12:20 +0000
Manifest this update: Wed 13 May 2026 03:12:20 +0000
Manifest next update: Wed 20 May 2026 03:12:20 +0000
Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: pc482fqYw0qMggqADBfpEN+36TN6eJhQ+2QDHCShAkg=)
2: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
3: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Validity
Not Before: May 13 03:12:20 2026 GMT
Not After : May 20 03:12:20 2026 GMT
Subject: CN=6a03ec14-3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:37:c8:1e:1c:7b:96:31:c4:67:56:a6:e3:
fc:1c:57:6f:92:76:bd:e6:51:db:47:c7:3c:34:9f:
40:08:aa:05:7d:a2:21:36:cc:a4:fb:fa:6b:08:25:
03:48:43:69:af:39:e2:41:21:81:03:b5:68:f1:a1:
9b:43:2e:e9:3f:75:3e:cb:10:41:69:2a:94:bd:e5:
e9:56:97:91:0c:36:75:dd:1a:99:20:64:df:2c:26:
c5:61:0c:42:6e:9b:1f:1d:41:9f:fa:b0:fc:7e:32:
09:83:5e:da:1d:ed:70:3b:45:e2:2c:90:5c:9b:83:
1c:e7:9e:5c:e7:1a:94:e5:c4:81:48:a7:0d:31:42:
50:4b:fe:0c:eb:ef:4d:d4:2e:e7:2d:01:c2:61:fd:
d7:a1:92:87:1e:33:2e:a5:06:29:2f:21:e2:92:dc:
4c:79:54:63:20:c6:98:27:69:ad:a3:02:e8:da:9b:
46:65:3a:0a:f0:7d:eb:bb:d8:29:45:9c:70:16:8d:
06:d8:f1:89:58:b9:83:84:c7:2e:61:e6:3d:b0:ca:
bc:08:60:7b:58:cd:ba:e6:4f:78:0a:a6:44:42:e9:
9e:99:60:41:2f:01:1c:d7:e8:f7:5f:13:c4:f2:b0:
29:0a:75:1c:5e:79:97:ed:dc:12:8c:df:2c:17:56:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:59:8C:C7:47:4B:03:D8:56:1B:03:8D:3D:B0:D5:00:E4:45:F5
X509v3 Authority Key Identifier:
keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:94:90:6c:7e:f4:cf:a0:b6:a8:18:7f:0a:ee:43:c2:65:
85:fc:c8:bd:fb:a1:0a:02:09:82:48:42:2f:8c:24:e8:50:86:
29:bf:4d:df:ae:2d:42:ea:45:0d:f9:37:71:ef:de:05:f0:d1:
05:00:76:92:33:c5:3f:1f:ae:95:af:15:c1:34:91:c4:34:9f:
d8:28:63:32:fd:6e:77:1c:93:ae:9d:26:ed:75:d7:49:69:a4:
c2:15:3a:66:a7:e9:45:dd:2c:40:69:99:01:6e:ad:67:95:d2:
8a:df:71:85:e5:44:97:43:77:6c:39:05:c7:9b:55:42:44:27:
c0:0e:18:c7:65:00:bb:38:28:11:05:93:35:ec:96:38:b7:c6:
c4:42:0f:bb:dc:6f:47:ab:a4:be:30:2b:c0:0b:c5:ab:70:e4:
24:57:7b:65:14:78:f9:13:2c:96:1d:80:d1:2c:27:c6:4f:3a:
d7:a2:22:76:9d:b6:f1:b1:47:1a:61:07:ef:07:8f:e7:b5:2d:
aa:32:5e:16:f5:82:c2:ff:c3:69:ec:db:c6:87:80:30:27:38:
38:e2:28:db:09:2a:8d:de:ae:db:40:88:51:83:c5:1c:76:7b:
a3:09:2d:2a:25:14:7f:4a:25:de:9d:9c:18:b4:fe:63:87:d2:
96:80:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:25 2026 by rpki-client