
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier: LOHJEkUpo6SqIwiUrEdnDT/zQ77mmrft7XsRO7Bp7hg=
Subject key identifier: 37:62:65:51:BA:13:73:F8:C1:00:10:06:E4:D0:9A:F3:2F:B8:75:23
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number: 0244
Signing time: Fri 25 Sep 2026 02:30:56 +0000
Manifest this update: Fri 25 Sep 2026 02:30:55 +0000
Manifest next update: Fri 02 Oct 2026 02:30:55 +0000
Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: 4mSzP9AzAt++sa5SdsMXjHS0QEJ5pb3RO2jZ4fd0Yqo=)
2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Validity
Not Before: Sep 25 02:30:55 2026 GMT
Not After : Oct 2 02:30:55 2026 GMT
Subject: CN=6ab5dce0-ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:56:37:96:85:7a:06:81:a4:c6:2a:63:7a:
8d:36:26:5b:d4:43:d6:ce:aa:bd:51:64:c4:c2:67:
55:78:14:cd:37:a1:47:88:3f:b8:9b:47:9c:55:99:
51:f0:08:47:21:0c:50:48:a8:96:51:a6:f8:af:99:
24:a0:11:8d:1d:39:76:75:2c:80:82:92:ee:74:1d:
b1:ca:ca:9a:6a:90:5b:ea:09:e1:e3:94:d5:36:f2:
a3:0b:07:63:d5:31:40:29:f1:c4:aa:c4:be:3d:e1:
a8:41:55:55:ad:e5:69:e0:b8:74:fb:7f:53:29:33:
9b:9d:2c:31:fe:e5:20:6d:24:ab:09:51:e2:10:13:
89:09:dc:04:53:c4:db:e1:17:1a:cd:e3:d8:8e:74:
3f:53:9a:c1:49:c7:ec:1f:d4:d2:0f:fd:a6:67:da:
76:7f:08:07:2f:a6:8b:06:62:1c:d0:3b:fd:14:48:
f2:db:c0:d5:e3:16:cf:07:1e:a9:83:e4:37:8b:49:
48:a2:9a:e6:88:17:6c:71:f4:ae:21:15:84:ac:c3:
7e:7f:73:b6:c7:06:2d:90:63:bf:0d:f5:15:0f:06:
84:4f:79:ee:5b:56:b5:95:db:a2:a8:71:c0:54:3e:
78:87:e0:93:79:78:66:e8:c8:37:3e:26:7e:77:22:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:65:51:BA:13:73:F8:C1:00:10:06:E4:D0:9A:F3:2F:B8:75:23
X509v3 Authority Key Identifier:
keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:35:e0:5c:e7:38:56:f3:f0:1f:d0:e4:cb:07:67:cd:bf:
10:a8:69:2a:15:e9:20:27:06:b7:04:a6:91:5f:02:c7:3a:d9:
6a:7d:35:a3:fe:91:4d:73:68:31:7c:c8:3a:31:9e:85:22:72:
7d:7d:2e:0a:97:66:11:38:6b:7f:39:d0:d9:8c:ae:c9:a6:67:
63:08:02:37:f4:9c:c9:4a:91:7e:94:6c:5a:ae:04:76:f1:15:
7a:e0:50:a4:3d:9f:ae:d7:a1:27:6f:9d:07:b5:ad:37:14:6a:
85:d5:a6:ec:8e:7d:95:c5:ac:b7:dd:2f:be:cb:98:9b:97:88:
df:c0:ec:8b:82:04:6d:02:2a:c4:c3:65:8b:76:9f:2d:26:d3:
53:26:40:98:ae:27:b7:7c:c7:6b:75:a2:a2:52:46:64:d9:15:
58:a0:17:88:91:43:9c:ec:a2:c4:c3:3f:d2:3c:fd:80:ca:ab:
17:ff:29:7f:17:da:bb:3a:c4:14:c2:ab:ce:b0:c9:1a:2b:4e:
af:db:e1:96:84:22:d3:08:14:14:77:0d:f5:04:65:a5:7c:bc:
70:8e:17:86:b8:92:6b:a3:fa:bc:c2:f0:5d:0e:ae:06:85:72:
61:c0:e0:5d:f7:51:1f:2c:f1:60:c3:88:73:98:ad:f4:e4:3c:
72:00:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:55:44 2026 by rpki-client