
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier: /4uI6+hsIMqzM2ZJL/0oDNDgjfFp5djhwskcGMgdt6s=
Subject key identifier: F3:08:8F:34:E2:29:97:66:38:B9:DB:24:40:FE:84:00:DE:B9:40:ED
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number: B3
Signing time: Thu 23 Jul 2026 09:01:46 +0000
Manifest this update: Thu 23 Jul 2026 09:01:45 +0000
Manifest next update: Thu 30 Jul 2026 09:01:45 +0000
Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: qAEkXDLC6nPPE8jVShVNnDoN9tgbULcSmu69gAZYA0M=)
2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Validity
Not Before: Jul 23 09:01:45 2026 GMT
Not After : Jul 30 09:01:45 2026 GMT
Subject: CN=6a61d879-e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:e2:e1:99:1c:70:cf:a3:63:7e:e4:b8:88:
a8:f3:66:6d:42:a4:6d:ab:a9:34:57:19:bf:fd:8e:
29:db:f1:41:3d:c8:c9:8e:8f:48:fc:22:fe:79:82:
9e:54:46:01:b1:b0:c1:c7:f0:65:e6:52:9d:95:3e:
5e:10:52:e9:a3:4e:b0:9f:c4:e4:97:e9:04:2e:17:
15:3d:ca:b7:76:68:7a:0f:6b:f6:24:51:ee:4c:a0:
08:11:de:f6:2d:ea:25:cb:d2:f9:fd:62:9f:35:d9:
94:88:da:dc:34:cb:a8:d0:30:98:b3:bd:eb:36:b6:
9e:dc:50:e8:02:a0:29:94:4a:b7:8e:f7:d3:60:a1:
6f:f8:95:01:76:4b:d5:65:47:9a:44:8f:bb:b0:c8:
83:42:48:53:6f:a9:cf:73:f6:52:96:0a:ee:9b:3f:
a6:f5:ae:4e:98:5c:4b:e0:dc:f7:4d:89:9b:96:a8:
1a:a2:b2:19:d2:3c:37:2e:b3:53:b6:4b:6d:ae:73:
54:1b:1d:e7:92:b6:75:5f:d8:4e:0e:bc:81:18:3f:
93:90:80:09:f5:0c:d7:3a:06:36:d9:f6:57:3a:e6:
43:de:7d:b5:60:bb:e4:7a:2d:cd:91:81:03:1e:38:
71:9a:0b:94:14:ef:e8:3f:6d:a7:e5:1d:5f:0c:69:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:8F:34:E2:29:97:66:38:B9:DB:24:40:FE:84:00:DE:B9:40:ED
X509v3 Authority Key Identifier:
keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:70:b2:24:5d:cf:61:21:96:e3:fd:aa:6f:ee:17:08:21:
2b:05:cd:28:5c:75:6b:ad:2d:ef:2c:03:ba:fe:bc:36:ec:4a:
e1:e5:49:d6:15:bf:e1:1e:52:fd:ce:06:b1:a8:7f:77:f0:85:
37:21:74:1e:3d:cb:1f:9d:33:dc:12:61:98:90:2d:c4:2a:eb:
f9:31:d1:89:d9:69:b2:ad:ca:d9:d0:b3:f1:b8:d8:fc:b1:ff:
fd:91:54:81:c5:2f:96:db:d1:91:a5:0a:09:6a:02:f6:b2:66:
0d:4c:0d:cc:2f:a4:51:f9:e4:8d:49:cb:78:49:1c:13:cf:ec:
24:42:56:33:16:79:23:f1:5e:dc:cd:62:91:f6:72:35:5d:31:
71:56:0a:bc:21:e1:7d:4c:78:1f:66:18:22:17:f3:c5:40:89:
2c:c4:aa:3e:1c:3c:05:65:c1:3d:9c:68:3a:0a:d9:e2:6f:48:
f4:c6:5c:c1:89:4a:8b:49:0b:3b:65:2e:a2:b5:d8:1b:7a:34:
c6:fc:05:d9:c0:25:ba:d1:4d:8f:a4:98:b2:08:88:69:66:9a:
a8:c3:ef:58:d9:81:5f:8c:3c:81:56:3c:6d:53:f7:cb:fe:08:
72:d0:44:e6:ea:33:9e:8e:93:c8:b9:54:49:7c:63:e4:ed:7e:
2b:08:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:07:56 2026 by rpki-client