
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier: lZL4X215/p8Tp1glNm6F565l1OHDfOknJa93ES+HxbM=
Subject key identifier: 00:CA:22:FD:8E:9E:C9:36:2C:DB:E3:5D:B7:D2:2E:85:9F:15:58:77
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number: 8F
Signing time: Mon 11 May 2026 07:45:05 +0000
Manifest this update: Mon 11 May 2026 07:45:04 +0000
Manifest next update: Mon 18 May 2026 07:45:04 +0000
Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: 1GSWitaIQBYBAC10dAxxLwtKTtWFbk7QCavplaY8Dxo=)
2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Validity
Not Before: May 11 07:45:04 2026 GMT
Not After : May 18 07:45:04 2026 GMT
Subject: CN=6a018901-cf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:a6:cd:d3:f2:ff:d0:d8:46:6e:e4:55:a0:
4b:1c:c7:95:06:9c:81:3f:1d:64:54:6e:66:1d:40:
8f:11:df:6c:78:0a:87:49:56:ed:f8:00:12:56:85:
79:58:cb:df:82:d1:2f:d3:fc:26:ff:9c:08:22:6b:
f3:9b:5e:de:03:4d:88:99:a8:ee:00:03:08:64:b3:
76:23:af:49:8b:6d:92:43:52:15:ec:d5:5e:ec:0d:
09:17:0e:03:2a:be:68:e7:3e:7a:b9:6d:bc:20:33:
7a:f2:6b:57:60:f9:a3:88:00:f1:3f:84:f5:de:1e:
65:a9:f0:6b:55:bf:87:22:d8:84:8f:0a:94:11:72:
15:01:81:13:e6:e0:78:c8:62:80:fc:b4:ac:6a:6c:
f5:b9:76:b1:c3:2d:57:b9:f8:1c:4f:ae:bc:91:3a:
8c:14:07:03:79:90:d1:65:0e:60:c2:21:04:b3:ad:
13:62:08:9a:04:27:d2:91:0d:f0:8e:20:0f:47:40:
24:ab:fe:a9:53:eb:67:02:28:f1:c4:90:fb:bb:54:
c9:79:8e:6a:c6:64:0f:a6:0b:08:fe:9d:d9:ef:e1:
cf:e6:e9:dc:d3:17:1d:e1:10:1e:9c:08:89:00:28:
de:da:1a:f5:76:50:de:31:37:fc:5f:21:38:ac:16:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:22:FD:8E:9E:C9:36:2C:DB:E3:5D:B7:D2:2E:85:9F:15:58:77
X509v3 Authority Key Identifier:
keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:4f:72:37:11:f0:71:8d:22:99:82:a1:7d:46:64:b5:4e:
fd:d2:10:43:b5:67:3f:5c:fc:ed:ef:73:9d:8b:c0:f1:41:ec:
19:c2:d2:87:36:23:ee:0c:48:57:e3:d6:0d:59:40:de:94:8b:
95:90:99:44:81:28:c7:4a:a8:d9:02:2d:1c:50:70:a5:de:27:
36:8b:3e:69:99:3e:b9:d7:99:02:29:4f:cd:f7:ea:f0:3f:b5:
99:66:79:83:db:87:08:c8:c4:5e:1d:fc:e2:52:4e:bf:6f:12:
80:05:8a:b6:ad:91:9f:7b:f3:d8:51:cd:cb:c5:19:23:19:11:
c9:f8:cf:80:d8:8a:0c:59:48:cc:fc:b4:c0:fa:c4:09:e8:79:
51:16:05:75:0c:da:2a:74:5f:f6:10:ad:6a:cb:04:05:08:92:
41:e0:d8:b1:cd:ab:34:be:1d:92:7a:72:96:59:5d:ff:86:34:
8a:71:7c:b0:be:d7:dc:28:54:be:71:26:9f:9b:54:be:ab:65:
e8:09:68:66:45:d0:27:65:d5:ae:9f:2b:d8:9a:58:26:64:65:
29:d5:69:4d:38:0a:a3:88:aa:eb:be:63:83:da:28:7e:9f:df:
7d:77:d2:5b:15:82:cf:b7:41:f9:17:93:28:fa:b8:05:3b:fb:
fd:d9:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:31 2026 by rpki-client