
$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json)
Hash identifier: VaDbcyTyzYCImHxXjqF5PUl8a8TnsYz3tVc7pfKEEb0=
Subject key identifier: 81:AF:12:AE:9C:A5:E4:01:1D:1E:BF:7C:05:D4:B0:6C:3F:BE:BC:F4
Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Certificate serial: 3594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
Manifest number: 3575
Signing time: Wed 22 Jul 2026 14:57:42 +0000
Manifest this update: Wed 22 Jul 2026 14:57:42 +0000
Manifest next update: Wed 29 Jul 2026 14:57:42 +0000
Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: zjZdwqQvHdeb/CnnREtBhelYnVAT8TD7qX1eUi6xzDk=)
2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: S2c0dPwfKB8uOTngnalR9yGh9E58M2GB2TBOuFJZKU0=)
3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13716 (0x3594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Validity
Not Before: Jul 22 14:57:42 2026 GMT
Not After : Jul 29 14:57:42 2026 GMT
Subject: CN=6a60da66-5b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:98:f3:ab:16:52:4e:34:83:e4:14:68:da:
97:30:e3:04:f8:c7:99:f3:8a:47:9e:fd:b2:bd:74:
6d:08:9e:37:01:5f:fa:f9:3d:68:bc:a9:c2:4c:8f:
5f:65:1a:26:6c:48:52:4b:9c:45:70:9a:6d:ad:1e:
6c:a2:d6:ee:5b:b4:9d:80:6e:ed:5e:d9:40:f4:88:
11:ce:db:85:34:d7:11:e2:ed:f5:1d:cd:56:39:f8:
03:95:bb:ac:ec:6e:56:73:62:7d:7b:a9:67:4d:22:
d1:34:ec:b2:09:75:80:c6:f9:4f:16:fe:09:37:3f:
f9:65:d9:2f:c8:f8:59:0a:29:c3:18:56:6a:3a:40:
b9:67:e1:17:2c:17:72:12:44:6c:cf:54:52:9a:13:
84:31:7b:14:eb:83:f5:a1:7b:72:2c:e0:5d:e9:bd:
cb:1a:37:5c:7b:be:94:b8:dc:82:f8:c0:ed:36:de:
ad:05:68:18:41:21:b0:ec:f5:1b:b5:73:a9:7b:83:
26:1a:9c:9f:a2:17:5b:e1:ad:a3:2a:cb:ef:41:13:
5c:96:ae:1b:7d:c4:e0:c0:96:2f:0d:95:80:54:4f:
37:93:ba:00:44:5a:c8:60:bf:cb:f0:e4:0a:ee:27:
08:84:6b:db:be:0c:a9:df:d5:5b:f7:bd:58:4f:56:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:12:AE:9C:A5:E4:01:1D:1E:BF:7C:05:D4:B0:6C:3F:BE:BC:F4
X509v3 Authority Key Identifier:
keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0b:82:02:79:1e:6f:90:bb:01:4b:f3:21:57:e0:84:a3:17:
cd:17:a5:9c:22:5b:c5:0c:c7:6e:3b:af:0d:b7:f5:5a:57:ea:
9a:7d:98:73:90:85:38:06:bb:a6:03:30:c0:2c:5d:01:8f:19:
cc:c5:38:53:46:4c:35:a4:b2:1e:d8:05:55:0d:73:1b:2e:b8:
68:61:22:63:03:2e:e1:53:7f:46:83:82:97:16:e2:e5:a9:c3:
b4:51:e4:6d:f6:c0:11:91:ec:9d:e0:2b:b7:68:04:d4:b7:a9:
d7:91:52:0b:01:dd:ae:1b:12:24:9a:de:22:74:ba:ff:b1:70:
45:03:28:8d:65:ba:90:92:50:28:c5:86:cb:a3:e8:de:67:c7:
da:47:50:ed:22:71:9f:95:ea:ad:b0:62:e9:3d:b8:28:3d:9f:
c7:26:d2:36:48:ea:77:cb:5c:07:36:54:b8:79:0c:69:4b:f2:
f3:c0:3b:50:bc:a0:7b:3a:b1:86:8c:36:24:ee:f3:a4:dc:10:
59:87:26:7f:ad:c5:06:99:e5:3e:a9:c5:cf:5f:c6:d2:2a:ff:
a4:6c:26:69:3e:d2:a7:76:c9:e0:b8:18:af:b3:73:d5:fb:82:
4c:65:7c:e3:ac:d5:43:db:17:d2:d6:5a:b1:6a:2b:ae:af:1f:
a8:b1:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:08 2026 by rpki-client