
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
File: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json)
Hash identifier: +jBR0gNB6yHb8u1Ez+DQQg81Hf/PpmvKM5mxLeWEyFw=
Subject key identifier: 31:C5:9B:19:7B:E8:00:BD:FC:35:7C:E5:2E:CE:6E:57:13:64:CB:C6
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial: 0780
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
Manifest number: 075F
Signing time: Wed 22 Jul 2026 22:19:14 +0000
Manifest this update: Wed 22 Jul 2026 22:19:14 +0000
Manifest next update: Wed 29 Jul 2026 22:19:14 +0000
Files and hashes: 1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: dxyZFUPc1AUrPEB6IC+0UpIpIu6g6qdLvgvEG2vZ/qk=)
2: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: xmNlNCsfvMmHsdcmX4KVkYV3wcWZ95ED3GAYee+h//Y=)
3: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: ad/IMuIcQJVnfvBAZiAISr8PuPV2aVB3x3OVq7eXORo=)
4: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: Xm2UbzC8JcbcQaKl1BwOz8Aimyt0wB8QVDQl3a8IBfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Validity
Not Before: Jul 22 22:19:14 2026 GMT
Not After : Jul 29 22:19:14 2026 GMT
Subject: CN=6a6141e2-06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:69:ba:f7:fe:3e:89:bd:2f:b5:e4:bb:1d:
61:10:d7:d6:c8:3c:d2:d9:3d:c4:2d:60:27:ec:86:
82:ff:c5:dd:8f:6d:ff:38:45:95:28:ed:93:8e:1d:
cc:0a:85:78:b6:af:de:48:15:30:fa:bb:6e:f0:a1:
ed:b3:a4:fe:bb:26:4e:0d:89:2c:de:fb:8b:31:bd:
20:1b:dc:ef:a3:58:95:e3:26:f9:8b:3d:16:97:26:
46:5d:27:2b:f3:66:b4:82:40:ab:e0:1f:04:e9:1a:
55:22:3d:08:7e:f3:dc:ac:a1:cd:dd:fb:26:30:e8:
c9:66:1e:ef:87:cb:fc:71:66:28:53:6a:46:2c:ba:
17:65:65:95:b4:8e:bf:1d:9a:63:7c:cb:36:87:67:
8e:8b:df:58:fc:4c:0d:0f:c7:8b:c1:0e:bf:43:6f:
f1:56:f1:d5:ec:96:69:fb:d2:a1:c7:4a:ff:60:e5:
e6:82:d4:15:b3:22:7c:6e:bf:84:fb:cf:fb:54:a3:
62:8a:39:2f:66:a7:b8:ea:9f:83:85:f8:65:70:ed:
a1:c9:bb:c6:9c:9d:25:00:2a:b5:89:3f:41:44:72:
5e:94:f6:49:bc:f9:f1:f7:a0:58:f7:00:76:34:55:
ff:54:37:5e:23:12:ba:72:86:8c:61:d0:75:0b:c4:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:9B:19:7B:E8:00:BD:FC:35:7C:E5:2E:CE:6E:57:13:64:CB:C6
X509v3 Authority Key Identifier:
keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ef:9c:a8:61:34:81:99:9f:60:7e:3b:cf:93:89:14:e4:70:
cd:7f:0f:91:a0:56:20:09:88:22:d8:57:8b:30:e5:6c:48:d5:
7b:26:81:7c:40:ee:cd:c5:4e:3b:dc:56:0d:47:c7:37:71:3f:
07:8b:f5:45:31:0a:e3:92:ba:58:db:50:91:44:be:3e:51:a8:
3f:bc:64:d9:12:9f:c9:c3:d9:cf:a2:b8:ca:78:68:51:7e:a3:
5f:eb:4e:af:a7:5c:7d:40:29:53:17:7a:80:11:7e:9f:fc:2f:
99:c1:fe:b5:9e:33:2d:58:4e:7c:f2:82:b6:a0:a9:b1:ae:83:
5f:15:3a:1b:59:fe:44:d9:69:ee:7c:1f:62:a7:81:a9:82:1b:
31:78:92:33:9e:71:10:7f:70:6e:f6:df:81:8c:f2:3c:0e:f6:
d8:7b:7b:75:c1:71:c9:c5:ad:c2:44:fd:70:5a:d8:9a:1e:4b:
6e:cd:d8:8f:8f:21:31:72:f2:a3:d7:36:b3:8f:5f:5f:da:d2:
2a:50:29:b0:57:cd:7d:49:b0:80:7d:64:ed:94:21:41:45:71:
f4:b5:2a:fe:81:cb:95:4f:e8:4f:6f:99:c0:46:e5:28:12:ee:
90:1f:73:4d:c9:b4:e1:1d:98:81:4e:48:41:a2:ee:96:2c:0f:
e4:2d:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:41 2026 by rpki-client