
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier: Lpz44FJOyOvPC5Yewb2vIx7POlFSfGOjN8xe8IRa6lM=
Subject key identifier: 1F:57:4A:8D:5F:E2:80:0F:FF:58:5C:B4:E4:79:EA:7A:8E:4D:E5:B2
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number: 012D
Signing time: Wed 13 May 2026 05:38:42 +0000
Manifest this update: Wed 13 May 2026 05:38:42 +0000
Manifest next update: Wed 20 May 2026 05:38:42 +0000
Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: rtDdL/qDC1l8ATHX8DyGZ8Wh3F/jTH+LjF7yMN4gzHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Validity
Not Before: May 13 05:38:42 2026 GMT
Not After : May 20 05:38:42 2026 GMT
Subject: CN=6a040e62-5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:25:a1:31:77:45:77:bf:d3:c0:4e:03:7e:
29:11:18:77:f7:90:48:bb:5f:b5:c3:15:33:78:4a:
20:88:b4:1d:09:7e:82:d5:87:1e:3b:3d:c4:19:b2:
95:a9:c1:e0:53:a2:8b:93:35:cc:2e:2f:0c:be:43:
9c:cd:a2:2e:09:80:48:1b:5f:61:9d:a2:a8:95:db:
07:97:0a:27:5e:ad:41:f5:55:68:ec:b7:e7:c9:3c:
56:4d:b6:28:09:08:1f:60:66:5e:06:d6:0f:fa:a8:
35:25:85:2c:66:4b:50:8c:6d:d5:74:72:6f:87:7a:
9a:d6:5e:c5:d4:1f:44:6c:3e:e4:04:d6:46:f9:f8:
ca:cc:ac:bb:4a:c1:30:37:f2:ae:50:f7:f1:ee:05:
a3:41:6b:fb:99:27:da:67:81:51:67:8b:be:28:be:
a4:21:f2:b9:63:06:23:58:e5:72:51:0f:34:64:4d:
6a:15:55:1b:f0:79:08:1a:53:f8:0f:3d:9a:9f:9d:
fe:ce:26:7f:e2:0c:af:e1:c2:2e:32:34:42:47:05:
2d:ba:18:cb:cc:62:4c:45:27:ba:29:66:9f:54:cd:
49:a5:ac:17:6c:83:d2:ac:a5:b1:d5:17:9e:81:12:
4f:2b:9d:e6:e2:07:a5:2c:4d:10:ff:59:d9:4b:b5:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:4A:8D:5F:E2:80:0F:FF:58:5C:B4:E4:79:EA:7A:8E:4D:E5:B2
X509v3 Authority Key Identifier:
keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:40:6b:d4:c8:fe:9a:12:a8:dd:70:fd:14:e4:a7:b1:a4:2a:
ee:23:6a:73:36:46:15:59:ed:08:3e:4b:3d:be:f1:84:28:c0:
06:3a:43:d1:2a:2e:1b:f7:11:b0:43:ea:cd:34:06:c4:2f:55:
16:4a:d7:c0:91:05:24:16:9d:48:bc:76:96:35:30:d9:3d:04:
d5:3b:c2:4a:49:49:4f:9a:5f:25:0c:61:53:19:6a:38:24:7e:
b9:58:aa:29:fe:cc:36:37:77:5b:37:cd:4b:06:27:f0:c8:2e:
27:9d:78:3e:e2:a4:50:59:84:f7:78:a3:96:15:cf:a5:7f:de:
26:71:5e:1f:e3:43:8f:44:b6:e7:bb:20:b1:75:68:5b:83:97:
ff:e1:a8:e3:20:3f:0d:47:e7:70:ca:23:c9:e5:74:03:34:09:
b2:28:8a:c6:aa:17:48:1b:43:01:5b:94:89:ed:d2:5c:c2:f4:
42:04:cb:08:17:e6:c7:16:d3:92:ac:20:f4:80:a9:a5:35:8b:
b8:3a:ef:4c:5f:13:12:b0:d5:3f:60:b1:49:14:39:ae:5d:3e:
cd:30:24:66:b3:1f:1b:77:ac:f7:c0:56:d5:44:cd:49:94:e8:
30:50:e5:f4:d8:36:fc:b1:50:b5:d4:2d:36:c6:d6:4c:e6:a1:
34:27:91:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKEU0MkU0MjAwMkE4Mzc4N0E2N0FGOENCOUE4NTFGOTM5
OTc0NkMxMzIwHhcNMjYwNTEzMDUzODQyWhcNMjYwNTIwMDUzODQyWjAYMRYwFAYD
VQQDEw02YTA0MGU2Mi01ZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkEloTF3RXe/08BOA34pERh395BIu1+1wxUzeEogiLQdCX6C1YceOz3EGbKV
qcHgU6KLkzXMLi8MvkOczaIuCYBIG19hnaKoldsHlwonXq1B9VVo7LfnyTxWTbYo
CQgfYGZeBtYP+qg1JYUsZktQjG3VdHJvh3qa1l7F1B9EbD7kBNZG+fjKzKy7SsEw
N/KuUPfx7gWjQWv7mSfaZ4FRZ4u+KL6kIfK5YwYjWOVyUQ80ZE1qFVUb8HkIGlP4
Dz2an53+ziZ/4gyv4cIuMjRCRwUtuhjLzGJMRSe6KWafVM1JpawXbIPSrKWx1Ree
gRJPK53m4gelLE0Q/1nZS7XPtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9XSo1f
4oAP/1hctOR56nqOTeWyMB8GA1UdIwQYMBaAFOQuQgAqg3h6Z6+MuahR+TmXRsEy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy84MENFMjc4QTg0
NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVIcG5yNHk1cUZINU9aZEd3
VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dUSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy84MENFMjc4QTg0NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVI
cG5yNHk1cUZINU9aZEd3VEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEkBr1Mj+mhKo3XD9FOSnsaQq7iNqczZGFVntCD5LPb7xhCjABjpD0SouG/cR
sEPqzTQGxC9VFkrXwJEFJBadSLx2ljUw2T0E1TvCSklJT5pfJQxhUxlqOCR+uViq
Kf7MNjd3WzfNSwYn8MguJ514PuKkUFmE93ijlhXPpX/eJnFeH+NDj0S257sgsXVo
W4OX/+Go4yA/DUfncMojyeV0AzQJsiiKxqoXSBtDAVuUie3SXML0QgTLCBfmxxbT
kqwg9ICppTWLuDrvTF8TErDVP2CxSRQ5rl0+zTAkZrMfG3es98BW1UTNSZToMFDl
9Ng2/LFQtdQtNsbWTOahNCeRYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:15:06 2026 by rpki-client