
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier: CUjmr4DPVrc2D4fTRA/iJ2qVe/9iVgdkzjQ+UGKpIv8=
Subject key identifier: 97:26:D0:D3:5B:A5:86:6F:3D:BC:A5:72:92:3A:55:07:F5:94:94:F1
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 19B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number: 197C
Signing time: Tue 12 May 2026 16:26:33 +0000
Manifest this update: Tue 12 May 2026 16:26:33 +0000
Manifest next update: Tue 19 May 2026 16:26:33 +0000
Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: 10da7rMdrrzMob70rz6Kp95+GAbGJJUfID4orboYa9A=)
2: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=)
3: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6585 (0x19b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: May 12 16:26:33 2026 GMT
Not After : May 19 16:26:33 2026 GMT
Subject: CN=6a0354b9-312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:7b:e4:ef:32:9d:0c:2d:ac:ab:10:1f:72:
db:7b:67:1c:b8:9a:f3:d6:c7:01:1d:79:1d:fe:c9:
a1:3a:95:1a:29:1c:fa:a9:cb:85:f0:2e:3a:2d:89:
46:b8:5e:e0:f7:fa:af:d8:fb:87:b5:b7:b5:f0:07:
1a:bf:39:d0:a4:33:c5:50:79:e6:9c:57:f4:c9:f4:
d0:52:17:c4:fd:0e:a5:77:b9:3b:1f:67:1e:9e:f9:
42:b2:05:2a:a9:bf:3b:9e:7a:b9:b6:fc:1a:e8:1a:
f3:5a:cf:61:e0:12:d3:72:53:25:19:22:01:10:8f:
fa:4f:df:7b:00:80:91:30:f6:ae:06:e2:84:70:21:
c3:2b:76:e2:6b:93:ce:53:5a:be:bd:80:7f:57:d8:
99:c4:70:9b:ce:29:7a:a3:7b:90:30:a5:e5:e0:a3:
d7:c7:c8:09:40:0a:f5:96:a8:28:da:e5:85:3c:08:
77:be:af:50:04:df:c0:13:7e:79:12:c1:6c:09:20:
85:5a:ce:4d:83:e8:91:df:fe:b6:84:17:13:7f:a6:
f1:6d:5d:e6:fd:5f:5f:56:f6:32:cd:b7:90:13:26:
89:5b:bc:12:9c:1e:5b:26:67:d0:22:66:01:ed:f8:
54:a5:82:5c:00:2e:f0:1a:91:bc:5b:75:8c:5a:1f:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:D0:D3:5B:A5:86:6F:3D:BC:A5:72:92:3A:55:07:F5:94:94:F1
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:12:5f:41:c2:95:6a:06:62:38:83:4c:50:8d:bc:16:22:4e:
c7:0e:54:6c:d3:ca:eb:95:44:f7:15:b2:78:4a:50:2c:3d:1d:
cf:1e:37:3f:fc:10:3b:d5:88:ef:24:bb:32:33:66:c2:4a:65:
ed:ad:cd:ee:4a:bf:c7:54:7d:ce:d7:d0:ac:fe:fa:22:b2:ee:
6d:1a:0c:1c:4b:b1:da:a7:40:53:e0:75:9f:59:47:fd:e5:dc:
20:09:cc:e1:ca:f5:17:9b:f4:5b:1c:1d:f8:d1:05:88:74:77:
f7:1e:39:00:65:89:ee:c4:8b:86:57:85:58:12:3a:82:df:63:
70:4f:6b:c1:f4:ef:d4:37:ff:97:14:b2:6d:89:eb:2a:3d:48:
ae:ab:b4:42:89:ee:35:fe:90:b8:37:34:3c:c6:b3:b3:ea:85:
f1:4e:78:aa:c9:28:38:88:fc:b8:86:52:b1:a0:8b:aa:fe:ae:
3d:50:35:60:c0:e7:04:0f:ac:4e:bb:ad:c7:d4:2d:3d:54:79:
c6:79:22:9b:11:5d:15:29:c5:52:63:1f:85:17:f3:a9:4f:c4:
64:55:9c:e5:f1:59:de:23:46:ed:ac:15:71:e4:69:b0:29:d2:
94:14:e0:30:43:73:99:80:e5:ea:88:b7:ff:92:5c:3a:1f:80:
d7:ff:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:00:33 2026 by rpki-client