
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: M5F75KdjoOggtHhw1rm6sXMV9jB+BTCzPLaIC7T9sVw=
Subject key identifier: B5:50:2C:54:D1:A1:2C:5B:81:29:EF:08:BD:2F:1B:ED:02:F2:F8:AE
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 0118
Signing time: Mon 11 May 2026 05:55:14 +0000
Manifest this update: Mon 11 May 2026 05:55:14 +0000
Manifest next update: Mon 18 May 2026 05:55:14 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: bTRdhFxUB6PotlKURUAXeRGt04Xj7esSJJMCSqn14xE=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: May 11 05:55:14 2026 GMT
Not After : May 18 05:55:14 2026 GMT
Subject: CN=6a016f42-5fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:3b:45:b4:c9:ff:12:de:4e:80:d5:11:35:
53:ae:d0:69:17:51:16:29:5b:83:68:94:7c:2d:05:
7a:98:27:89:88:79:51:6a:51:15:3a:2c:e5:03:da:
ac:51:db:10:73:16:a7:65:c7:0c:33:99:0b:65:d9:
31:cd:e1:a8:d6:a6:ea:7d:03:dd:9e:a9:f4:fe:79:
c6:b7:02:3c:60:76:f0:bf:e1:6b:a4:d7:4c:6f:41:
2a:0d:c0:c3:0a:be:d9:20:80:b0:64:3c:40:c7:be:
c7:01:4f:29:ec:e3:1d:a7:cf:02:2c:9c:26:8f:ba:
68:db:05:81:1f:35:27:a8:7b:19:99:3a:dc:b4:bc:
13:75:48:e5:11:d6:f6:b3:f0:87:5f:9b:75:13:f3:
e5:ae:a5:0b:5d:0a:03:07:c4:c0:a0:57:ea:b3:87:
ae:f8:cf:4f:fb:6e:e2:1c:ca:ee:d5:c6:62:5b:1e:
e9:49:e1:9b:c4:d6:01:14:83:12:8a:dc:d5:82:40:
00:14:b9:59:73:61:75:30:f4:84:5e:5f:7f:44:01:
07:d0:a3:a0:8d:26:21:2f:23:90:e8:a1:19:59:2b:
30:0a:86:18:ff:f0:37:1d:a3:2a:38:eb:90:7b:23:
57:52:d2:09:16:60:ab:f6:d0:16:0d:07:59:2d:94:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:2C:54:D1:A1:2C:5B:81:29:EF:08:BD:2F:1B:ED:02:F2:F8:AE
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0b:fc:e4:8e:5b:b7:e9:49:f7:ca:fe:81:02:31:ad:7b:81:
1e:44:49:7c:71:7a:c7:a4:a4:42:0e:de:e6:28:68:12:0b:64:
3d:63:c2:73:09:5b:a4:17:51:10:3d:5b:5c:75:07:a8:38:2a:
d0:63:70:67:55:51:d4:7d:2c:37:a5:dd:98:80:55:70:b9:4f:
f6:d8:7d:96:02:5b:78:26:18:f0:28:31:48:39:7a:43:e2:84:
57:9e:66:4a:2b:31:7b:75:4b:b7:60:98:41:57:8f:ae:e7:1f:
d3:95:b8:61:dc:7b:4e:59:8e:6d:4b:b6:66:42:df:5d:d2:f3:
41:04:8d:7a:c0:38:1f:e7:da:00:7b:7a:8c:ba:5f:03:44:2c:
8c:83:07:0f:c6:aa:3e:df:79:8f:71:64:d2:2e:4e:1e:7c:ac:
d0:5c:f8:18:63:46:d4:a8:d6:41:ce:43:87:ee:da:fa:43:1a:
1b:4b:3b:ac:d8:65:88:3b:fa:d8:0b:74:b8:9c:c2:a5:09:82:
a3:6e:8e:fe:58:a4:db:b5:c7:27:05:1d:8d:49:bc:91:54:a9:
df:23:9d:8d:12:08:37:5c:22:e9:10:5e:dd:9a:ec:e4:2c:01:
ee:cb:06:84:ab:4c:4e:1c:06:a9:8b:b7:13:0c:a6:e5:ae:31:
93:54:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:26 2026 by rpki-client