
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier: WElCSKZR5aGw2R6A2qYHLeMZmK5i7H457137g7POjVU=
Subject key identifier: F5:9C:2E:45:87:E2:D1:F8:E0:E4:26:66:C0:58:ED:13:89:EE:42:07
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number: 5C
Signing time: Mon 11 May 2026 08:14:52 +0000
Manifest this update: Mon 11 May 2026 08:14:51 +0000
Manifest next update: Mon 18 May 2026 08:14:51 +0000
Files and hashes: 1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: 8j9+7PYuPiPH1lL6cNNn4zV2lgO4wPFpxI6WWb3d62E=)
2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Validity
Not Before: May 11 08:14:51 2026 GMT
Not After : May 18 08:14:51 2026 GMT
Subject: CN=6a018ffc-0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:fa:c6:8d:a3:78:8f:d4:9e:99:b6:f7:0b:
fb:00:cb:14:1a:a3:cb:ec:89:05:05:82:64:a9:90:
90:e2:2f:01:18:da:0f:fe:ef:fa:ba:64:81:11:a5:
9d:6e:71:7b:60:e8:09:b2:3e:23:cb:9d:84:89:e5:
52:d0:26:99:dc:9e:64:6e:67:ef:41:7b:68:52:10:
b5:46:61:14:ae:55:9d:40:e5:d4:f3:c2:05:e5:bf:
2d:0b:72:25:9b:09:02:43:9d:8a:61:85:68:21:ab:
f9:e2:a2:0a:bc:ed:8b:e8:67:32:3e:14:3d:31:3f:
92:e0:c5:61:d6:53:b5:50:f0:a6:df:d2:20:22:ea:
b4:8b:a5:95:73:89:5c:40:2c:80:52:b1:37:c2:3a:
35:bf:96:63:84:fd:1c:86:53:f4:fd:46:19:67:52:
4a:d2:cc:d9:64:6e:37:58:25:a6:b0:d5:46:bb:93:
57:86:6b:41:79:7a:b7:cf:59:11:ed:03:83:50:93:
47:be:0f:b6:86:86:a9:5c:57:cd:85:73:4b:e0:86:
f0:29:61:dc:fe:e7:30:ca:90:41:07:f0:cd:ca:27:
a1:e8:27:bc:ef:91:cc:fe:02:55:b1:a0:bf:20:d0:
96:69:c5:1b:41:e4:05:9a:cc:86:54:2a:31:d1:64:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:2E:45:87:E2:D1:F8:E0:E4:26:66:C0:58:ED:13:89:EE:42:07
X509v3 Authority Key Identifier:
keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:46:03:e6:5d:e6:ed:44:67:5c:47:bf:44:d4:e4:25:51:
b0:6b:b4:c4:f3:b8:0b:06:b3:fc:bb:ae:11:28:44:1a:ff:42:
fb:2d:0a:c3:25:5c:19:e8:16:17:2c:5f:bb:a6:2d:1b:8a:4a:
64:1a:d6:06:cb:b1:32:a4:6e:dd:98:d8:fa:1b:c4:94:21:c0:
7b:75:72:2a:e9:b0:db:f8:fd:2b:38:0f:d7:9f:18:1f:73:14:
6c:4e:3b:0b:f7:33:34:46:38:f4:b4:3d:88:fa:79:33:71:78:
ac:85:18:e4:8e:60:5f:7c:bf:0c:66:93:82:23:bd:e6:4b:bf:
bc:17:3f:2d:dc:96:a8:5e:65:57:f2:f3:74:5e:ac:2e:c9:6a:
85:13:1a:3c:7b:b4:4d:16:8b:55:c3:83:89:43:5b:b3:64:e9:
dd:a4:b4:22:50:13:75:4d:99:3f:c7:c0:ed:63:53:8b:ce:e4:
98:15:c2:62:c9:af:95:be:37:c5:fc:4e:e6:9a:f6:2c:18:1e:
db:a6:60:6e:b1:13:ee:e1:19:96:36:d2:3f:1d:b9:a3:b4:e8:
6f:7f:8f:82:0c:85:c6:c8:41:01:d5:3f:a7:55:0d:46:3c:92:
da:61:94:26:57:89:e5:00:54:14:8e:e5:48:ab:41:83:a1:e2:
cd:49:c1:38
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTJCNTExMC8GA1UEBRMoRUQyM0E4RTg5RTU2QkNCREExQzAwRTQ5N0M0ODgzRDc5
NUU1MkQ1NDAeFw0yNjA1MTEwODE0NTFaFw0yNjA1MTgwODE0NTFaMBgxFjAUBgNV
BAMTDTZhMDE4ZmZjLTBkN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdEPrGjaN4j9Sembb3C/sAyxQao8vsiQUFgmSpkJDiLwEY2g/+7/q6ZIERpZ1u
cXtg6AmyPiPLnYSJ5VLQJpncnmRuZ+9Be2hSELVGYRSuVZ1A5dTzwgXlvy0LciWb
CQJDnYphhWghq/niogq87YvoZzI+FD0xP5LgxWHWU7VQ8Kbf0iAi6rSLpZVziVxA
LIBSsTfCOjW/lmOE/RyGU/T9RhlnUkrSzNlkbjdYJaaw1Ua7k1eGa0F5erfPWRHt
A4NQk0e+D7aGhqlcV82Fc0vghvApYdz+5zDKkEEH8M3KJ6HoJ7zvkcz+AlWxoL8g
0JZpxRtB5AWazIZUKjHRZKxlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9ZwuRYfi
0fjg5CZmwFjtE4nuQgcwHwYDVR0jBBgwFoAU7SOo6J5WvL2hwA5JfEiD15XlLVQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MkI1LzZGRkI2MjRBQzVC
MjExRjA5NEEwNzkyQkM0RjlBRTAyLzdTT282SjVXdkwyaHdBNUpmRWlEMTVYbExW
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN1NPbzZKNVd2TDJod0E1SmZFaUQxNVhsTFZRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MkI1LzZGRkI2MjRBQzVCMjExRjA5NEEwNzkyQkM0RjlBRTAyLzdTT282SjVXdkwy
aHdBNUpmRWlEMTVYbExWUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAI90YD5l3m7URnXEe/RNTkJVGwa7TE87gLBrP8u64RKEQa/0L7LQrDJVwZ6BYX
LF+7pi0bikpkGtYGy7EypG7dmNj6G8SUIcB7dXIq6bDb+P0rOA/XnxgfcxRsTjsL
9zM0Rjj0tD2I+nkzcXishRjkjmBffL8MZpOCI73mS7+8Fz8t3JaoXmVX8vN0Xqwu
yWqFExo8e7RNFotVw4OJQ1uzZOndpLQiUBN1TZk/x8DtY1OLzuSYFcJiya+VvjfF
/E7mmvYsGB7bpmBusRPu4RmWNtI/HbmjtOhvf4+CDIXGyEEB1T+nVQ1GPJLaYZQm
V4nlAFQUjuVIq0GDoeLNScE4
-----END CERTIFICATE-----
Generated at Wed May 13 08:34:32 2026 by rpki-client