
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: uFGwyNB4dymgkfmRxZoaMnIa0aFEUrepQiIse+eGoTw=
Subject key identifier: CA:48:68:65:5C:09:74:E0:DB:19:39:A9:0E:9C:6C:3E:6A:79:BE:32
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 01A2
Signing time: Thu 23 Jul 2026 05:46:05 +0000
Manifest this update: Thu 23 Jul 2026 05:46:05 +0000
Manifest next update: Thu 30 Jul 2026 05:46:05 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: IFMK6N2KHsc8u6Z0lbm7Vf72btmt2RX5UdRLffMUT80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Jul 23 05:46:05 2026 GMT
Not After : Jul 30 05:46:05 2026 GMT
Subject: CN=6a61aa9d-3f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:6a:d6:e3:a1:0e:32:12:20:76:e0:05:f8:
95:a6:fc:e6:07:95:8a:74:99:23:88:cf:f5:62:1a:
82:4c:90:7e:a9:68:99:8e:7d:2d:fd:99:6d:ea:c5:
7b:8d:87:1e:e9:40:5b:c6:1a:4f:68:e5:70:f4:b0:
a1:82:ca:0b:2a:83:c8:68:8b:6e:42:77:a6:9f:51:
fe:f3:2c:e2:3f:f0:8a:31:74:1e:33:86:93:64:79:
81:7c:53:64:8b:05:e9:8a:b9:a1:64:0e:d7:fa:19:
dc:c9:0c:95:27:49:4f:56:4a:6b:68:c8:b0:a5:73:
87:72:aa:63:e0:22:26:d0:d9:8a:cd:4d:d4:b0:1d:
df:5d:c9:56:62:90:a1:da:23:a7:10:76:b7:0e:f1:
a4:10:fd:d4:46:84:b0:66:3d:74:91:ea:75:c2:da:
af:39:cb:d6:bd:ee:e1:07:71:8d:ca:f0:d3:6d:62:
f7:65:ff:08:1f:cd:ca:e2:5a:73:5f:f1:94:92:96:
61:69:01:90:01:e4:49:53:6c:52:4d:28:02:36:c6:
7a:e0:62:6a:4f:f3:5d:1c:a1:e4:6b:e8:d1:8c:55:
73:19:14:48:80:a5:ff:c5:c4:a6:70:ab:30:47:9b:
c3:52:56:54:81:be:f3:b4:8f:c0:52:d6:d8:37:d9:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:68:65:5C:09:74:E0:DB:19:39:A9:0E:9C:6C:3E:6A:79:BE:32
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c7:3c:0a:12:d7:be:80:22:56:51:01:8f:b7:65:7e:1c:51:
80:b0:09:2d:92:14:0a:3a:22:b9:94:f7:00:25:75:ca:af:a3:
95:5c:79:63:09:ec:95:e3:b9:11:aa:5e:98:0c:5b:ca:9a:12:
86:a3:c5:86:94:a4:a7:50:9d:70:c7:d7:6b:0b:f7:55:a6:2e:
88:49:dc:d4:82:93:f6:27:b4:3f:cf:e0:3e:43:a4:f3:70:04:
f7:e9:5a:7b:23:00:89:68:fb:6b:f3:63:3f:e4:a9:45:d7:fb:
52:11:5b:30:21:18:dd:90:d9:39:d3:c2:b6:43:34:be:97:11:
d8:67:0c:50:37:ce:88:06:ff:7c:2e:75:cd:a2:fb:b0:51:ff:
90:87:de:f1:67:df:e4:9a:14:6b:94:3c:2e:3c:3c:29:2e:48:
47:85:77:b9:84:88:89:09:c7:74:cd:3c:0c:a4:87:f0:ba:1b:
00:b2:72:51:75:d1:86:56:a3:50:85:c3:ff:7c:ee:93:3b:ba:
08:38:5e:fb:11:34:a0:c5:fd:b2:43:97:83:1e:49:94:58:20:
b7:43:2e:2e:7d:1d:17:ce:cb:03:61:fd:73:c3:58:83:f1:e3:
77:be:d0:6c:70:3e:88:4a:1d:12:8c:76:4e:f0:02:8e:31:56:
89:e8:32:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5
ODJFQzdENzkwHhcNMjYwNzIzMDU0NjA1WhcNMjYwNzMwMDU0NjA1WjAYMRYwFAYD
VQQDEw02YTYxYWE5ZC0zZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhBq1uOhDjISIHbgBfiVpvzmB5WKdJkjiM/1YhqCTJB+qWiZjn0t/Zlt6sV7
jYce6UBbxhpPaOVw9LChgsoLKoPIaItuQnemn1H+8yziP/CKMXQeM4aTZHmBfFNk
iwXpirmhZA7X+hncyQyVJ0lPVkpraMiwpXOHcqpj4CIm0NmKzU3UsB3fXclWYpCh
2iOnEHa3DvGkEP3URoSwZj10kep1wtqvOcvWve7hB3GNyvDTbWL3Zf8IH83K4lpz
X/GUkpZhaQGQAeRJU2xSTSgCNsZ64GJqT/NdHKHka+jRjFVzGRRIgKX/xcSmcKsw
R5vDUlZUgb7ztI/AUtbYN9m11QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpIaGVc
CXTg2xk5qQ6cbD5qeb4yMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF
RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk
NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvcc8ChLXvoAiVlEBj7dlfhxRgLAJLZIUCjoiuZT3ACV1yq+jlVx5YwnsleO5
EapemAxbypoShqPFhpSkp1CdcMfXawv3VaYuiEnc1IKT9ie0P8/gPkOk83AE9+la
eyMAiWj7a/NjP+SpRdf7UhFbMCEY3ZDZOdPCtkM0vpcR2GcMUDfOiAb/fC51zaL7
sFH/kIfe8Wff5JoUa5Q8Ljw8KS5IR4V3uYSIiQnHdM08DKSH8LobALJyUXXRhlaj
UIXD/3zukzu6CDhe+xE0oMX9skOXgx5JlFggt0MuLn0dF87LA2H9c8NYg/Hjd77Q
bHA+iEodEox2TvACjjFWiegyWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:06 2026 by rpki-client