
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: xi2l5GT/Ta2KdwNVKQ016W3QpibPvgT/k6YBFl48IvE=
Subject key identifier: 5C:ED:48:7B:61:D2:93:BD:CB:22:78:C0:02:30:F5:73:8E:2A:CD:C6
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 0175
Signing time: Mon 11 May 2026 04:48:02 +0000
Manifest this update: Mon 11 May 2026 04:48:01 +0000
Manifest next update: Mon 18 May 2026 04:48:01 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: pCFcZp17ec+GTQSkNk5SEg5Fvd6mZ03jYeWGw82wlE8=)
2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: May 11 04:48:01 2026 GMT
Not After : May 18 04:48:01 2026 GMT
Subject: CN=6a015f82-787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:e8:f9:90:53:89:2f:23:90:04:4b:dd:20:
74:33:96:fd:90:07:ea:b6:6d:d4:29:57:b3:ea:9c:
7f:1b:70:9e:7c:00:62:cc:b4:b5:6f:17:c0:97:ec:
81:6d:4e:d8:88:da:da:15:2c:e4:06:9d:03:8e:51:
ad:2e:dd:66:dd:ed:eb:a5:ab:a4:bc:11:69:22:57:
2a:dc:94:ff:62:e9:51:20:ec:96:f2:97:ee:c9:10:
5b:67:0e:3f:71:6d:78:bb:c6:40:ad:e9:c8:27:ae:
37:9e:09:0f:40:28:3b:bf:7a:29:f7:ce:4c:2d:71:
97:74:90:2d:a8:ee:bf:a9:2a:28:07:5d:5e:a2:d2:
f0:fc:f0:39:dc:ca:a5:31:89:e9:8b:c2:a0:64:79:
fe:5b:a0:8e:fe:3d:ed:9d:a5:1b:5f:dc:5e:9c:be:
7b:50:f4:bd:ec:b5:7b:22:77:11:f4:02:01:e5:09:
4f:6e:42:1d:3a:c3:bf:33:b0:6b:e0:a2:74:03:e3:
ab:3d:d2:45:36:67:89:c8:07:ef:13:ff:fe:68:08:
7c:c0:be:65:df:74:72:71:15:cc:3a:89:2e:86:b4:
51:0e:72:21:28:f2:b6:5d:38:23:04:32:95:16:95:
9a:c0:57:f9:6d:fe:f7:00:a7:0c:6f:b8:0c:b7:0d:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:48:7B:61:D2:93:BD:CB:22:78:C0:02:30:F5:73:8E:2A:CD:C6
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a1:8c:e4:8e:51:fb:99:e5:f2:90:8a:10:36:28:c2:d0:8e:
5c:1b:9d:9b:c9:92:bf:61:8d:10:4e:0e:34:6c:ca:2e:e1:a5:
f4:bf:c0:cf:25:9f:23:96:1b:c9:12:d9:f4:41:09:09:8e:ce:
16:16:bc:f4:c8:29:99:52:8b:f6:a4:d8:67:27:c1:97:60:25:
ae:31:88:0e:fe:11:fe:16:0b:75:81:61:7b:a4:52:03:bc:fb:
26:44:95:fe:1c:2e:b6:f5:52:53:14:97:67:b2:ee:e6:a1:de:
6e:f8:e5:3c:a1:da:bb:6a:08:51:83:b1:9f:21:5c:4d:6e:88:
83:47:74:1d:d9:57:7b:e9:65:7c:3d:00:5c:a0:71:08:20:d1:
7a:72:7a:9d:85:f8:e0:35:fc:2b:d4:c6:49:d0:29:d4:e0:b1:
d8:62:cc:a0:9a:4d:14:16:80:fb:db:b9:95:ac:cc:9c:2f:3f:
b1:9b:b4:f9:dc:f2:ea:49:c1:d3:2e:37:b1:98:a9:ff:e2:2c:
c5:fb:88:1e:d3:3c:23:9a:dd:e9:91:64:f4:41:f4:10:de:57:
97:a5:80:69:3a:ae:af:12:c0:1d:a2:ea:fd:a1:2d:f2:28:5d:
5d:8d:90:43:26:7d:cf:14:a0:0f:71:c2:5a:5a:6f:71:b3:f1:
3a:22:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:54 2026 by rpki-client