
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier: jSIz/RpIepaTLDPNo8GLEQ/lkndPICqtDXxr+fvMQK4=
Subject key identifier: 2E:4B:44:DE:74:69:68:4D:8D:83:82:26:D2:21:15:12:DD:8F:7F:0D
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number: 0727
Signing time: Tue 12 May 2026 21:56:48 +0000
Manifest this update: Tue 12 May 2026 21:56:48 +0000
Manifest next update: Tue 19 May 2026 21:56:48 +0000
Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: tKxffxMzVqX+ia5YP8OPXGB0ZvxymGP0386adIam7I8=)
2: CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (hash: pq/ShMq6opqVMtQXrgs1sUDSAdgfVm501YkelB9HbSY=)
3: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: deYX7DERz5Fq3pqOqtk2nebblC/7DyU94H4A8Lsgo5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Validity
Not Before: May 12 21:56:48 2026 GMT
Not After : May 19 21:56:48 2026 GMT
Subject: CN=6a03a220-9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:2e:fe:ee:1d:84:31:40:5d:c8:ef:ab:b4:
a9:21:71:30:c9:03:02:52:1b:c6:c7:38:d7:72:0b:
0b:25:28:21:e3:bf:de:99:eb:db:db:99:69:0a:70:
c9:b3:1d:8c:0c:e4:1d:dd:d0:e4:5e:94:4e:4f:bc:
8a:bd:49:5a:2c:ad:99:c1:99:dd:dc:63:89:f6:b2:
f1:3d:e5:0c:e2:1c:69:98:1f:8a:a0:61:ed:ca:73:
27:35:46:65:a5:40:10:43:6c:0d:89:9b:4a:58:89:
5c:fe:5d:5f:88:11:d9:81:86:59:f6:90:39:4f:81:
ba:d1:52:af:1f:d2:b2:46:37:7e:6c:11:12:85:d1:
0b:31:55:82:09:08:df:54:1e:3e:01:0c:99:aa:38:
33:3c:93:72:f7:fe:fd:78:b7:8a:14:9c:e8:45:42:
7c:2f:b6:9b:fe:a0:8f:1e:6f:4a:e0:a4:db:f0:3a:
db:be:6e:9a:f3:61:00:ce:c0:a7:e0:11:30:8c:43:
35:94:73:61:a8:d6:3e:3c:e0:3b:6d:b5:ad:d8:46:
7f:7b:9c:e2:53:c9:22:57:da:98:06:a1:b4:0d:c0:
2b:63:cb:a7:e8:57:eb:36:36:e2:f5:70:75:8e:b1:
76:96:74:2e:39:d2:91:fe:6e:2f:d2:7c:06:2a:9e:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:44:DE:74:69:68:4D:8D:83:82:26:D2:21:15:12:DD:8F:7F:0D
X509v3 Authority Key Identifier:
keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:50:d9:b7:68:67:b9:aa:f7:41:3f:b6:ce:5d:47:6d:29:8e:
47:1b:67:19:56:e2:25:92:48:c0:fe:25:96:12:97:ae:78:a9:
29:ce:79:fe:68:88:82:2e:ef:08:be:63:ac:a1:d9:a6:26:b5:
7c:9b:23:bd:02:86:0e:6c:83:7a:1c:41:1c:9e:07:09:18:d5:
94:7a:99:4a:bf:8e:b4:1f:3f:69:5e:45:9d:b0:5f:07:05:5b:
92:2c:7f:c5:7d:dd:4d:8f:1b:a7:f7:8b:90:44:c1:a7:55:e0:
ee:7a:2e:e7:52:ac:93:65:e9:c6:b3:ff:54:8e:c5:20:20:c3:
47:95:3e:a9:1c:92:e7:ad:fc:51:38:84:c3:a3:61:34:50:39:
38:9f:f8:60:55:8e:98:c2:4d:9f:b5:a5:a3:b1:b6:ca:54:d5:
24:c3:d1:0e:42:8f:1a:f9:4a:64:b5:7e:97:4f:a0:9d:34:25:
ff:41:18:a5:da:2d:f3:4e:99:c0:7f:ae:99:70:64:b4:34:59:
47:fb:68:4c:43:d6:56:e3:90:29:83:6e:7e:ca:25:96:bd:02:
72:6f:a4:3c:df:d9:0f:13:9a:13:e9:e4:1b:47:3a:44:be:16:
c1:7a:ab:57:84:5a:e4:4f:2d:b3:04:ab:da:2c:7f:6a:cc:f5:
2a:75:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:38 2026 by rpki-client