
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier: 4RStwpi/s4wcuiD68GDPR2lQUAY18ZspEE7dJAgzoe4=
Subject key identifier: F7:89:DA:D2:4B:A1:A3:BB:27:A7:27:4E:C1:6C:37:96:0E:33:88:D7
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number: 070E
Signing time: Tue 24 Mar 2026 21:39:30 +0000
Manifest this update: Tue 24 Mar 2026 21:39:30 +0000
Manifest next update: Tue 31 Mar 2026 21:39:30 +0000
Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: zT74hrAEEtlVFgViRJZlf96MkfgRQzeCJh2M8SWlF1w=)
2: CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (hash: pq/ShMq6opqVMtQXrgs1sUDSAdgfVm501YkelB9HbSY=)
3: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: deYX7DERz5Fq3pqOqtk2nebblC/7DyU94H4A8Lsgo5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Validity
Not Before: Mar 24 21:39:30 2026 GMT
Not After : Mar 31 21:39:30 2026 GMT
Subject: CN=69c30492-9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:43:59:5b:3c:f3:db:40:f8:3d:1d:6d:96:
92:4d:bd:2f:98:c5:5d:de:7e:75:61:e2:b7:ea:3e:
5a:cc:2e:e6:28:c0:cb:17:9e:bf:f3:64:76:ea:e8:
3d:63:d2:25:52:93:7f:28:a9:6f:b7:bb:6f:2f:75:
b2:d2:0c:96:fe:a6:f7:73:5e:d6:5b:11:4d:05:22:
36:0a:b6:f0:f7:b7:8c:67:6e:55:b3:24:09:34:12:
ed:dc:7a:ef:4a:50:87:9f:29:87:12:57:a4:71:ec:
17:b2:86:e0:52:66:e3:a8:c1:79:de:4e:2b:0c:0a:
47:0b:ad:bc:17:0f:04:16:d4:53:45:4d:c6:76:27:
93:8c:2b:62:47:71:12:0a:e3:65:67:44:ed:00:77:
cf:73:30:53:9d:bc:9a:06:84:7f:d7:6f:54:5d:7b:
53:1a:88:8e:94:70:0e:04:f8:fe:65:0d:f0:c4:3e:
a1:d0:e8:34:79:4c:71:36:61:0a:ed:f7:81:06:2d:
6c:fc:a0:90:a3:69:31:11:64:24:8d:c4:b4:09:e0:
13:ed:16:a6:6b:10:62:40:4c:f9:d1:9e:5a:57:b4:
e8:72:f5:d4:b5:47:20:29:45:88:99:97:1f:d2:01:
a0:ce:36:69:99:89:a0:b4:6e:a0:44:a3:32:9d:91:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:DA:D2:4B:A1:A3:BB:27:A7:27:4E:C1:6C:37:96:0E:33:88:D7
X509v3 Authority Key Identifier:
keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:7b:83:7b:51:ee:80:fd:36:e9:ed:65:4f:d9:f6:f1:0c:
60:6f:6f:b1:1a:a5:64:0f:60:5a:a5:0d:eb:2b:d7:6e:7b:90:
a0:d1:bf:8e:35:9a:aa:09:5e:71:f3:cf:9c:a0:c1:9b:c4:b8:
40:cc:5a:27:65:2d:fc:11:2b:82:3d:77:bf:ea:d4:55:e7:82:
4c:0d:86:ec:0c:d9:71:27:28:14:4c:81:ad:ed:44:04:ef:7e:
24:00:34:62:e8:64:a0:cd:ed:83:69:a0:95:9e:e4:7c:d2:bf:
a9:c9:96:b4:9e:09:ee:66:f0:08:f9:a6:6c:37:56:98:29:88:
8a:cc:e5:bb:b5:8e:75:61:15:53:58:49:46:7c:11:29:c5:19:
82:23:97:22:4a:ce:7f:de:eb:06:71:e5:cc:7e:a8:3a:eb:41:
1a:85:cd:b8:8b:94:ef:52:c7:b0:ef:5a:ca:75:ea:cf:ac:6e:
31:87:75:b2:0b:4b:ba:43:66:80:81:90:02:f9:92:a2:a3:47:
a6:86:64:f5:31:46:ab:1c:25:b1:74:98:83:10:b3:9b:22:34:
c3:6c:c5:ff:23:2c:c2:a1:32:76:d1:4f:4b:e9:22:20:54:74:
69:76:c2:9b:79:3d:4f:9d:12:bc:99:ac:4a:0e:22:de:ba:17:
6b:be:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:13 2026 by rpki-client