
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier: SGkl/FTz1VmclEv9wQMX0xyTxHoksCNJuR/EIcNtif0=
Subject key identifier: 61:9C:8C:9F:D6:67:61:55:07:A4:49:FC:BE:A2:7B:61:B3:7D:2E:AE
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0367
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number: 034B
Signing time: Thu 23 Jul 2026 02:01:26 +0000
Manifest this update: Thu 23 Jul 2026 02:01:25 +0000
Manifest next update: Thu 30 Jul 2026 02:01:25 +0000
Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: HFIz2mPxPAltFehx5t12JAAKe1FftZzaKVllAYvhono=)
2: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=)
3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=)
4: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871 (0x367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: Jul 23 02:01:25 2026 GMT
Not After : Jul 30 02:01:25 2026 GMT
Subject: CN=6a6175f5-86b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:01:0f:82:34:a5:e7:be:2a:76:92:2b:5a:
01:89:76:cf:17:5d:8d:24:e5:60:1f:7d:1c:11:ca:
93:4d:ac:7e:5d:a9:08:b2:18:bc:64:d1:79:95:e7:
ed:32:50:65:df:19:04:71:fb:37:1c:ac:2a:dc:bc:
12:c7:68:36:68:dc:d8:46:8b:35:37:62:8a:b2:3c:
27:fa:5e:da:d2:9f:c7:5f:9d:fc:26:f7:b8:59:93:
7e:82:93:92:e4:ef:9a:0d:e9:82:7f:ea:fa:bb:6a:
07:cf:c8:58:db:0a:20:ef:e6:c0:e9:98:1f:b1:c9:
6b:d6:53:f6:49:60:8a:57:7f:4c:21:18:3e:5d:5e:
8c:c5:30:51:c7:24:2a:e9:a1:72:0c:53:10:ad:52:
12:40:58:54:03:22:b5:d0:0d:73:77:22:3c:16:56:
0d:60:29:b7:80:3a:ee:b8:00:d3:2e:19:46:40:73:
20:a9:75:c6:e9:4e:56:c1:7e:f0:de:53:52:f7:76:
e4:28:77:78:45:44:14:f4:77:76:03:d9:3c:98:66:
a7:ce:17:4d:52:0a:f7:d3:d9:02:9a:f3:ff:44:ef:
4b:19:fb:59:29:69:98:78:a9:07:40:bb:da:0b:eb:
54:3e:6b:6b:c3:e0:b8:eb:7f:ad:b5:5e:3f:a9:d6:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:8C:9F:D6:67:61:55:07:A4:49:FC:BE:A2:7B:61:B3:7D:2E:AE
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:d6:17:de:25:97:b5:85:55:ab:f8:fd:70:f6:0f:d8:a5:
3e:0f:e1:29:b1:bb:08:00:bc:6c:61:40:de:59:d3:a6:de:25:
bb:d4:81:44:21:55:3b:ee:d1:72:22:e9:b7:19:d5:57:d8:fc:
fb:06:8b:83:22:f9:a9:7e:ce:b2:43:45:95:f8:31:f5:d9:1f:
cd:68:cb:fe:67:7f:2a:e7:da:6b:eb:49:52:bd:08:61:4a:9c:
ad:9e:92:5c:b9:e5:0a:17:e5:58:1a:a0:a5:63:89:25:df:cd:
30:37:a2:9f:a7:0b:bb:2e:31:41:64:25:dd:20:ff:c6:1f:97:
20:02:71:0d:02:fe:fb:73:15:9a:4b:5c:71:75:ef:4a:cd:64:
48:1b:11:fc:08:8e:5a:dd:a9:09:cf:8e:2e:f5:90:08:28:0e:
e5:1e:77:48:cf:fe:c9:55:6d:d9:05:dd:64:b4:2f:88:af:7b:
ca:75:a3:de:78:eb:5d:56:57:8b:b9:d3:62:71:2c:d6:d8:69:
73:ac:a7:a6:29:83:29:55:c4:a7:02:33:6f:c0:3f:b0:a7:f3:
0e:38:6d:0d:96:61:d0:51:01:3e:4c:b4:51:f5:dd:f9:d5:1e:
5d:b2:b9:0e:6e:50:e2:c5:46:82:53:b1:7b:45:76:e7:74:07:
9e:ce:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:53 2026 by rpki-client