
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: l6ktwpjYVqRqyISRQYflrrBDs2+1hVzYzx4h+is2kzI=
Subject key identifier: F8:05:1A:4B:FA:F1:75:D9:9E:46:AD:0E:E8:DE:62:24:07:B3:6C:2D
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 0985
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 095A
Signing time: Tue 12 May 2026 20:10:06 +0000
Manifest this update: Tue 12 May 2026 20:10:06 +0000
Manifest next update: Tue 19 May 2026 20:10:06 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: srViml9At9H1sqc5qOkEnVA4eIVqKlzoT+fkdvOzTag=)
2: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
3: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
4: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
5: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
6: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: May 12 20:10:06 2026 GMT
Not After : May 19 20:10:06 2026 GMT
Subject: CN=6a03891e-182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:79:6b:e3:0d:bd:5d:9f:d5:ad:28:bc:01:
8f:51:e0:13:f8:f3:d0:52:33:00:e5:59:a0:cc:7d:
e5:dc:9d:d5:da:01:88:9c:d0:e9:8f:da:9a:c3:67:
37:a5:1a:43:c5:1e:b8:19:0e:66:20:cf:08:ba:ed:
bb:80:97:f1:07:a0:6d:00:b8:f1:e1:e2:e9:32:5a:
ba:a7:dd:48:7c:40:c8:70:bb:fa:d3:a1:1e:80:1e:
f8:1e:cb:82:80:f0:d7:11:0f:cc:10:08:2d:4c:11:
3f:47:21:99:da:b3:1c:25:2b:17:7d:28:64:d8:ad:
6b:68:59:91:59:6c:28:1c:b8:3f:95:d5:be:05:01:
a3:b0:a8:c3:48:fb:6a:92:34:e6:32:88:75:80:66:
94:e6:61:c1:f4:c0:ce:4a:21:7b:4f:40:50:4c:7c:
a5:04:5c:dc:94:02:64:97:78:0a:a6:cf:8c:83:85:
20:d3:b5:93:28:0e:40:f5:b7:8b:fb:71:bc:a8:b0:
06:72:40:06:da:65:d3:2a:f2:db:a8:bb:74:88:82:
ee:b7:dd:19:81:fa:2e:a9:a5:7f:dd:fa:11:68:fe:
59:2f:58:44:d2:75:c7:37:99:eb:54:f7:80:74:8c:
2f:83:61:fd:c5:b2:f8:75:9f:c0:8e:78:32:67:bf:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:1A:4B:FA:F1:75:D9:9E:46:AD:0E:E8:DE:62:24:07:B3:6C:2D
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:51:1f:51:03:52:38:0a:1e:49:1b:22:f4:cf:2e:fa:92:
7f:c6:f0:a4:8d:12:ed:fa:14:21:48:ec:ba:32:f1:a5:1c:35:
04:10:54:74:ff:5e:76:89:22:98:35:64:0b:24:07:f7:19:11:
6c:fa:d6:96:29:3d:94:55:41:5a:93:03:ed:54:aa:73:11:e8:
4b:d7:eb:70:c9:4a:8b:c6:b0:34:c5:c9:2a:80:be:c7:70:93:
fa:03:a4:51:03:b9:18:b0:8f:82:90:39:85:61:c6:f9:da:2a:
77:d9:25:28:1b:9f:1c:84:5d:83:f0:ed:ba:f5:30:e0:bd:6e:
fc:11:c4:cd:04:e0:b5:7f:aa:63:2b:8a:a0:0e:a6:09:bb:8b:
d7:a8:35:d9:f0:0f:aa:ef:cf:67:64:10:3b:40:8d:77:c4:f6:
0e:f4:d7:33:03:72:0f:5b:45:64:33:df:fa:56:3e:03:bf:b6:
08:fe:c1:c7:ae:19:c5:f7:b4:b6:23:a7:04:80:1e:e9:96:f5:
89:b5:b6:27:d2:2c:b9:57:8d:d2:94:f4:a1:e8:6c:1e:4d:06:
66:d1:74:88:62:3d:ce:f8:b1:f9:a5:f3:64:07:1b:6e:1a:84:
2c:6f:4e:d4:c9:c1:58:02:be:6e:f1:39:5e:20:dd:83:c5:4f:
a2:86:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:23 2026 by rpki-client