
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json)
Hash identifier: vXyphsK4CJ3TN7oSrh0VOZfzpnKZBr4ltjJAnobINhg=
Subject key identifier: E6:D1:09:F4:D0:62:7D:23:00:92:FF:79:3E:0B:90:B0:ED:5D:0C:FD
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
Manifest number: 092F
Signing time: Tue 12 May 2026 20:17:13 +0000
Manifest this update: Tue 12 May 2026 20:17:13 +0000
Manifest next update: Tue 19 May 2026 20:17:13 +0000
Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 3kOY0RMTg/0CkSIeLw0mCvEnJbaVl2F7+VKN9MzPTWA=)
2: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: l+N4J4zxNWyxlfAH9ke4Lwu5X6TI6u4/SfyZolyoLUs=)
3: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: /9OAZib6ORGUsj/nBJu2BYzp5KOlwzvHRnmf3XojSfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Validity
Not Before: May 12 20:17:13 2026 GMT
Not After : May 19 20:17:13 2026 GMT
Subject: CN=6a038ac9-6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:0e:bb:56:1b:69:85:6d:e3:b6:3d:b4:10:
b5:f3:39:e4:0f:11:15:1c:29:6a:5e:c2:b7:e0:82:
e4:b5:27:43:ec:5d:8b:b3:53:ad:62:27:10:4c:7b:
eb:c6:4e:3e:f3:e1:31:ec:10:c9:20:6c:a5:14:30:
74:d1:69:f3:8b:da:24:bd:b8:b6:e1:1e:28:6c:91:
60:ab:e2:7a:eb:c0:f9:59:35:ce:16:7c:d4:a0:99:
78:5f:8e:7b:0c:fe:d2:e0:e8:ec:01:fc:e7:f3:5f:
42:0c:48:f0:99:a4:e5:49:03:88:a9:42:14:17:f0:
0a:57:3b:13:c1:48:9f:6a:99:30:4c:ca:51:b6:83:
d9:f5:a0:31:6b:63:db:c8:1d:9e:a6:24:70:c1:4e:
7d:b5:e7:a5:d9:04:65:59:42:f7:d4:14:6d:4c:8d:
26:45:01:f5:dc:c1:e3:f7:c9:45:91:90:af:9a:52:
96:14:8d:b7:b5:1d:cb:ff:39:05:f3:aa:cf:88:f0:
e3:70:5b:1f:fe:1e:e6:a9:95:9d:65:11:e1:45:2a:
c5:31:9d:2a:d0:ec:d0:86:57:df:95:75:cf:1a:97:
58:20:b8:25:0a:45:b9:5a:c4:1b:f5:72:f9:f8:16:
af:3f:33:a6:15:e9:a8:8c:4c:c0:38:66:69:c4:d1:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D1:09:F4:D0:62:7D:23:00:92:FF:79:3E:0B:90:B0:ED:5D:0C:FD
X509v3 Authority Key Identifier:
keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:4e:5c:28:cc:7f:a4:03:80:41:1f:26:7b:97:57:77:d1:
6c:e3:0d:77:40:be:0a:ac:4b:ce:80:51:e8:ff:05:9d:18:dc:
7b:9e:80:2e:d0:53:38:f2:e8:e2:47:b9:29:8d:2a:fa:5a:18:
56:c0:5a:f8:f8:fc:ea:98:f1:c9:9a:13:2e:41:f1:8b:be:cd:
d6:13:d7:b2:ee:81:35:0e:10:57:14:a9:c5:50:38:f9:0d:07:
7b:6e:bf:38:b0:27:1c:b2:8d:fc:d9:a8:9e:bf:1b:ec:ef:88:
8d:34:4e:0b:a9:44:d3:ad:f5:48:97:f2:c3:e5:de:fd:17:ac:
97:b7:88:88:61:23:7f:c6:0c:c2:4e:15:08:d3:d0:d8:0d:b5:
fb:6d:68:52:bd:1d:96:00:ee:71:f4:97:3d:ff:56:67:8f:6f:
ce:c6:f4:be:bb:3b:0d:d6:40:a7:01:0d:51:c1:a9:c4:02:e7:
c6:96:11:0b:ed:07:df:dd:ce:e0:c8:91:fe:07:ff:e8:19:c6:
58:c8:88:45:9d:99:07:c4:c3:fa:60:74:6a:49:86:9b:4a:f7:
31:8b:e9:ad:a8:50:51:24:2f:51:69:5c:b3:02:bd:ae:19:22:
b8:ba:cd:a4:39:1b:04:16:bc:fd:48:e4:db:33:ce:35:d3:92:
0c:52:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:31 2026 by rpki-client