
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier: GvENW22D/yyqMVRD6tLuvnrOW9dZdh5qXvvWNz/9jXY=
Subject key identifier: DB:52:68:87:4E:6F:D8:5B:B9:D1:53:98:EF:FC:B4:3E:64:05:DC:5A
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer: /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number: 072A
Signing time: Wed 22 Jul 2026 22:35:49 +0000
Manifest this update: Wed 22 Jul 2026 22:35:48 +0000
Manifest next update: Wed 29 Jul 2026 22:35:48 +0000
Files and hashes: 1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: sWqPfQ8jTe2DRi0MN1Tb4Ow98c0af5HwUyczCeg5NvY=)
2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: 3KdJBt5Az7ze/HG9V9IojtdUchiSKe82xWVeI+BorLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B0D, serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Validity
Not Before: Jul 22 22:35:48 2026 GMT
Not After : Jul 29 22:35:48 2026 GMT
Subject: CN=6a6145c5-46ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:75:33:f0:4e:cc:2d:c5:ad:2c:d6:0e:34:
86:d7:fe:fe:af:6d:b4:ce:c5:73:57:a5:d6:cb:0a:
05:07:5c:48:76:8f:0f:3f:f2:95:cc:32:11:cf:db:
6d:20:fe:aa:52:e3:84:a0:52:19:f0:93:05:a2:74:
dd:7a:47:9e:a4:77:2e:69:10:b2:2d:31:29:b5:1a:
14:6a:3c:b1:89:b5:9a:e1:30:51:3c:a2:83:e2:df:
47:66:df:cc:1b:55:c1:65:ab:d5:ca:2a:f5:af:21:
9d:84:e4:99:85:91:9c:49:17:ef:be:70:19:d3:b8:
d9:3a:f5:04:73:98:b5:0b:a4:f8:55:66:79:c0:8c:
4d:36:ef:75:e1:e3:e1:8c:aa:f9:6a:59:2e:5b:6a:
05:16:2b:25:cd:2a:9c:e3:5e:33:4f:e7:f2:a7:16:
8b:82:20:b1:f0:6a:40:35:d7:b4:d2:6e:e8:17:69:
b0:a4:bc:ca:d5:57:fd:a7:48:8a:25:81:bb:1a:1a:
1b:90:ac:44:a8:11:eb:cc:5d:1b:1f:bb:ff:08:75:
58:26:ca:49:3b:a0:43:d8:27:e3:54:6a:07:7c:62:
ed:16:38:6e:07:f9:e1:49:ef:26:17:ca:e0:be:2c:
99:ce:9a:e6:92:8c:6f:cd:37:04:e3:9c:5c:2c:85:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:68:87:4E:6F:D8:5B:B9:D1:53:98:EF:FC:B4:3E:64:05:DC:5A
X509v3 Authority Key Identifier:
keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:d4:05:6e:1a:a5:29:ca:32:7b:31:1d:ec:56:9b:b2:f2:20:
29:1e:aa:3b:a2:71:52:34:fb:4e:3e:8b:2b:fb:b3:f3:78:ee:
6b:72:fb:96:c4:c1:b8:06:58:cd:68:44:bb:25:eb:50:27:27:
11:09:1c:c3:4c:38:a2:a1:64:71:ea:2d:70:3c:15:d4:54:17:
1a:65:28:ad:47:2e:69:9e:65:25:2b:da:18:37:99:60:c1:65:
9b:7c:b8:2d:e8:9b:83:89:01:ac:12:3e:3f:0f:06:56:4d:22:
8d:49:43:a9:75:7f:a5:be:54:70:3d:fe:29:fc:ea:06:08:0d:
7e:9c:ee:8c:e4:c3:78:11:15:7f:e2:ec:94:53:42:62:74:40:
60:7d:05:b8:d5:99:8d:3a:37:d0:63:3e:c4:a4:1a:b1:a2:13:
79:5f:f0:03:fa:9c:4b:7a:77:2d:f3:79:76:5d:3c:55:07:9f:
6d:ce:ba:0c:2e:7a:63:4e:ff:b8:01:a3:c9:55:3c:ee:ab:d2:
7e:86:82:33:6c:62:55:96:cf:2b:a4:1a:aa:6e:cb:13:c1:ae:
46:19:9b:8d:81:e4:00:95:72:2d:fc:3d:07:bb:e8:3d:86:e9:
47:cf:b7:37:f9:e6:bd:85:c9:f9:a3:92:38:76:97:30:18:54:
1b:26:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:28 2026 by rpki-client