
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier: dJhns08Bp7fJTIriUX8wBUrpKPdWk6dRAl5ccVewlGc=
Subject key identifier: 59:B9:60:88:DD:0B:B4:60:78:76:6C:6C:7C:10:5F:CF:78:BE:62:BD
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer: /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial: 0770
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number: 0765
Signing time: Thu 12 Nov 2026 21:36:40 +0000
Manifest this update: Thu 12 Nov 2026 21:36:39 +0000
Manifest next update: Thu 19 Nov 2026 21:36:39 +0000
Files and hashes: 1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: MM04wNb14YvCP9kZXHFd7DE7cX6YL5mLAHnjFiYd3G8=)
2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: 3KdJBt5Az7ze/HG9V9IojtdUchiSKe82xWVeI+BorLo=)
3: 9UnCHcE7avOsB5KrOW8UFI-i2cY.asa (hash: nTF8aYS0oLDfT4fM7S7uNkStm1JsjqbkQLet+UonNIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Nov 2026 21:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B0D, serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Validity
Not Before: Nov 12 21:36:39 2026 GMT
Not After : Nov 19 21:36:39 2026 GMT
Subject: CN=6af63168-a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:4a:3a:68:87:b5:30:26:38:8c:c6:ab:d5:
47:6d:ca:c8:f6:91:ce:a6:dd:db:63:6c:20:73:0f:
c7:3a:c3:bc:bd:f7:25:ab:17:43:9a:85:76:3e:5a:
23:a0:52:bf:4c:35:18:f2:d4:1e:8e:f9:5b:ec:64:
c2:c5:99:34:a5:1b:99:84:c9:70:31:7d:83:96:0a:
9d:38:d3:91:49:c1:f6:f6:8e:36:69:81:10:24:d0:
e9:e1:fc:23:37:68:aa:dd:10:9a:89:9c:fb:90:e2:
c0:8c:f6:cd:94:5a:c4:96:be:55:7f:ec:25:6d:8f:
19:6d:c1:ed:4d:b2:c5:dd:7d:b4:5c:b9:a6:03:39:
28:79:04:f9:b8:95:58:77:f3:37:70:0d:bf:90:f9:
76:d5:b4:aa:7b:9e:11:81:b1:e7:9d:68:cc:40:99:
ba:fe:b4:04:c0:ef:91:51:57:69:97:2a:49:d5:84:
ea:c8:c4:b7:04:7d:4f:66:ec:2b:66:a7:9f:f6:d7:
9f:3c:ba:9e:1e:ee:ca:5e:ca:66:1f:e7:3d:7e:88:
ce:72:84:89:74:cc:22:62:bc:4b:01:27:0c:42:b6:
ba:60:25:14:e0:ce:fb:55:9b:a5:02:24:6f:4d:4a:
86:15:82:59:0d:d6:d2:df:c3:d7:25:d7:d2:a0:3a:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:60:88:DD:0B:B4:60:78:76:6C:6C:7C:10:5F:CF:78:BE:62:BD
X509v3 Authority Key Identifier:
keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:5d:72:04:c1:b9:c3:8c:fa:31:fa:4e:ba:2c:c2:bc:91:
ee:7e:b0:d6:59:99:b6:82:7d:d0:6c:6b:27:94:5c:6a:99:e0:
5d:6c:fb:0c:21:48:cc:2f:5c:fa:62:b7:6c:d5:71:3e:71:52:
ff:df:62:06:af:ce:85:ab:b6:1d:94:53:6b:aa:79:61:c6:f0:
2e:0c:a1:8c:ee:81:de:6f:f2:72:3c:ab:34:1c:0d:e0:98:17:
6c:a5:29:d0:68:9c:04:82:63:90:ac:df:a6:37:45:31:ca:21:
8b:a7:75:9c:a2:d9:3d:c1:21:56:7c:50:2d:41:4f:5d:fc:6e:
65:99:ce:bc:4a:46:e6:ee:21:4b:45:25:85:bc:34:58:0d:14:
c6:9e:8a:77:e2:15:45:16:ba:21:15:2e:a3:63:fe:60:92:1c:
82:eb:91:fb:9f:a3:54:e3:41:6b:78:4c:93:cf:88:2d:7a:c3:
49:8e:7d:79:91:02:fd:df:84:59:f1:01:b6:57:2f:a6:8e:2e:
a1:76:0f:55:60:dc:4c:2c:32:31:5f:93:a2:86:62:bc:27:72:
b3:ac:78:55:b0:65:44:77:eb:70:b2:bd:62:7c:3f:88:1d:71:
fd:e3:0e:c2:98:1e:7e:25:ae:91:8c:7d:c0:07:75:60:33:c1:
8e:8f:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:27 2026 by rpki-client