
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier: k+be5hLRiJ24AfECCWKxuoz6id66mD46fZxMb4HK2Eg=
Subject key identifier: 6A:6D:1A:D0:DC:1A:E8:5A:FF:4E:88:18:4C:7D:9A:51:26:6C:91:1A
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number: 5B
Signing time: Mon 11 May 2026 08:14:40 +0000
Manifest this update: Mon 11 May 2026 08:14:40 +0000
Manifest next update: Mon 18 May 2026 08:14:40 +0000
Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: NEVBir/WGeGtXjWSuqA5yauV/N8SjnpYfFK0QIEtM4E=)
2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=)
3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Validity
Not Before: May 11 08:14:40 2026 GMT
Not After : May 18 08:14:40 2026 GMT
Subject: CN=6a018ff0-c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:ff:ad:c3:15:da:71:a5:0b:cd:9f:78:ee:
64:1e:5a:0d:0d:57:7a:65:ff:ed:1e:de:47:47:6c:
53:1b:b2:e9:dd:2f:17:94:5e:52:f8:dc:50:e9:bf:
ac:0e:51:ab:29:77:b7:d0:d2:b7:17:05:bf:45:32:
70:ff:36:ef:35:b2:63:0b:fc:6d:80:99:54:39:f9:
a4:cd:47:33:f1:4f:d6:71:91:41:23:64:ed:df:c5:
45:0f:e7:66:b5:01:28:b0:83:3d:5c:3c:16:b5:ee:
e0:ca:14:ba:76:17:09:de:3c:5e:c1:87:98:e3:62:
29:f2:f1:db:ea:0c:d5:d1:6e:1e:5a:81:b8:db:fe:
0b:2a:d3:81:bf:2e:b6:ca:ce:c5:60:a4:8b:86:42:
3f:53:af:2a:b3:f1:41:2e:a0:48:1c:94:f5:ed:77:
80:8b:08:7b:7a:e0:54:6d:26:b8:cb:d4:41:2b:c3:
47:3f:f1:42:be:50:9a:93:c1:2c:eb:e0:f4:62:b1:
5e:40:b8:18:a3:aa:96:38:47:68:52:59:7c:73:78:
e3:1f:cb:d9:83:5c:eb:b7:29:d6:37:3b:26:27:76:
c7:43:6c:5f:c6:f7:06:a2:e3:11:8e:fb:7c:27:4e:
e1:ff:d1:06:d2:eb:5f:34:10:45:ec:e6:aa:45:0a:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:1A:D0:DC:1A:E8:5A:FF:4E:88:18:4C:7D:9A:51:26:6C:91:1A
X509v3 Authority Key Identifier:
keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:78:33:c4:04:fb:d2:d0:d3:8e:0f:45:cb:58:b0:97:c9:
98:60:af:15:8a:d6:0d:80:5c:b2:e5:ae:62:be:35:80:a0:5e:
21:2f:44:44:d3:00:28:14:88:e9:a3:99:f7:15:ed:72:a6:af:
7e:d5:84:71:53:db:ba:8e:7b:63:6a:2c:57:80:91:c1:d3:5a:
52:b6:88:aa:3c:46:e2:4d:a5:f0:ad:36:ea:d3:ad:7e:d4:9b:
88:24:74:6a:ac:63:4c:48:8d:d7:77:95:eb:8f:13:55:47:f8:
1c:eb:ad:1c:bc:da:c9:ca:bb:fd:b8:27:6f:d8:6a:b1:9f:ab:
bf:a9:6b:33:72:24:8b:52:9c:28:88:5b:95:e5:1b:2d:f0:09:
e1:3a:ae:db:0b:b1:45:f4:bd:80:41:32:e8:f8:55:2c:0e:1d:
2b:b8:b5:70:a1:03:99:22:0e:c2:2e:03:12:1a:c8:6a:6b:18:
46:55:0d:c5:e3:f5:bf:3b:f2:d0:c9:d2:ef:45:0c:e3:18:59:
04:ff:b3:2d:72:16:65:e8:0d:64:77:bc:9c:dd:38:15:05:4f:
24:5d:20:e1:cd:a3:de:0c:0a:d6:f1:97:13:95:bc:a3:c9:df:
1a:0b:3a:89:14:a7:a9:96:a6:4f:c9:ee:22:a8:c7:18:21:65:
ea:3b:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:13 2026 by rpki-client