
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: 5Z2w/qozdAcd3vCUGBvDhlLXM4zkqdwUDjDtVpfb+F8=
Subject key identifier: 2D:6A:26:09:CE:3D:4F:1B:A1:FF:AC:B9:E4:BB:F7:97:6D:FB:01:71
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 0382
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 037B
Signing time: Wed 13 May 2026 00:57:03 +0000
Manifest this update: Wed 13 May 2026 00:57:02 +0000
Manifest next update: Wed 20 May 2026 00:57:02 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: Vm7S/qLkP2f6jNjj5dvWfaWSA6HwnQYwgU2m9UkZPa4=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: f5h2sD9kDZrihuG/xzAAfLrQX5aqTNr2XYWOpp8neZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: May 13 00:57:02 2026 GMT
Not After : May 20 00:57:02 2026 GMT
Subject: CN=6a03cc5f-dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:a0:66:cd:47:34:7c:61:e5:6a:75:23:9c:
2a:f0:59:c6:f7:b1:cc:8c:fa:1f:ba:c5:f3:27:ac:
67:59:51:32:0e:ab:30:0b:8c:d4:eb:28:f5:6b:4a:
20:85:ec:4e:55:6a:b6:ad:56:91:df:b8:f5:48:b1:
39:83:e4:be:69:71:8b:40:7e:d2:3f:cc:ef:04:23:
bf:4a:cf:84:e8:b9:a2:82:83:5b:c6:4c:5b:bd:71:
47:60:cc:a9:6c:18:c2:f4:da:0a:e2:48:a8:e3:55:
6c:49:04:24:bf:77:de:d2:cd:d2:f0:a7:23:a3:40:
ba:68:70:06:ba:36:b1:a0:4c:f3:9a:49:e6:97:32:
e7:4b:88:67:1f:ce:08:cd:00:7e:5b:35:e1:e7:c0:
f0:8c:b8:db:c4:b8:d2:a9:01:52:11:62:53:19:a6:
e3:1b:bc:99:e3:fa:4b:54:01:1d:b1:68:ba:9e:27:
31:8d:ca:b5:9a:56:91:4f:76:5a:40:00:2e:d2:8b:
1c:3c:55:e6:c9:f8:26:96:c2:65:8a:a5:bd:c5:fb:
79:1a:bc:54:c0:53:78:ce:c9:41:dd:b4:13:c1:6d:
bf:89:4b:5f:65:d4:67:97:3c:7e:55:85:18:29:8b:
23:c8:23:8d:36:1e:14:24:9d:36:fd:d3:c7:97:34:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:26:09:CE:3D:4F:1B:A1:FF:AC:B9:E4:BB:F7:97:6D:FB:01:71
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a9:31:96:7d:5e:19:93:68:43:95:62:20:cb:02:02:15:0d:
c7:fc:dd:83:81:ab:de:77:cf:99:a2:32:78:76:d1:1e:51:52:
6c:de:4b:12:38:41:c9:6e:22:02:2e:b6:48:74:74:fc:2d:af:
80:32:b9:98:d6:c3:2c:d5:22:a1:15:43:a1:f3:60:5b:8d:ad:
f0:f0:04:15:b2:33:7d:29:db:74:e8:55:35:d5:af:d0:7b:7a:
f7:a1:93:9d:60:d9:08:e5:73:51:a8:7e:60:e0:3e:1d:11:0a:
ab:21:2b:97:05:ca:f1:1f:e8:04:3d:9a:4f:d3:45:c9:eb:58:
1f:9d:cf:91:8e:f4:be:8d:98:78:b8:bb:f8:86:ec:b2:ec:cb:
61:a8:ec:a7:cf:2b:85:0f:86:92:dc:55:b1:af:4e:29:50:a0:
30:20:2f:bb:d0:98:98:31:12:58:9f:cc:d9:9a:1f:e1:3d:90:
42:1e:8a:78:0c:39:04:ab:7a:0b:05:ff:38:75:43:2f:ae:0a:
e5:76:ca:b5:29:2a:9c:19:c7:b1:9a:77:73:b5:dc:1c:57:05:
51:f1:87:51:13:32:2f:ee:f5:22:39:f8:3d:5c:59:7a:bc:7a:
95:b0:ad:1a:d8:4b:1c:68:00:29:62:e9:cf:5e:44:ad:ac:03:
6d:2d:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:36 2026 by rpki-client