
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json)
Hash identifier: 7UUm7HBWijR7tX8508j+/RocnlI7d+zA6CLkMBYlfSw=
Subject key identifier: 64:4B:F1:D3:99:12:52:3C:FC:D4:FB:AF:B1:D9:AF:EF:D0:BE:32:BE
Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
Manifest number: B6
Signing time: Wed 13 May 2026 07:12:33 +0000
Manifest this update: Wed 13 May 2026 07:12:33 +0000
Manifest next update: Wed 20 May 2026 07:12:33 +0000
Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: tTOv/+qUKY6Vpf48/bRJpmJf3G9+pAGEG0T2KMp3XdY=)
2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Validity
Not Before: May 13 07:12:33 2026 GMT
Not After : May 20 07:12:33 2026 GMT
Subject: CN=6a042461-e39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:15:1e:11:8d:ab:18:65:2c:3a:90:13:03:
87:9f:24:64:15:53:05:29:5e:35:2a:06:1e:4e:6f:
01:66:80:c3:08:f2:08:60:1a:fd:03:06:66:8c:28:
c3:2f:dc:8f:80:86:ab:a5:f2:58:41:98:b0:76:10:
6a:b6:1d:29:06:7e:d1:01:b3:ec:00:09:30:e1:b9:
22:87:be:80:4e:a4:fc:73:aa:12:d1:86:25:99:89:
e2:b5:b9:fe:ae:97:bb:73:92:08:83:2b:78:7f:00:
c4:64:bd:48:40:ca:b2:dd:b2:ed:d5:1a:96:a5:85:
8d:5f:d2:32:04:8d:2d:e6:d8:f4:21:18:3e:77:1c:
3e:3a:3a:cc:e9:e3:9d:d9:f5:37:d0:ae:86:7c:4a:
2a:6e:a0:a7:41:6b:4f:a8:32:e7:f1:47:bc:a3:ce:
10:cb:de:47:ad:2c:78:6b:27:18:35:65:75:df:f9:
f4:53:e3:be:9e:f1:9b:b8:38:5a:28:93:e7:53:27:
fa:36:83:c7:4a:d5:8a:3f:14:80:d9:7b:5c:95:8b:
57:5a:2a:65:fb:1b:7b:43:db:ba:94:c6:cf:1f:36:
5d:cf:17:f7:ae:14:15:63:b0:2a:15:76:db:ae:d6:
d2:66:3c:aa:b4:b0:3e:d5:ea:cc:f6:87:e1:45:b2:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:F1:D3:99:12:52:3C:FC:D4:FB:AF:B1:D9:AF:EF:D0:BE:32:BE
X509v3 Authority Key Identifier:
keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:93:26:b6:02:0a:47:b6:8a:0d:6d:52:b4:75:22:dd:86:
c4:63:29:27:c7:22:69:b5:53:75:33:0b:e9:46:0f:29:56:8f:
ed:d5:e6:71:6c:2b:31:ad:1c:66:7c:d6:f1:57:94:a3:76:2b:
6c:f1:10:b7:43:1e:97:e8:e4:94:87:e0:37:30:cd:57:33:bf:
4b:78:68:64:44:9d:b7:a2:f4:25:2b:44:07:e5:84:b5:16:3c:
fd:b2:9e:8a:2a:da:d5:67:9a:51:8d:b8:8a:6e:e4:a9:90:0b:
95:4c:64:fa:87:db:57:e5:6a:77:6e:be:08:16:28:49:77:c3:
e4:a5:da:12:a9:28:2f:e5:ce:d7:85:3e:de:3e:6f:f8:cc:af:
9c:03:92:de:ae:1d:38:f9:b9:d2:3c:83:5c:57:03:be:13:b3:
b6:08:47:ab:3b:fa:20:e5:1f:c6:7d:ba:ac:7c:56:09:5f:48:
49:53:3a:c5:d9:2b:1e:4d:8c:17:a0:bf:7e:90:cd:ad:4c:92:
4a:f3:6b:54:d4:d9:95:45:57:5e:e4:74:94:13:12:7a:0c:a4:
fd:41:f9:5b:e4:17:f8:ea:1e:8d:69:a5:c1:64:76:50:78:59:
f1:33:b0:a7:2d:58:66:4b:86:05:10:0e:12:78:fa:eb:8a:b5:
09:c6:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:17 2026 by rpki-client