
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json)
Hash identifier: 5QCmrrzjisY+ydx8DemgHWeqpD8ZIY4vgkhQqd9+bp4=
Subject key identifier: 6E:5E:9C:B4:CB:2F:83:4C:12:2D:C6:51:79:C5:89:B9:77:7E:52:45
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
Manifest number: 055F
Signing time: Tue 12 May 2026 23:29:10 +0000
Manifest this update: Tue 12 May 2026 23:29:09 +0000
Manifest next update: Tue 19 May 2026 23:29:09 +0000
Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: S7CkFaGxmFdt6V8AgzkNFcPAhZRc7IBQU/6SoA3UKXM=)
2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: YjQLIF4lrQHX8AithDMD5IxEV82+uXMqcaxvHxiWPso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Validity
Not Before: May 12 23:29:09 2026 GMT
Not After : May 19 23:29:09 2026 GMT
Subject: CN=6a03b7c5-03a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:59:a6:57:08:f5:b5:e6:94:15:9e:8f:2a:
ca:4f:59:2f:7b:62:bd:f8:4a:97:12:74:8c:fe:f7:
59:02:32:13:6e:ae:65:bc:58:60:12:1f:ba:b4:dd:
c0:09:14:a8:22:8b:5c:64:2a:57:39:15:62:15:b6:
e8:6c:11:66:75:56:85:8e:30:c2:a7:6c:16:a1:97:
4e:4c:41:00:7f:37:b3:86:d8:d3:da:dc:03:23:05:
c5:53:1e:35:8c:d7:6c:ad:1c:b7:ab:a7:bb:eb:c2:
49:d0:e7:85:cc:40:c7:42:92:82:49:bd:3c:91:80:
d1:4f:56:d7:83:c3:fe:e8:d9:60:9d:dc:25:88:b8:
98:47:99:d5:ca:b0:b3:a0:df:8b:b0:86:ee:e4:e4:
f8:a7:f0:94:9f:0a:41:a6:7c:41:7f:40:0d:30:26:
75:07:54:94:57:bc:a5:25:86:51:cc:00:71:3b:b0:
16:f3:f6:ea:fe:4f:6a:49:3b:1a:07:64:46:58:ce:
8f:6b:3f:75:a7:ea:43:da:b2:ce:d5:55:9a:0d:e4:
cc:46:e9:c3:d6:58:9c:29:06:71:18:5f:e6:ec:78:
1d:1b:0c:6b:51:65:6c:29:9a:c2:e3:80:07:b2:98:
b2:04:bc:07:dd:57:a7:1b:90:3e:0f:8e:60:0f:8b:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:9C:B4:CB:2F:83:4C:12:2D:C6:51:79:C5:89:B9:77:7E:52:45
X509v3 Authority Key Identifier:
keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:e8:6d:f8:06:4c:fa:bf:a6:0c:d1:80:51:f8:c8:86:da:
a1:d8:d7:a6:2e:55:6a:b3:c8:28:ed:12:ef:74:b7:c0:e3:1d:
91:22:f9:d6:57:58:a9:63:fd:50:c3:77:e7:fd:69:1a:78:0b:
f8:78:2c:6e:01:ac:23:56:a4:d9:b0:c0:50:57:2f:cf:04:1a:
5c:dc:39:fc:b2:5b:df:26:e8:c8:d0:77:67:d0:ae:b9:b3:a4:
89:8e:bd:ee:ed:2d:03:cc:49:ea:8e:92:6b:8b:33:89:e9:f4:
59:61:56:95:ec:05:f0:83:6f:05:f9:0f:15:cb:c3:22:d6:40:
12:a2:3b:2a:65:fe:31:24:e9:0c:7f:95:7d:a1:a2:45:13:4a:
74:c0:b2:7c:1d:1d:a2:e9:ed:31:44:7c:3a:bd:57:60:9f:df:
4e:e7:31:83:cc:f6:97:40:3e:54:f4:93:f3:2c:ef:3e:3c:f6:
51:13:85:20:22:00:40:94:c0:08:a5:ff:fe:30:b5:93:fa:be:
56:37:4b:6c:4b:bf:48:b2:62:42:78:58:46:45:25:e6:eb:ef:
c3:27:70:6f:84:0f:3a:67:25:3c:00:f4:f7:eb:30:53:f1:50:
d1:1b:38:f3:f2:d0:5d:1a:ad:78:f0:25:6f:f6:6c:d1:e0:32:
22:2a:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:42 2026 by rpki-client