
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json)
Hash identifier: ILaSrVqLrY9oFp7xD+ERX+3m43ghXJxN3+WX4kw9F3k=
Subject key identifier: 26:B5:D8:85:4A:52:29:E5:B6:0B:7E:DB:B1:42:87:0B:A5:15:D7:CA
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
Manifest number: 0586
Signing time: Thu 23 Jul 2026 00:25:31 +0000
Manifest this update: Thu 23 Jul 2026 00:25:30 +0000
Manifest next update: Thu 30 Jul 2026 00:25:30 +0000
Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: HLmm4n1U6rU3BX8FukjCKyGEu9LDm5QbXg7mK2GCJ94=)
2: CA24F21C6DE711F180D709405CA30FBC.roa (hash: Oyiw752YkZ+aWMvYkiVvYpwM7PpYiOLSODbco0Yd+e0=)
3: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Validity
Not Before: Jul 23 00:25:30 2026 GMT
Not After : Jul 30 00:25:30 2026 GMT
Subject: CN=6a615f7b-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:2f:4e:d7:e8:70:c0:44:97:08:30:c4:06:
61:97:3d:83:8b:65:10:13:c6:d2:a8:6c:6b:b5:40:
00:42:5f:3f:7d:fa:60:3b:82:00:58:25:b4:8f:7c:
41:54:cb:23:94:84:2c:64:99:4b:6e:e1:e0:f1:b3:
a3:73:32:1d:99:40:e8:70:bc:4a:94:47:d9:fe:90:
4b:4c:22:96:8a:d6:89:ee:d3:b5:84:3a:ad:d5:db:
b0:d6:dd:7b:18:e0:d3:10:b9:7a:d8:1e:8e:96:a6:
dd:eb:18:82:84:ef:37:60:65:87:e2:ed:1b:97:dc:
f8:c2:b6:2f:9a:17:a7:e5:c7:fc:30:8e:9b:64:b6:
ed:f3:7f:00:9c:fd:48:48:36:85:40:76:d9:37:3e:
67:57:a9:4e:2d:66:82:f2:71:a6:b2:53:61:88:1d:
22:b6:8c:33:19:76:80:18:ff:d1:e9:50:33:da:3e:
b6:b8:3f:b1:bd:b1:49:a6:51:b3:7b:ff:d1:af:2d:
72:5c:eb:d3:91:7f:3e:ee:88:b1:dc:3f:c5:9e:cd:
7d:5a:c0:30:bf:18:21:64:8b:cc:a3:a8:46:59:94:
3b:5a:4b:0e:7a:94:72:af:e2:ab:49:ed:4d:5d:71:
17:65:77:e8:22:db:d8:a5:7c:d0:c0:2a:da:53:51:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:D8:85:4A:52:29:E5:B6:0B:7E:DB:B1:42:87:0B:A5:15:D7:CA
X509v3 Authority Key Identifier:
keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:83:cb:2f:30:e5:d0:67:ce:06:df:9e:85:e9:2b:25:fe:
2f:a7:9f:eb:47:88:b4:f1:d7:1a:3d:c2:ed:53:ec:81:ec:d5:
96:de:98:38:fa:61:f5:93:eb:43:21:53:fb:c3:1b:71:18:92:
a9:2c:4f:cc:ad:35:ae:02:f4:78:16:50:17:ff:dd:d2:d0:15:
fc:d4:c8:2b:1c:98:23:ff:95:dc:63:85:bc:2c:19:95:04:5c:
88:73:3a:89:f9:3b:cb:fb:31:ae:1a:9c:97:92:58:de:51:dc:
7a:5d:3c:c5:d3:0b:13:8e:00:d1:40:c1:d4:c4:2b:12:f0:c7:
c3:2e:3b:c3:2b:29:9b:35:9f:b9:70:14:d2:50:51:26:b9:33:
dc:62:ce:56:94:ca:13:26:2e:e3:e3:02:96:8a:24:79:3a:ac:
00:ea:80:af:9f:77:07:2f:96:5c:17:7d:cb:41:d5:f0:73:7a:
0c:aa:d6:27:2d:af:09:1d:0e:91:7f:35:2c:04:0c:1a:14:18:
d1:c8:85:e1:8b:20:2b:65:f8:f5:40:ab:7d:25:51:a8:f0:53:
06:b7:8d:a8:08:00:a3:75:9d:33:a4:33:d8:61:60:d0:13:2b:
51:e6:45:6b:86:c8:dc:87:cb:f3:df:18:8e:68:87:7b:72:cc:
74:f8:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:09 2026 by rpki-client