
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier: zHL8aEJw8Xp5m97LHcEZ4NBG+H/HRtuGz5fvMCyUMGk=
Subject key identifier: FA:AB:F3:A4:D8:A2:1D:6D:90:E0:BB:A6:E3:1E:78:38:4D:23:03:B8
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number: 6B
Signing time: Mon 11 May 2026 08:01:29 +0000
Manifest this update: Mon 11 May 2026 08:01:28 +0000
Manifest next update: Mon 18 May 2026 08:01:28 +0000
Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: u6HLq/+41nBxvkafOuezrUa0f/nHQD+mK53msjqW3W4=)
2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Validity
Not Before: May 11 08:01:28 2026 GMT
Not After : May 18 08:01:28 2026 GMT
Subject: CN=6a018cd9-38e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:bb:cb:98:0f:26:0c:e9:e1:4f:ae:36:3f:
a6:44:74:d7:2b:a2:93:c6:e1:9b:a3:7a:bc:a7:29:
0c:38:69:16:c0:a7:38:1a:9c:18:79:25:fb:2a:8d:
eb:e1:cd:51:cc:c3:b0:9d:27:c2:f9:94:d4:6f:6e:
28:99:b1:4d:85:5b:e0:f6:85:2b:16:00:16:0b:68:
df:b0:e2:bc:77:d8:dc:46:ac:1a:5a:23:e4:b1:7a:
b3:62:71:fe:28:f2:29:10:14:fa:92:ac:f8:de:c1:
2d:e2:48:31:28:09:9e:6a:68:81:bd:1e:30:eb:8e:
ed:1e:de:1b:1b:3f:b9:5a:14:0c:d4:75:27:19:23:
e2:72:72:c4:35:0d:5a:54:91:96:24:33:63:65:44:
2e:8e:16:95:81:29:d7:a9:e4:ff:4d:26:53:36:74:
2f:de:69:eb:99:6d:85:5d:85:1b:09:3b:68:e1:fd:
50:a3:43:3d:e3:d1:23:e0:93:c2:5a:83:5f:c4:fc:
21:72:be:25:25:4c:c0:ee:05:bf:fc:a5:66:d1:7f:
81:45:f5:2c:51:e6:db:41:ed:d0:52:32:02:ae:14:
90:30:b7:a1:88:79:23:3b:75:95:e5:3d:f7:af:84:
d7:1b:f0:a1:c8:b7:34:b4:83:a5:ce:b8:78:ca:55:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:F3:A4:D8:A2:1D:6D:90:E0:BB:A6:E3:1E:78:38:4D:23:03:B8
X509v3 Authority Key Identifier:
keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:1f:4e:73:98:da:21:4b:de:17:1f:00:f5:68:c6:69:d1:
ee:06:85:f5:84:38:35:76:0f:d4:aa:aa:54:bd:d0:2b:bd:7a:
10:3b:19:2b:0f:77:21:24:e7:3b:82:21:a5:48:2e:a2:6c:f5:
9d:c2:0e:37:54:ad:c7:44:a4:1c:35:e8:81:d6:e3:67:77:c8:
26:17:6d:eb:f9:70:54:36:26:b4:79:9f:d4:10:ac:16:01:5a:
4a:07:08:bb:a5:1b:1e:50:0b:60:84:b2:1d:04:c1:8e:30:c7:
0c:0f:8d:7e:20:42:95:75:ba:5b:72:83:38:9a:2c:8e:6f:cb:
71:d3:62:00:97:01:70:f2:48:19:68:8f:08:6e:b2:68:01:b3:
69:9b:74:62:53:10:93:fe:3f:24:82:de:b0:91:06:1b:62:2d:
b0:cc:60:dc:c2:4d:ba:db:6d:79:a2:c8:5d:88:33:76:d3:f5:
74:d0:49:79:a4:8e:8d:c0:52:78:60:a7:ba:0d:ae:8d:33:58:
9d:7d:f3:99:d3:7f:a5:b0:1b:2b:a2:43:35:4f:87:0b:04:8b:
d5:82:21:f7:f6:fc:46:64:95:35:87:45:56:b5:24:5d:61:91:
09:95:1d:a1:82:e9:93:f6:62:97:b4:f4:cb:e1:96:9f:48:7c:
28:b2:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:32 2026 by rpki-client