
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: V3B29SXpwokl7oi+c4lR+ki3gAQEAjOeQvPCoo6gTbY=
Subject key identifier: B8:7C:A3:D1:74:70:14:4F:95:A9:5C:7D:7F:68:DA:2B:6F:F8:BA:CF
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: E1
Signing time: Wed 13 May 2026 06:44:20 +0000
Manifest this update: Wed 13 May 2026 06:44:19 +0000
Manifest next update: Wed 20 May 2026 06:44:19 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: BYPH1pwOYkXR+rID05yl3IPIM5XRA68uhvZvaLkMn8I=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: May 13 06:44:19 2026 GMT
Not After : May 20 06:44:19 2026 GMT
Subject: CN=6a041dc4-4ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:cb:13:55:4a:49:f3:d4:73:ca:11:73:77:
d3:f7:73:62:31:5f:59:df:b7:03:72:ac:bc:62:99:
ad:5f:7c:4a:da:55:9d:cd:e7:66:ff:e7:a9:a0:9f:
57:03:d8:9d:94:c0:17:01:b5:f8:fb:af:49:47:8c:
00:96:00:2b:96:d9:54:d0:07:08:bf:1b:2c:bb:7a:
3e:7c:ee:ce:05:43:76:e2:c9:d2:8f:68:1e:bf:25:
e3:5c:c3:14:05:e4:e2:fd:57:51:81:f3:0d:69:e8:
d4:30:95:0d:cb:e0:ad:8a:73:c2:8b:98:c5:a2:53:
ea:8e:6b:79:52:68:a0:a1:68:a5:ed:be:3e:e8:6a:
c1:47:df:0d:01:2a:12:d6:7b:29:ab:33:c2:e5:af:
ba:77:47:58:84:c2:fe:81:7e:4b:6c:60:8a:64:f8:
54:80:09:5a:7e:f4:e4:71:77:ba:49:37:03:3a:33:
a6:a8:0d:2d:5a:04:67:58:d3:b2:eb:a3:69:21:a3:
22:02:01:4a:28:39:43:72:c6:61:bc:ec:85:5c:34:
9d:17:1c:d4:1f:04:a6:a4:3d:0f:9a:43:16:42:02:
69:b9:c3:57:d5:20:5d:ab:a8:30:b0:01:e5:0d:1b:
23:00:6d:3b:57:4a:f2:82:ef:92:c7:31:6c:09:00:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:A3:D1:74:70:14:4F:95:A9:5C:7D:7F:68:DA:2B:6F:F8:BA:CF
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:07:0a:ca:eb:e4:0f:f4:62:ec:d6:f5:ef:97:22:41:36:
e6:99:64:01:41:82:61:90:da:9f:8b:45:eb:fb:d9:66:e6:f6:
ce:79:6e:2a:05:eb:bd:ac:6d:b9:86:19:fb:db:2c:86:b2:11:
46:1c:90:3f:be:9c:15:ec:cb:32:2a:a1:99:fc:40:3c:46:ab:
51:85:e1:11:c5:2d:5f:8e:cb:d8:68:a6:1f:dd:db:41:76:86:
f3:2e:ba:a5:32:9e:09:39:d0:03:76:59:b9:98:93:ba:77:5b:
fb:c4:87:e4:a3:13:61:ca:1c:cf:81:6b:35:de:7c:7f:74:8f:
24:e6:32:77:0c:f8:88:fd:b4:88:b8:50:54:00:ff:6f:cc:66:
cd:ee:14:57:24:58:83:b0:6c:e7:cd:e0:8f:fe:01:79:4a:ba:
c4:f6:3f:9b:c7:2f:c8:e5:b3:36:95:99:f2:cc:dd:9d:9f:c0:
25:cc:bd:da:80:85:ac:9b:79:56:db:7b:1f:ed:3a:c5:39:19:
26:35:6a:43:92:78:a6:fd:77:ef:f0:29:fc:34:db:04:4f:b8:
d6:d1:aa:da:6b:b5:ee:00:d8:d4:e0:7e:d4:d8:ae:16:fa:d4:
4c:50:0f:c7:5f:89:88:16:fd:a2:6b:75:55:11:e0:98:68:c2:
2a:41:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:00 2026 by rpki-client