
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json)
Hash identifier: bmitIvpqdZmoU0eCuPrVlSeoWsx+swP0IYLCrTSW5Ww=
Subject key identifier: 1D:B3:5B:07:A1:07:D3:BB:97:46:D0:50:E3:1D:41:A0:0F:6F:C7:CD
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial: 0D1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
Manifest number: 0D07
Signing time: Tue 12 May 2026 18:16:52 +0000
Manifest this update: Tue 12 May 2026 18:16:52 +0000
Manifest next update: Tue 19 May 2026 18:16:52 +0000
Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: vUQN8JFBvSNG1J+j2k0MzwdKcxKYaoNU0ArT2qZ4WW8=)
2: 974869042C2A11F19F1796939D833773.roa (hash: rqXxFyVtS5pdY2Q7Dfm2yuygEbjXNJOU0VtSShOm5Qo=)
3: 67C9F14233E711F181C0AE9FB8833773.roa (hash: zILE8027ieGIonPU8rgts1kI8TAERWrLFiTqKHa6P0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Validity
Not Before: May 12 18:16:52 2026 GMT
Not After : May 19 18:16:52 2026 GMT
Subject: CN=6a036e94-68b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:93:f6:0f:30:2b:f8:60:0e:66:a5:f4:73:
ea:a5:d8:5d:85:e0:5b:23:e4:87:2f:22:ea:a6:e7:
e1:f8:3d:24:59:80:4a:31:b9:5d:43:17:20:62:a1:
8c:ca:c9:a7:7c:02:c7:e3:73:61:a4:e0:3f:e3:0a:
19:a8:f2:57:02:16:58:ac:d7:43:75:ff:a8:22:ec:
ca:59:81:82:39:33:a6:b2:f4:a6:60:f5:0e:5e:b7:
5b:e0:f3:15:8a:17:1c:8b:49:51:63:48:f0:4c:7a:
da:72:51:36:bb:fe:44:fe:5f:7c:7b:8e:56:63:07:
d7:d5:19:23:4c:c9:fc:b8:9e:e4:0f:74:23:40:0c:
fb:2b:f9:cb:ab:90:a0:21:6b:d5:82:62:34:45:51:
6b:a7:93:02:01:c7:32:fb:f2:65:8b:9c:74:ac:96:
32:ab:e1:fa:d3:e5:95:78:be:8a:6f:1e:8c:62:46:
07:f2:94:89:01:c6:83:e6:b8:3c:8f:58:4c:c8:07:
e8:7e:ed:9a:10:69:de:ca:7a:6f:ef:b6:99:3e:3e:
fd:4c:45:b2:55:42:04:56:c8:13:eb:4d:4f:e1:f5:
83:b1:25:5b:13:11:60:1c:82:9a:bb:fd:5f:26:80:
d5:91:91:f0:65:7b:2f:51:ae:36:ef:95:63:2e:d4:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:5B:07:A1:07:D3:BB:97:46:D0:50:E3:1D:41:A0:0F:6F:C7:CD
X509v3 Authority Key Identifier:
keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:47:c4:52:3a:a4:9d:88:6a:60:73:1b:8d:0d:c6:55:02:
66:96:66:42:a6:eb:95:e4:53:3a:98:1e:73:1b:b6:3f:97:36:
a3:f6:f3:eb:7e:09:bc:e2:49:ee:86:1c:5e:f7:00:94:cf:69:
26:da:dd:84:a9:0d:ea:6f:d0:3f:da:9b:4d:00:22:60:d2:30:
6a:f7:3e:29:2a:0d:61:58:3e:e6:2d:07:c0:37:69:fa:3b:a1:
23:5c:5a:b8:ad:e0:55:87:6b:9f:7b:92:3f:f0:dd:17:c3:5a:
2c:d9:3f:84:4b:cc:e1:88:28:78:db:c0:cd:a1:6a:43:8b:0b:
3d:5a:98:66:8a:9a:9b:28:cb:55:35:73:9a:a4:30:b0:a7:6c:
b1:cf:53:e3:a4:c8:e0:7e:5e:f0:28:bd:1c:54:d6:e5:a2:d9:
55:d4:7b:e7:a1:0a:5c:3c:02:f2:ad:72:05:35:71:3d:5f:56:
45:7e:57:88:00:c5:53:36:6a:f6:97:f0:64:8c:44:00:4c:83:
b8:67:db:c7:e4:c3:c4:11:5d:c1:fe:22:69:1c:d7:9e:2e:f5:
b8:07:e8:fa:af:c7:12:84:1b:77:45:1d:e9:31:85:c0:94:ae:
27:35:87:44:3d:76:6f:e1:c4:11:20:d9:76:65:23:1b:a3:03:
e8:15:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:06 2026 by rpki-client