
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier: lwBI1+uzxhdQZcIdvRIUZ53CzQ+0UBmi4/m7mbZ7VO4=
Subject key identifier: 95:B5:31:C3:4A:70:B1:40:86:77:5E:4E:5B:74:87:8B:FA:DA:AE:7A
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number: 78
Signing time: Mon 11 May 2026 07:56:55 +0000
Manifest this update: Mon 11 May 2026 07:56:55 +0000
Manifest next update: Mon 18 May 2026 07:56:55 +0000
Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: HQSbfEzF6HlfkBCFEHdrprog5/xouYm4Z81knFxwuCQ=)
2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
4: 7A339E4448F711F1A886AD5191833773.roa (hash: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: May 11 07:56:55 2026 GMT
Not After : May 18 07:56:55 2026 GMT
Subject: CN=6a018bc7-77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:f6:98:b4:99:30:5c:a6:92:a9:3e:99:77:
7c:f6:94:8a:27:30:43:b2:22:4f:b4:a7:e8:34:00:
30:1f:97:6d:ba:7f:e0:37:ce:62:23:f1:da:93:78:
02:df:d8:54:b2:64:64:ae:bc:ee:da:6b:4c:5f:8e:
49:3d:d5:46:7f:30:37:2c:b1:de:3f:92:af:91:4f:
ff:c2:07:25:88:ae:0f:f0:42:09:ed:fb:fc:26:70:
f1:11:24:ca:88:9f:53:7f:d5:8d:2a:ce:52:e7:94:
51:b1:16:fe:10:72:07:8d:1a:1e:d9:c3:bd:53:7a:
b6:b3:0a:a8:c8:09:b9:64:cd:13:27:24:07:5d:81:
00:fd:4d:3a:15:b4:ab:c4:da:2b:a4:62:a1:4a:42:
37:23:19:56:dd:66:b0:b3:f7:b8:35:e1:c9:de:7d:
93:7d:82:cb:18:72:e9:9b:1f:06:b8:c5:65:66:66:
bf:af:7b:83:c4:ca:1e:b6:9c:16:77:4a:ab:7f:b6:
f6:aa:1d:00:c2:c4:db:2b:c8:7c:4e:f2:93:47:b1:
b8:c4:1f:ad:30:9d:97:3e:80:ec:e6:f1:91:a6:ef:
b8:cd:84:5b:72:c5:d5:8b:ce:da:9d:58:78:1a:ef:
62:97:c4:46:2f:d8:24:14:67:2c:89:7b:f1:1d:95:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:31:C3:4A:70:B1:40:86:77:5E:4E:5B:74:87:8B:FA:DA:AE:7A
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e3:2c:7e:11:4b:01:c0:c5:46:32:87:6c:54:f4:38:0a:30:
ec:f6:03:ea:5f:58:5d:b8:10:da:a2:6c:3c:e5:dc:0b:54:7e:
a0:e5:f8:b0:24:ec:19:42:16:f8:14:56:67:9b:cd:91:b7:e8:
b0:39:b0:e2:43:df:69:44:ae:fc:9e:fb:e3:f6:36:d4:9a:90:
cb:d4:31:25:8e:f6:97:5a:70:39:9a:63:89:d4:c8:11:b5:3b:
a4:62:fd:e8:1f:8d:e2:5b:da:0e:0d:29:4b:94:3f:c1:bd:dd:
7e:08:8d:0a:69:e5:61:7f:09:3b:12:5c:37:f2:34:d6:58:38:
cb:f7:d1:d9:bc:3a:18:13:13:e4:ac:13:ab:8d:54:96:31:ee:
10:d2:d7:ea:54:09:0f:84:cd:22:e5:79:16:28:c1:7a:7e:46:
ba:1d:29:ad:74:25:6c:95:bf:dc:b2:06:00:4b:c1:aa:d4:0d:
58:37:57:b6:49:24:92:a0:4a:05:e3:d5:83:f8:a8:fc:6b:f6:
a9:94:67:13:6d:33:d5:b6:37:e4:23:16:41:a0:8a:bf:80:eb:
ed:93:d9:6f:3f:c7:2f:80:ef:6a:74:cb:8d:c4:c0:dc:02:b5:
19:2a:96:3c:00:8d:4f:0e:55:67:f3:6a:ab:2b:0b:9a:d6:22:
3b:1c:0c:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk0Q0QxMTAvBgNVBAUTKEU3MDYwMTJBMTA2QkQwOTQ2NThFNjA0QzU2MDMwNTBG
MTREQzNGNEMwHhcNMjYwNTExMDc1NjU1WhcNMjYwNTE4MDc1NjU1WjAYMRYwFAYD
VQQDEw02YTAxOGJjNy03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2D2mLSZMFymkqk+mXd89pSKJzBDsiJPtKfoNAAwH5dtun/gN85iI/Hak3gC
39hUsmRkrrzu2mtMX45JPdVGfzA3LLHeP5KvkU//wgcliK4P8EIJ7fv8JnDxESTK
iJ9Tf9WNKs5S55RRsRb+EHIHjRoe2cO9U3q2swqoyAm5ZM0TJyQHXYEA/U06FbSr
xNorpGKhSkI3IxlW3Waws/e4NeHJ3n2TfYLLGHLpmx8GuMVlZma/r3uDxMoetpwW
d0qrf7b2qh0AwsTbK8h8TvKTR7G4xB+tMJ2XPoDs5vGRpu+4zYRbcsXVi87anVh4
Gu9il8RGL9gkFGcsiXvxHZVa/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJW1McNK
cLFAhndeTlt0h4v62q56MB8GA1UdIwQYMBaAFOcGASoQa9CUZY5gTFYDBQ8U3D9M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8yQ0Q3RkQwRTlF
QzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBKUmxqbUJNVmdNRkR4VGNQ
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Awdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBK
UmxqbUJNVmdNRkR4VGNQMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH+MsfhFLAcDFRjKHbFT0OAow7PYD6l9YXbgQ2qJsPOXcC1R+oOX4sCTsGUIW
+BRWZ5vNkbfosDmw4kPfaUSu/J774/Y21JqQy9QxJY72l1pwOZpjidTIEbU7pGL9
6B+N4lvaDg0pS5Q/wb3dfgiNCmnlYX8JOxJcN/I01lg4y/fR2bw6GBMT5KwTq41U
ljHuENLX6lQJD4TNIuV5FijBen5Guh0prXQlbJW/3LIGAEvBqtQNWDdXtkkkkqBK
BePVg/io/Gv2qZRnE20z1bY35CMWQaCKv4Dr7ZPZbz/HL4DvanTLjcTA3AK1GSqW
PACNTw5VZ/NqqysLmtYiOxwM+g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:04:28 2026 by rpki-client