
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier: yW81FJPiQfEAAM6sMhtLhAKsXhdPdoXpyG2yDcsU1qw=
Subject key identifier: 08:08:8E:4D:9B:80:A2:B3:75:75:FB:37:53:62:B7:9C:15:33:46:1A
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial: 146D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number: 1441
Signing time: Tue 12 May 2026 16:55:44 +0000
Manifest this update: Tue 12 May 2026 16:55:43 +0000
Manifest next update: Tue 19 May 2026 16:55:43 +0000
Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: +EecAP88RnbN0E7/F0LPfWxQ+ayzg9ezKPid3qGsPHQ=)
2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5229 (0x146d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Validity
Not Before: May 12 16:55:43 2026 GMT
Not After : May 19 16:55:43 2026 GMT
Subject: CN=6a035b90-450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:71:b4:29:de:5c:ef:8a:cf:ab:52:b3:6e:
1a:0d:39:ec:b9:23:68:03:f5:6f:04:5e:67:41:df:
1f:58:a9:99:4b:4c:35:21:41:16:34:47:c7:b5:49:
63:81:b8:4b:08:e5:fc:61:7f:83:d3:f7:b9:5a:a6:
02:ce:48:60:d1:67:51:bc:6a:9c:f1:96:74:4d:8a:
c9:44:7f:23:42:27:ea:95:af:6e:88:38:9c:4c:25:
ce:43:0b:42:a8:c8:8e:9a:75:c5:22:e0:24:0a:f1:
c9:af:ff:d6:0d:7c:48:e2:62:6c:a0:25:45:64:7b:
76:cd:93:09:83:e2:77:dc:73:37:33:07:ec:39:57:
94:05:cb:67:e6:ac:69:5e:c6:0c:41:83:a5:b3:42:
1a:92:24:f9:1a:4e:84:1d:6e:be:da:9d:3a:86:05:
d9:77:49:e1:fe:1e:ad:f1:07:8d:da:26:22:1a:54:
df:c5:d1:b2:c2:11:f7:fe:91:d6:77:75:d3:d8:97:
16:37:1c:26:e7:90:4d:8e:78:df:81:a9:11:9f:f4:
39:d4:37:d4:36:5b:7a:bb:e2:02:58:d7:14:bd:0e:
19:38:07:2a:eb:02:f8:4c:59:44:77:ed:09:23:d1:
52:8d:f5:ec:5c:cf:b4:ce:b5:32:48:d0:62:e1:28:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:8E:4D:9B:80:A2:B3:75:75:FB:37:53:62:B7:9C:15:33:46:1A
X509v3 Authority Key Identifier:
keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:52:4e:d0:dd:e9:54:0f:88:79:be:c3:20:4f:93:13:c5:
78:77:04:56:cc:01:9e:23:96:33:2b:35:8f:a3:4a:51:52:65:
cf:ec:19:c1:ef:ee:7e:9c:ee:b6:6d:ce:61:5f:9e:0c:9a:3a:
f1:88:11:fb:85:61:83:bc:b8:9e:cc:83:e1:10:cc:39:16:2e:
c8:79:b2:0f:01:6f:20:29:53:ac:23:81:3a:5d:b3:32:36:30:
9e:b6:f9:a7:a3:d3:2b:44:e3:0e:72:4a:ee:d1:7f:9f:56:a6:
99:9e:1a:0c:64:ef:43:b8:fb:3f:59:94:e8:6f:b5:3e:f3:24:
76:22:5d:a6:63:ff:83:e9:14:6b:b5:25:5e:e8:49:40:90:77:
6e:e7:ba:ff:39:4a:2b:6e:fe:bf:66:20:db:a9:5a:16:61:66:
94:ea:9f:64:87:65:25:88:99:d8:39:41:6a:c9:88:66:e4:b0:
5c:3e:44:75:9f:da:64:21:a6:c8:62:22:81:94:85:7e:93:26:
94:58:2c:67:35:e3:21:0a:83:e5:f4:de:81:08:46:92:29:b1:
ac:2e:42:6a:f5:5a:9a:cc:41:0d:16:a8:59:f0:46:b0:23:0a:
30:d7:0b:8c:17:c3:a2:b8:ec:ad:33:f6:d1:00:06:99:03:e0:
77:a0:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:32 2026 by rpki-client