
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json)
Hash identifier: uvBiDw8RtWq64j1TmEe6trUvYxBnpx+6W455yKThu4M=
Subject key identifier: 16:10:D0:0E:EA:86:F5:42:4D:26:AC:D5:FF:CF:94:6D:C8:B3:81:53
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
Manifest number: 44
Signing time: Thu 23 Jul 2026 10:38:13 +0000
Manifest this update: Thu 23 Jul 2026 10:38:12 +0000
Manifest next update: Thu 30 Jul 2026 10:38:12 +0000
Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: O61V88YZ+8aWJNNVNcvjDFy04ty2lkSwtVF/Up9OsnU=)
2: 4A79F05471CE11F1BC39DFE663A30FBC.roa (hash: tt1BIck5czmyxUfrc/spGUbtOW46AikfpGJWq4smioc=)
3: 267CF8CC718D11F1BF4206FD8FA30FBC.roa (hash: Bd1cYScj4fmX7aTgDmb2/IxRcYhuT72/NjHechdCWsI=)
4: 32D300684EFF11F19AA82571A4833773.roa (hash: QkW8hoEVlDhqW1xMLJkGg7Bfu6Vbp9RtQ1kbqUS7Lvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: Jul 23 10:38:12 2026 GMT
Not After : Jul 30 10:38:12 2026 GMT
Subject: CN=6a61ef15-a327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:3f:a1:db:23:b8:8a:8a:9d:b7:2d:2e:53:
2f:61:ff:4b:bb:5c:31:c4:ce:53:5c:6d:99:3f:2e:
6f:aa:87:1b:52:a3:b9:50:51:44:ac:3c:3d:6d:8c:
fc:d0:e1:3c:65:c0:9d:86:1a:7b:2b:26:92:f2:3e:
b5:f3:15:a9:1a:f6:df:34:e6:91:bc:e0:ee:3e:ed:
e3:21:e1:2d:04:85:90:d7:ec:a7:72:64:89:7a:a1:
1a:78:98:a1:e0:1e:0f:91:f2:96:ec:7a:8b:44:60:
cf:30:bf:a9:cb:8e:36:f2:82:67:b8:b9:d4:d1:a9:
6c:d1:08:e7:5d:62:a1:1a:50:71:5c:71:79:f4:4e:
bc:d9:4a:d8:97:f6:9b:62:83:79:bb:be:b6:86:de:
3e:2f:40:36:1d:36:19:99:7a:b2:e2:5a:46:77:91:
ff:d8:fb:49:39:bf:a6:f8:b1:17:6a:d7:da:0f:34:
9a:b0:cf:c6:16:eb:b2:9a:58:72:65:6b:7f:8f:98:
7f:e2:26:1f:44:58:56:7e:80:35:87:34:f1:d9:73:
58:55:3b:27:30:7d:62:a4:1f:45:25:46:d2:2b:27:
22:c5:e8:e5:c6:5a:24:b1:d0:f4:79:ee:dc:f7:21:
00:f7:79:2e:0e:20:c7:13:74:f7:2b:2f:f3:17:06:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:D0:0E:EA:86:F5:42:4D:26:AC:D5:FF:CF:94:6D:C8:B3:81:53
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:7a:d1:22:a0:62:a8:a3:49:6e:56:f1:e8:76:00:41:fc:5a:
c0:e9:38:36:2f:c5:74:d6:96:6f:48:a2:e8:ab:ed:45:b5:a3:
45:86:6e:f3:fd:ac:ce:d7:a8:17:15:5c:30:1c:31:dc:01:96:
53:4c:74:c7:4b:06:3c:06:bb:e3:6e:f3:ea:81:83:e9:45:ff:
e3:d4:d7:fa:ab:fc:c1:89:14:c6:5f:5b:97:ea:3f:b1:69:73:
b4:4d:3e:d2:45:cf:c7:48:bf:56:7b:7e:d9:d3:15:49:b7:6e:
dd:39:43:b0:35:da:b4:a7:53:17:15:11:18:b3:23:d5:22:5d:
76:a0:89:38:3a:d3:7c:20:f0:80:cf:92:49:02:61:89:d8:19:
81:1e:7b:56:49:2f:88:43:d6:8b:11:2b:d2:7e:13:5c:70:b8:
cc:5a:b2:5a:91:d4:54:d4:89:f6:d4:57:25:dc:89:96:92:7d:
eb:d9:3e:89:48:62:c6:d5:5d:6f:54:05:b6:2d:e3:30:ad:43:
5a:f8:d7:68:60:66:9a:38:e5:6f:83:d5:4b:18:15:c1:be:99:
29:c5:27:4d:7b:4a:7d:e6:89:aa:9a:6f:a0:cc:bf:2d:c3:42:
1a:4a:a9:bf:a9:f5:30:33:ca:19:a6:a3:04:6f:97:4f:65:54:
ee:93:0a:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDkyRDExMC8GA1UEBRMoRTU3MzNCMTNGRDg2QTIzNjk0NzAyQzNFMjhGM0ZGMDk0
OTdBOTM3MTAeFw0yNjA3MjMxMDM4MTJaFw0yNjA3MzAxMDM4MTJaMBgxFjAUBgNV
BAMTDTZhNjFlZjE1LWEzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC46D+h2yO4ioqdty0uUy9h/0u7XDHEzlNcbZk/Lm+qhxtSo7lQUUSsPD1tjPzQ
4TxlwJ2GGnsrJpLyPrXzFaka9t805pG84O4+7eMh4S0EhZDX7KdyZIl6oRp4mKHg
Hg+R8pbseotEYM8wv6nLjjbygme4udTRqWzRCOddYqEaUHFccXn0TrzZStiX9pti
g3m7vraG3j4vQDYdNhmZerLiWkZ3kf/Y+0k5v6b4sRdq19oPNJqwz8YW67KaWHJl
a3+PmH/iJh9EWFZ+gDWHNPHZc1hVOycwfWKkH0UlRtIrJyLF6OXGWiSx0PR57tz3
IQD3eS4OIMcTdPcrL/MXBi0lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFhDQDuqG
9UJNJqzV/8+UbcizgVMwHwYDVR0jBBgwFoAU5XM7E/2GojaUcCw+KPP/CUl6k3Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREOTJELzI0RDhFM0RDMzZG
NTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2phVWNDdy1LUFBfQ1VsNmsz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNVhNN0VfMkdvamFVY0N3LUtQUF9DVWw2azNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
OTJELzI0RDhFM0RDMzZGNTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2ph
VWNDdy1LUFBfQ1VsNmszRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVetEioGKoo0luVvHodgBB/FrA6Tg2L8V01pZvSKLoq+1FtaNFhm7z/azO16gX
FVwwHDHcAZZTTHTHSwY8BrvjbvPqgYPpRf/j1Nf6q/zBiRTGX1uX6j+xaXO0TT7S
Rc/HSL9We37Z0xVJt27dOUOwNdq0p1MXFREYsyPVIl12oIk4OtN8IPCAz5JJAmGJ
2BmBHntWSS+IQ9aLESvSfhNccLjMWrJakdRU1In21Fcl3ImWkn3r2T6JSGLG1V1v
VAW2LeMwrUNa+NdoYGaaOOVvg9VLGBXBvpkpxSdNe0p95omqmm+gzL8tw0IaSqm/
qfUwM8oZpqMEb5dPZVTukwq4
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:58 2026 by rpki-client