
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json)
Hash identifier: ogpytk2EuYhaTYsu9ya6qqFLAnoy8eg9ZNTa9yxaJqA=
Subject key identifier: 9B:0D:A2:C5:6D:6D:15:03:30:29:AE:98:C4:98:CD:59:4A:C9:56:30
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
Manifest number: 18
Signing time: Mon 11 May 2026 09:14:51 +0000
Manifest this update: Mon 11 May 2026 09:14:50 +0000
Manifest next update: Mon 18 May 2026 09:14:50 +0000
Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: le/BkwELPQ6Ehu2tgF6r252DtNhqLrDej7rXPfbC/W4=)
2: 2EFC5C744A9411F1ACAAC5FDAE833773.roa (hash: hI3UfnWsXvEl793f+DTpuMnHlgyALjK0JdSxeLT5jcQ=)
3: 2DFB4F4C4A9411F1ACAAC5FDAE833773.roa (hash: U5zeu+vrggpA5dcFn446WBcAlGvcVuJNMhqLo/bJdEo=)
4: 503AD2CE4A9611F1A049A813B0833773.roa (hash: eMI4seMRCma3ImNVMgqTfW73MKcVkDpEG1UHQ54jlRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: May 11 09:14:50 2026 GMT
Not After : May 18 09:14:50 2026 GMT
Subject: CN=6a019e0b-52fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:d8:ec:ba:5c:32:69:14:01:96:80:af:b1:
b8:45:53:e1:91:1c:62:6e:21:10:ce:65:da:12:84:
ca:9a:c6:d8:d1:a0:65:03:fa:25:4a:98:37:c1:e1:
8c:99:c5:6c:70:fa:98:93:0c:3d:a5:99:9a:79:b8:
c3:d7:a7:a7:57:ef:6f:71:26:16:47:07:d6:72:b4:
4e:b2:54:f5:57:76:92:40:2e:ba:39:b0:37:15:f8:
e2:46:01:cc:9d:b1:a9:8b:c4:90:fb:45:db:8d:e1:
7b:6f:8b:ec:a0:cf:64:79:ad:f0:14:e8:e4:36:a3:
81:92:0e:85:15:e5:64:91:5e:6d:be:ba:9b:39:3f:
3d:69:e9:d2:9d:99:b9:ef:1d:10:f8:b5:99:5a:c6:
11:4c:c0:65:c9:29:19:e3:9b:bb:3b:02:05:d0:ae:
47:58:69:1b:38:06:1d:72:1b:b8:9d:7a:dd:70:21:
4c:54:82:15:f9:10:82:f1:8f:48:f5:8e:ae:b3:a6:
ff:d2:e6:80:6b:a4:d3:a7:55:c0:9a:57:2a:c7:d2:
bb:d8:44:39:1e:76:9f:a6:2f:99:c3:75:d9:32:af:
e0:83:74:f7:e2:0c:15:79:d6:d7:fd:96:5a:0e:35:
49:c2:13:da:04:64:75:b2:39:b8:8f:76:7c:05:72:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:A2:C5:6D:6D:15:03:30:29:AE:98:C4:98:CD:59:4A:C9:56:30
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:84:76:c8:61:58:5a:6e:38:b4:5f:35:d4:32:8e:8f:54:eb:
4e:30:b2:f6:29:a4:76:c2:a8:e9:d6:1a:c5:12:36:b4:6c:39:
6b:de:2c:5b:9e:be:76:da:16:02:7f:e1:46:69:a6:6e:bd:d3:
50:23:2d:19:ea:71:c4:74:1a:c3:27:3c:05:83:01:2b:3b:3e:
8f:f1:02:d7:52:48:e4:9a:52:b4:aa:3a:b4:17:b3:df:87:08:
3e:ab:a6:84:84:50:f1:68:5f:a2:3f:21:ca:19:c9:4c:19:06:
18:f4:e4:92:12:c4:9d:17:c2:e3:8f:46:ea:70:45:1b:61:f5:
f7:10:08:11:53:4f:8d:eb:c9:b2:96:40:ca:16:aa:2d:75:32:
db:73:09:02:1b:68:64:fa:e5:a5:0c:5c:c1:fc:70:c0:10:41:
f3:72:8d:64:4c:00:e7:c6:47:ef:6e:ff:d1:5c:85:a7:45:c1:
42:7d:75:f5:61:14:7c:33:4a:05:b5:79:97:cc:3d:c7:60:94:
38:cc:33:d7:f0:9a:db:80:88:21:69:fc:de:0c:f0:68:13:95:
2b:b7:5e:9f:95:01:7c:f8:15:df:34:26:ba:3e:06:39:6c:fd:
11:8f:2c:f5:f8:4a:d4:da:da:4c:b7:4b:ef:0e:68:0e:af:b2:
12:88:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:39 2026 by rpki-client