
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier: wFjaHde/3kPv6FOQiWYGphlgw+Hlb8cqRZcj/sbFX1Y=
Subject key identifier: 9E:B1:23:64:64:DB:B1:B9:C9:58:50:FE:34:85:A0:22:4C:B9:22:6B
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number: 02AF
Signing time: Thu 23 Jul 2026 02:30:46 +0000
Manifest this update: Thu 23 Jul 2026 02:30:45 +0000
Manifest next update: Thu 30 Jul 2026 02:30:45 +0000
Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: 1hcwDB0UythyVNNKlc9HJ9t0gcF4FTxjwD/HYbEOQSg=)
2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: KkRg7bEKwnHuBm+Yd+/J88cAG/SeruIhl6B9YZ5p9Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Validity
Not Before: Jul 23 02:30:45 2026 GMT
Not After : Jul 30 02:30:45 2026 GMT
Subject: CN=6a617cd5-7da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:2f:d4:42:af:88:47:6a:e8:66:e0:22:18:
c2:1a:f8:f7:84:77:a2:5f:3e:69:a7:9f:9c:9a:3f:
37:fe:04:64:75:c3:b4:84:7a:a5:00:34:ef:e4:9a:
97:ba:94:ab:e7:45:e1:a6:9b:fc:1d:b3:d8:9e:13:
8c:49:af:18:30:43:68:9e:20:40:ae:15:fa:5c:27:
f0:8b:33:f9:4d:c2:1a:34:09:82:d4:2c:15:03:69:
26:d2:6a:86:8d:b7:c9:fc:9a:8e:a8:e8:c6:e5:f2:
be:f6:c8:f1:60:70:d0:05:74:57:83:be:b1:45:bf:
86:36:1e:7c:dd:ef:c8:f8:54:2b:b0:56:6e:eb:e4:
af:78:16:3f:d7:74:5b:9b:84:d6:5f:6d:d6:2a:7c:
ac:2a:ae:bf:64:fd:7e:a9:32:a5:be:4c:79:04:9d:
ef:4b:61:78:42:c4:64:0f:3c:40:6b:51:62:79:4f:
9b:c6:56:e7:53:08:bd:dc:90:09:08:20:20:20:c4:
ed:a1:89:2a:10:a4:34:6e:09:ca:c2:8f:26:3a:71:
a3:5e:1b:1a:e0:80:7a:f6:2a:b3:ec:4f:ab:60:cd:
89:d1:e5:81:c9:b6:68:42:d8:aa:71:b5:9a:c9:54:
2a:97:79:2e:68:d6:45:f3:8e:2d:fa:58:d9:5e:d2:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:23:64:64:DB:B1:B9:C9:58:50:FE:34:85:A0:22:4C:B9:22:6B
X509v3 Authority Key Identifier:
keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:73:19:3f:5e:2f:d4:a7:41:76:83:2b:95:c8:60:11:5a:
0b:8a:d0:2e:e0:6b:30:c5:ae:72:2d:1c:92:ae:ce:bc:df:de:
80:07:b7:64:d2:80:f5:f2:18:f7:7f:17:73:d2:47:75:6b:a9:
5c:a9:23:fa:6e:51:c8:bd:b6:9a:1f:47:dc:b2:95:af:a9:70:
ee:f0:a5:93:8c:69:1c:1a:e9:96:80:42:1b:26:62:50:c2:b8:
ce:fa:0c:07:36:48:03:4d:44:66:cc:fd:e3:9f:82:bc:5c:f8:
2d:42:d4:83:2c:7f:11:23:f1:d5:68:8b:1f:13:1b:15:b1:8d:
b8:1f:b5:df:0f:59:38:e2:72:e1:b9:d6:55:74:74:a2:46:a3:
c1:56:4f:28:e0:10:6e:f0:96:e3:e4:10:c7:b1:99:d5:11:72:
c0:14:d9:6f:e6:b1:e0:05:2c:a5:54:ae:37:82:85:11:e0:35:
eb:d8:5b:fe:41:23:d2:7e:c0:ed:41:9d:de:52:17:36:73:c5:
ef:26:b5:23:8b:e0:05:44:af:24:4d:9e:05:db:ab:af:9a:f1:
e3:61:27:8d:7a:87:a8:5f:bb:a9:91:8a:43:56:ce:08:23:d2:
be:25:98:57:a4:1d:d2:a4:63:ba:7e:0e:82:86:4b:28:0d:4f:
29:4c:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:32 2026 by rpki-client