
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier: W1jjzpwRhhE4FINln+lUNN0ce9D24M/8RE6FkWcGGSA=
Subject key identifier: F4:DF:55:D9:9C:27:50:2C:4B:A9:A7:C6:60:7A:6D:21:7D:81:C1:A8
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number: 028B
Signing time: Thu 23 Jul 2026 02:54:33 +0000
Manifest this update: Thu 23 Jul 2026 02:54:32 +0000
Manifest next update: Thu 30 Jul 2026 02:54:32 +0000
Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: M3hvPycmduGX+4pLqxeIkZQEZTtXZMtpKlzwGv94m68=)
2: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
3: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Jul 23 02:54:32 2026 GMT
Not After : Jul 30 02:54:32 2026 GMT
Subject: CN=6a618269-ebdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:fb:a3:0d:b4:bf:57:e1:96:76:e0:b2:64:
c7:17:4e:90:63:3f:f3:cd:b3:7c:63:66:6d:2f:50:
93:a5:c0:e3:70:99:3c:8d:73:af:68:2f:78:4f:d7:
44:9e:80:31:3c:5c:d5:d0:a8:ef:d7:bd:05:ec:36:
2f:69:fc:b2:c7:23:83:22:49:da:e2:1d:76:2f:86:
d4:ed:9f:91:52:e5:94:78:59:ca:ae:f2:2f:c6:37:
68:82:f3:b9:c0:8f:3d:b7:80:89:89:8e:94:00:cd:
a2:c0:ba:c5:c6:02:59:a2:56:b9:43:23:04:7b:8b:
24:6a:82:42:de:57:97:6c:06:7f:c2:54:47:e5:3a:
35:0e:9d:4e:4c:45:62:c9:be:e0:78:84:0e:9c:8a:
1d:71:25:47:05:b4:3e:66:00:9e:ef:5c:67:29:2a:
0e:cb:0f:fe:14:1f:89:d7:f4:1e:37:06:1d:9f:14:
3a:63:e6:d0:66:13:55:c2:07:a3:c9:1a:43:45:32:
2a:9f:b3:2d:d7:8e:04:17:ac:7d:f0:f8:f6:c1:19:
cc:84:d0:fc:06:97:46:d0:1b:fb:0c:63:6d:22:00:
27:b5:2d:63:b8:1d:1a:21:f1:cd:a5:1d:fe:92:cd:
cb:9a:f5:21:fc:03:c9:b8:50:92:d0:a9:ca:3d:7f:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:55:D9:9C:27:50:2C:4B:A9:A7:C6:60:7A:6D:21:7D:81:C1:A8
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5a:8f:e6:8a:c7:25:25:9e:b0:ec:3b:d1:d2:c0:c7:e0:26:
a9:3c:c8:3b:fc:7b:86:f7:37:43:a9:d7:91:3d:3e:c3:62:4d:
bc:7c:f5:0a:e6:c1:87:ac:c7:fa:ba:d0:f9:a1:52:f1:64:33:
1d:f0:0c:4c:e7:04:f3:f8:a5:c2:07:6c:67:04:c0:4b:32:6a:
a2:d6:37:59:ba:e7:78:66:4e:f6:a2:4f:66:cc:56:70:2b:a8:
53:61:a5:6f:08:96:a4:be:6f:b1:58:6c:a3:70:0f:ec:0e:fb:
23:8e:ca:c8:72:bf:61:e5:90:b5:e4:b1:62:07:ce:e1:b1:54:
a5:bc:85:91:45:33:78:9e:25:e1:ee:27:7e:c6:ae:69:66:5e:
25:49:c7:ac:78:fa:74:39:f6:23:1b:cf:84:17:d1:6b:a7:e4:
4f:42:27:80:13:d6:26:d9:1b:cc:9e:54:4e:c7:99:93:6c:4a:
74:5e:e9:dd:f0:c9:95:ec:03:53:a4:61:80:8b:ae:c1:44:9a:
d4:6d:23:92:31:b6:8e:de:cc:a2:8f:17:dc:4a:a0:9e:f6:a8:
a3:99:c4:6d:b7:74:93:ca:70:24:52:73:aa:bf:fa:34:1c:9d:
d7:43:00:22:f2:63:44:b8:6a:8f:33:df:9a:b6:50:70:af:9e:
65:b4:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:12 2026 by rpki-client