
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: zsQEAO/JT/meYz/OMVxlTycPcELrMe1WGS25SjWM0c8=
Subject key identifier: 66:C6:93:75:C5:1E:41:0C:51:B8:57:5C:F9:D9:5A:48:D7:D2:11:B4
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 5B
Signing time: Mon 11 May 2026 08:13:34 +0000
Manifest this update: Mon 11 May 2026 08:13:34 +0000
Manifest next update: Mon 18 May 2026 08:13:34 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: 77/t2vykkL2IFssdRCCpIh9BhXgKhBQWXCFGLp3Ydww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: May 11 08:13:34 2026 GMT
Not After : May 18 08:13:34 2026 GMT
Subject: CN=6a018fae-fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:df:9d:7e:c6:94:c0:b9:91:42:b6:ad:99:
a6:78:6c:89:dd:7b:b9:08:e2:92:b2:1e:e3:c8:ee:
b4:a9:bc:00:b8:6b:9c:40:c2:9b:7f:5d:44:88:bf:
ad:73:47:0c:1f:52:be:38:1c:b4:2e:3a:fb:93:a6:
09:41:c3:f6:e9:e2:f2:9a:15:9f:0a:ad:d8:5b:87:
d9:c6:d2:1c:48:42:8b:34:c9:1e:5b:25:66:f7:a0:
e2:97:06:d1:1d:2f:5d:6d:6d:2b:ff:fc:5b:e1:2b:
8e:3d:6d:31:c5:dd:64:2b:93:9a:d7:8a:3d:ec:23:
01:52:61:64:4a:9e:3c:3a:88:c1:93:2c:57:82:72:
54:11:2e:6a:48:9c:47:7b:e3:25:27:dc:38:e6:8d:
98:c9:76:83:a8:89:c3:bb:27:21:bb:ca:89:13:eb:
49:f6:fd:9f:b8:52:23:39:77:4e:36:fc:d5:4a:1b:
c9:af:91:fe:9d:e4:20:1c:85:ba:82:a4:8f:dd:17:
cb:dd:5d:97:62:97:8a:6a:8e:ab:44:0c:b7:07:53:
d5:88:92:c4:15:f0:d3:9b:de:5d:b6:b0:96:c1:82:
63:ab:27:53:d4:3f:15:f9:6d:ec:11:af:9b:88:be:
c6:e0:9e:1b:5d:d7:a3:48:db:02:19:a2:d1:f3:13:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:93:75:C5:1E:41:0C:51:B8:57:5C:F9:D9:5A:48:D7:D2:11:B4
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:1d:77:11:a6:80:6f:56:af:62:69:7d:f3:2b:dc:b1:82:
94:5c:fc:9d:d2:19:f6:e4:51:fd:d9:9d:86:1a:aa:17:09:c8:
84:39:3c:e8:be:f7:41:88:37:bb:a8:8e:6c:18:29:c3:99:d2:
90:8c:86:3e:5e:31:c4:dd:1a:7a:f1:64:a1:ba:a1:8f:b2:66:
99:8f:a1:1f:1d:b4:9b:e1:0b:48:e3:d9:8b:45:3a:18:f9:3f:
02:3d:56:64:42:9e:88:78:64:1c:8c:85:81:2d:cf:b4:d1:0f:
f0:00:e7:53:04:78:c7:33:1b:0c:20:aa:7e:38:53:4b:e8:5e:
7c:c2:69:43:fb:a2:a7:05:ea:dc:26:5f:76:97:5e:77:25:08:
45:76:96:19:b3:5a:9d:7d:1c:46:7b:1c:4c:8c:49:57:1f:ae:
fa:d5:d3:97:c1:a9:67:5c:0a:35:f0:36:dd:49:d1:22:3a:36:
7b:d6:f1:12:fa:3a:21:e9:7c:2c:b5:d7:38:f4:6b:d5:59:4a:
dc:85:49:6a:e0:9b:b0:93:83:af:d2:89:21:12:62:57:b0:45:
e0:6e:74:95:0d:6b:f1:c3:bd:ee:cc:72:c3:11:15:a0:46:b7:
37:19:7a:c2:78:7f:69:1a:2d:e2:27:9a:81:2c:83:4c:36:f8:
da:9a:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:56 2026 by rpki-client