
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier: xoNXdH6fmOjxojhDTjTj0GYMGjl65lTCgP5OisdC9kI=
Subject key identifier: 09:28:DA:9E:32:4E:12:65:A7:8E:02:B3:2D:1D:70:E7:C3:FF:65:AB
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial: 04B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number: 046D
Signing time: Wed 13 May 2026 00:16:14 +0000
Manifest this update: Wed 13 May 2026 00:16:13 +0000
Manifest next update: Wed 20 May 2026 00:16:13 +0000
Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: ucqnk435lodXYTaaoOer9TOU1WZIFRXkUCVunbBGBvE=)
2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: PuL+mA1dV7Hh7bENHYnKx3eA2jTd4Smp4c1oR/M4V58=)
3: 06820D08961011ECA540626AC4F9AE02.roa (hash: 3dB0qB5yNmzIvDRiuP2+fGgguKKPz4Cvi65Utf4OECk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207 (0x4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Validity
Not Before: May 13 00:16:13 2026 GMT
Not After : May 20 00:16:13 2026 GMT
Subject: CN=6a03c2ce-ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:89:17:fb:5e:26:f0:73:48:25:18:66:56:
1c:96:a9:d4:f6:bf:4c:6b:99:62:6e:d7:3b:4b:5b:
9a:d9:45:b2:99:ef:e7:ae:00:1f:be:71:5f:a7:01:
02:5d:5e:10:6b:d8:29:db:d2:af:48:ec:c4:84:07:
45:2f:c6:0a:b2:c2:ca:f8:b5:d5:04:52:01:56:1f:
11:d3:61:2b:84:d6:fe:b8:e3:00:50:5b:83:6c:44:
61:36:ec:3e:54:4d:95:05:50:04:fd:34:65:03:79:
bf:c5:f0:19:ec:50:da:0c:2b:22:b7:5a:5b:1e:3a:
cf:2b:74:41:0a:18:12:e0:fe:50:54:67:00:7e:0d:
f6:df:10:f1:7a:a8:94:6d:7a:11:47:b1:5a:8e:69:
fd:0a:99:bf:57:c2:3a:2b:a1:b6:13:0e:83:ea:d2:
1c:99:aa:5d:23:df:6b:6f:20:fc:09:29:bb:8c:37:
49:b9:23:f9:30:13:bb:32:73:55:b2:17:a5:1d:db:
75:a1:06:d6:07:af:81:b4:cd:4c:b1:e2:1a:6c:d7:
42:49:d2:51:43:65:33:ce:d4:0b:9c:60:e7:8b:ca:
4a:a7:bf:12:6f:f6:9c:3e:92:04:81:d6:4b:e5:cb:
0b:6d:a9:91:f2:de:d1:c5:f9:6c:49:f1:a9:78:33:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:28:DA:9E:32:4E:12:65:A7:8E:02:B3:2D:1D:70:E7:C3:FF:65:AB
X509v3 Authority Key Identifier:
keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f4:c3:24:df:be:92:1d:11:fe:c4:f0:f8:e4:96:a5:60:82:
2b:87:ac:9d:85:d3:ae:57:ee:23:6e:9c:29:77:8d:f5:a0:27:
b6:94:bb:f2:75:f9:48:c5:09:28:9d:f9:e2:05:2f:cc:21:3e:
9e:9b:2c:74:f1:74:c3:2f:1b:d7:49:25:2d:3d:93:d5:83:6b:
2f:40:3d:24:20:5f:50:ea:2c:4d:1c:ec:94:f8:ad:e2:84:15:
53:7c:20:72:12:b8:ec:14:aa:77:96:c1:30:89:f6:50:ad:56:
dc:28:00:44:7b:ac:77:8c:50:a0:bb:37:96:34:5f:a1:8d:a5:
aa:3d:7f:bc:ef:c3:1c:51:a1:25:15:82:42:83:27:b5:20:7a:
ca:6b:14:ef:6e:6d:5d:1a:49:8e:b4:1b:ee:e7:0a:e7:2e:9a:
5e:fc:18:c8:87:6f:45:79:b2:46:e0:e6:1c:65:af:cc:f3:59:
9c:29:02:52:cb:4d:99:68:bc:df:26:57:f5:d1:a8:18:39:0b:
e5:da:6a:d9:cd:69:d6:cc:fe:39:47:6f:2e:49:b4:b5:1d:9c:
56:76:98:58:ee:a3:c4:ae:57:9d:3a:2b:19:1d:62:72:10:ba:
47:18:37:05:db:0f:3d:77:f9:df:6f:d4:08:b1:e8:8c:11:72:
16:65:8d:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB
Rjk5QjdCNEYwHhcNMjYwNTEzMDAxNjEzWhcNMjYwNTIwMDAxNjEzWjAYMRYwFAYD
VQQDEw02YTAzYzJjZS1lYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3CJF/teJvBzSCUYZlYclqnU9r9Ma5libtc7S1ua2UWyme/nrgAfvnFfpwEC
XV4Qa9gp29KvSOzEhAdFL8YKssLK+LXVBFIBVh8R02ErhNb+uOMAUFuDbERhNuw+
VE2VBVAE/TRlA3m/xfAZ7FDaDCsit1pbHjrPK3RBChgS4P5QVGcAfg323xDxeqiU
bXoRR7Fajmn9Cpm/V8I6K6G2Ew6D6tIcmapdI99rbyD8CSm7jDdJuSP5MBO7MnNV
shelHdt1oQbWB6+BtM1MseIabNdCSdJRQ2UzztQLnGDni8pKp78Sb/acPpIEgdZL
5csLbamR8t7RxflsSfGpeDPmLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAko2p4y
ThJlp44Csy0dcOfD/2WrMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z
ekczeFpsdnh5SUN2bWJlMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw/TDJN++kh0R/sTw+OSWpWCCK4esnYXTrlfuI26cKXeN9aAntpS78nX5SMUJ
KJ354gUvzCE+npssdPF0wy8b10klLT2T1YNrL0A9JCBfUOosTRzslPit4oQVU3wg
chK47BSqd5bBMIn2UK1W3CgARHusd4xQoLs3ljRfoY2lqj1/vO/DHFGhJRWCQoMn
tSB6ymsU725tXRpJjrQb7ucK5y6aXvwYyIdvRXmyRuDmHGWvzPNZnCkCUstNmWi8
3yZX9dGoGDkL5dpq2c1p1sz+OUdvLkm0tR2cVnaYWO6jxK5XnTorGR1ichC6Rxg3
BdsPPXf532/UCLHojBFyFmWNaA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:32:35 2026 by rpki-client