
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier: pQ5C+IeMvfBOLe8Eil6IDJ+wpHbW1MTn0/+3YbM3Ryc=
Subject key identifier: 0C:19:BE:8C:FB:C3:D6:6E:6C:24:70:B3:BE:BE:43:8F:0C:53:60:A3
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number: 016D
Signing time: Wed 23 Sep 2026 04:45:54 +0000
Manifest this update: Wed 23 Sep 2026 04:45:53 +0000
Manifest next update: Wed 30 Sep 2026 04:45:53 +0000
Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: b0Sh95/NlB4Mg+QV3DYFp44hX4sPJ8qt2OICNjyCmBg=)
2: qhZ3tYlUNLx4CvsqN-C1p0jr5DI.asa (hash: wis4l1kG1hTGz1dDj73IbjwvA1kqvI9WiQ+qWwiJkF8=)
3: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Validity
Not Before: Sep 23 04:45:53 2026 GMT
Not After : Sep 30 04:45:53 2026 GMT
Subject: CN=6ab35982-9670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:d4:8b:11:12:24:fc:f6:34:5c:6e:0f:e9:
ed:21:ee:1a:f6:bd:4e:4c:5a:22:9d:04:dd:0f:03:
18:ab:a0:04:c9:1a:be:86:57:30:04:08:98:c1:ac:
62:f9:56:58:9d:ab:e8:11:11:3c:38:30:3a:8c:df:
44:92:9f:85:ec:8d:47:fc:e4:20:1a:33:bf:b7:77:
41:4f:eb:36:ea:c6:6f:70:c0:e4:db:c2:0a:94:dd:
31:fc:31:40:8b:17:3b:e6:ea:af:7b:8f:e1:46:bf:
6b:61:c9:09:e4:04:8f:ff:2b:20:02:8a:4e:e6:f8:
9c:30:32:be:8b:a1:c0:24:d5:b6:44:4d:1b:2f:9b:
e5:99:82:9b:fd:07:45:68:6a:1b:c1:96:c9:02:3d:
13:62:8c:5e:d5:d2:e1:41:e3:ff:97:2c:b6:f1:f4:
0f:34:e2:66:83:72:66:f3:a5:94:7f:39:39:61:10:
05:7e:b0:cc:44:e7:b2:e2:69:ca:05:4c:6c:cf:84:
aa:fd:02:20:5d:a2:d6:93:d5:aa:2f:52:f8:51:d1:
b8:2d:2d:ea:b5:e0:41:af:95:f3:93:64:72:1a:2a:
21:05:fe:07:cf:dc:1a:98:07:93:9c:81:b1:47:c1:
ba:6c:25:86:8f:4e:b3:cf:9d:18:54:15:29:ce:3e:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:BE:8C:FB:C3:D6:6E:6C:24:70:B3:BE:BE:43:8F:0C:53:60:A3
X509v3 Authority Key Identifier:
keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:58:37:c6:f3:2a:8f:a0:c2:a7:72:08:c9:8f:d7:8f:da:bc:
56:fb:05:e1:73:b0:43:1e:83:82:48:27:83:52:bb:80:51:de:
e5:1b:d5:29:16:ad:0f:6f:ee:2b:dd:ff:8c:f2:2f:c8:06:a7:
15:83:a9:b6:17:ad:2e:3b:f9:2e:70:de:0a:67:47:6b:80:05:
b4:aa:89:26:69:19:f8:6c:a8:5f:6f:a5:68:ad:a3:45:80:06:
00:5d:a3:87:f8:9b:8e:f8:60:95:f6:19:25:a4:bc:9d:95:42:
72:f8:09:91:15:f0:24:14:82:c5:05:bf:0e:12:f4:17:f0:35:
d9:43:d0:6c:ba:73:87:e0:ef:cb:ca:3d:05:37:cb:6d:e0:c1:
f8:7c:cf:8c:ea:a8:36:fa:27:04:8c:df:8d:3a:1a:1b:db:06:
2e:60:58:bb:fd:ed:99:5a:55:8b:1f:0e:1b:62:d6:48:e1:f1:
70:6e:84:21:73:7b:41:38:7d:6b:0a:ae:7c:82:91:ec:01:99:
d8:e9:b9:5b:2d:36:8f:ed:92:d8:fe:20:d2:c0:86:34:a7:f3:
ed:f0:5d:a6:3d:c1:f3:69:19:95:48:2c:1b:69:5b:d3:58:a5:
9c:2f:ee:78:0c:4a:50:08:5f:b6:e0:fd:92:41:ae:42:34:bf:
d6:7e:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:48:55 2026 by rpki-client