
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier: boNHfJHm8A91tER26vu1+Gaq/+lfisVVK/5mF9n4X7M=
Subject key identifier: 38:2E:DC:96:85:5C:33:DB:88:BA:73:A2:82:94:98:F7:9C:91:66:E4
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number: 53
Signing time: Mon 11 May 2026 08:23:56 +0000
Manifest this update: Mon 11 May 2026 08:23:55 +0000
Manifest next update: Mon 18 May 2026 08:23:55 +0000
Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: p7zqtwV1gBWUkj9v0Pke3J5VxqouRSqYQuZUzM5nAwI=)
2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Validity
Not Before: May 11 08:23:55 2026 GMT
Not After : May 18 08:23:55 2026 GMT
Subject: CN=6a01921c-5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:99:54:bb:d1:68:e7:3c:c6:0e:28:8d:01:
01:63:77:40:b6:2b:70:df:42:cf:59:34:b7:79:8a:
b2:6a:09:ab:28:5e:d9:ad:50:78:ec:a1:0e:a5:fc:
8d:80:c5:64:1c:a2:c3:d0:2b:cf:5e:a6:a2:40:df:
45:50:26:74:d2:1d:4b:c5:86:2e:51:10:ba:43:04:
6a:73:bf:ef:cb:08:8b:f1:a3:fd:23:b4:b1:1c:66:
3f:4a:a8:e3:57:b7:71:ec:ef:9e:d9:9f:66:09:77:
74:8e:30:19:bc:fe:41:48:a0:d6:0e:45:c2:c0:86:
03:55:94:50:40:47:fc:85:f0:cd:95:24:6d:0c:d6:
4c:7f:cc:68:fb:63:8f:89:22:93:32:fe:b5:9f:79:
56:ab:e7:e6:79:44:10:ea:39:9f:7f:55:b3:c6:3d:
08:f1:84:76:c9:61:3d:fc:d9:06:b0:ca:0c:6b:44:
ad:f6:d1:2b:3c:b4:08:3e:9a:d1:0d:a3:9d:29:2a:
dc:d9:4b:60:a6:cf:ec:70:ba:c1:7f:ca:c0:e4:f2:
6b:1d:f4:a7:25:ee:6d:e2:e4:44:e0:ae:07:d6:cc:
5a:1e:f0:8f:20:e5:60:0d:0f:57:db:23:75:a9:36:
cd:9c:d5:7a:d9:b5:1e:fd:bc:e3:9d:84:9e:be:ca:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:DC:96:85:5C:33:DB:88:BA:73:A2:82:94:98:F7:9C:91:66:E4
X509v3 Authority Key Identifier:
keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:9e:6e:b5:e3:45:7e:9b:54:5c:1e:c9:95:98:a2:82:ce:
50:d8:21:51:e6:e2:94:a7:cc:5b:59:39:8c:46:0f:80:e1:9c:
f0:01:dd:8a:52:9e:f9:83:87:ba:a2:b3:38:9c:ff:23:ca:94:
22:99:d3:80:b2:7d:09:da:fc:b2:ea:ed:81:21:04:a8:60:22:
03:a9:18:5b:68:84:2e:87:47:bf:ad:f7:d7:a5:58:99:c9:73:
64:b8:11:01:de:a2:3f:1b:01:5f:f3:76:fb:38:b2:a9:fb:25:
4f:d9:e1:30:dd:95:34:66:81:22:ed:59:ec:16:78:8a:ab:e3:
bd:39:d9:79:a3:b2:e8:b0:96:38:a6:c1:bf:68:cf:73:ef:40:
ad:fd:8c:be:a9:bd:1c:bb:12:64:0a:27:b7:5d:77:fb:f1:eb:
2f:8d:82:32:0c:12:bf:a7:09:f0:92:09:d1:2d:8e:cf:ab:b1:
17:fd:4a:1a:6c:46:6f:4e:f0:e4:9a:68:81:be:8b:21:ea:85:
2a:65:04:0a:24:68:a1:66:be:ca:1a:ad:5a:47:86:06:c3:44:
c1:7e:52:2d:86:38:25:ff:42:e1:cd:eb:0a:e4:4c:cb:09:e7:
4f:f7:7b:99:d1:38:d5:36:61:d7:e6:f7:ba:60:b2:15:e3:f2:
9a:34:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:24 2026 by rpki-client