
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
File: 5Iv1L7wvU90weLyUo7utCjEm88U.mft (raw, json)
Hash identifier: /Nsjw36zdPGdcbdwjRa+sGqQG8T/WIKmBw8Ux4GnLO0=
Subject key identifier: 88:87:A5:B6:5B:5D:90:9F:0B:1B:BA:C0:1B:E5:BC:CE:D2:E3:C9:27
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Certificate issuer: /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
Manifest number: 25
Signing time: Wed 23 Sep 2026 08:34:55 +0000
Manifest this update: Wed 23 Sep 2026 08:34:54 +0000
Manifest next update: Wed 30 Sep 2026 08:34:54 +0000
Files and hashes: 1: 5Iv1L7wvU90weLyUo7utCjEm88U.crl (hash: 7jkh8OrfZlCTTxF5LYb3WIVZyW0Xf/RnX700Qv/bGrw=)
2: DE76C686889611F1B93BA8C46911F970.roa (hash: qJE6TO8uJYgLahM06vJS4Wmd4X/FNEwPw6/9LFb1+gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Validity
Not Before: Sep 23 08:34:54 2026 GMT
Not After : Sep 30 08:34:54 2026 GMT
Subject: CN=6ab38f2f-890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:d5:75:26:d9:71:51:46:29:bb:ed:b1:8e:
34:2a:31:ce:76:21:29:1b:9b:46:23:bf:ec:89:2c:
55:fd:b4:4e:46:ad:53:81:aa:2e:af:b0:ac:ea:76:
0c:dd:20:46:ad:db:7c:27:3a:a6:95:30:52:b1:61:
96:d7:34:76:37:89:44:d5:70:53:30:4d:a9:57:bc:
71:29:97:5f:2f:0c:c8:33:6e:a2:cd:e9:9f:1b:75:
c1:18:5c:8f:59:3b:a0:3a:eb:03:74:9a:f8:81:08:
4d:e8:50:b3:c9:a5:8b:89:86:96:3a:a0:04:1f:bd:
35:5f:fd:df:21:43:67:7a:fc:37:63:a7:94:64:08:
77:84:6b:09:74:0a:90:0f:c3:f9:43:c6:3b:73:aa:
75:75:30:a3:b2:0a:85:36:3a:d0:fe:26:81:ad:66:
0f:5c:46:a3:50:71:13:4b:dd:02:cc:14:87:d2:78:
6c:e2:01:76:73:8e:96:3d:52:aa:77:fe:0e:30:0e:
b4:2f:6d:5c:b4:64:3b:4a:1c:aa:93:68:41:1a:89:
bc:af:04:95:fd:ad:4c:d9:63:92:88:c7:c4:35:69:
fb:a0:99:69:aa:e1:f5:90:6d:56:e7:e9:a5:8b:aa:
b5:05:6e:88:bc:19:2f:06:ae:69:af:c0:a3:ce:c8:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:A5:B6:5B:5D:90:9F:0B:1B:BA:C0:1B:E5:BC:CE:D2:E3:C9:27
X509v3 Authority Key Identifier:
keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:fa:8b:a3:dd:51:93:a9:4e:43:5a:f2:59:03:71:89:51:03:
60:78:46:ea:6f:7f:0e:72:1e:21:f2:91:dd:05:a6:f7:34:a1:
e0:ea:11:e3:b5:49:67:90:a7:fd:0d:ec:fd:49:20:71:c8:ce:
92:b9:47:63:d9:19:72:64:3a:ce:50:f2:c5:95:ea:dd:e3:10:
79:4f:a2:cf:2e:1e:20:39:03:a5:c5:75:c2:b5:66:fc:88:6b:
a4:c1:b2:65:32:17:32:7e:85:1c:df:2c:ca:f2:a3:43:01:d5:
5f:79:d7:92:6b:a3:f7:d2:bb:36:e7:95:fc:d9:38:8b:a7:ac:
7e:5c:8a:24:22:d1:b7:08:48:7d:f3:30:29:12:8a:21:63:ce:
3e:0f:0a:a4:87:c8:35:35:f5:27:da:31:b5:c4:34:2b:f3:68:
16:ca:fa:1b:7b:2c:0e:b7:13:f6:4a:88:a2:e7:e2:af:0c:ca:
b4:18:11:92:3c:4e:e7:ae:59:a3:61:a1:76:00:48:ed:21:a7:
ac:95:b8:a8:ed:87:06:70:a9:df:fd:fa:fd:db:23:1f:fd:fb:
43:1f:5e:37:ed:1c:7a:e3:30:61:28:46:89:38:ae:65:43:dd:
cc:e9:ef:27:cb:8c:d1:32:a2:63:c3:01:41:a5:d7:29:0a:80:
ba:8b:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:29 2026 by rpki-client