
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
File: 5Iv1L7wvU90weLyUo7utCjEm88U.mft (raw, json)
Hash identifier: Rp6U83QnlPOxhy/ffM9MEsKnEoaVuoEtoOQE8kalUq0=
Subject key identifier: 16:8C:78:D8:09:96:92:46:BB:17:6F:F2:88:9D:DC:03:52:FF:AE:1B
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Certificate issuer: /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
Manifest number: 03
Signing time: Thu 23 Jul 2026 11:21:28 +0000
Manifest this update: Thu 23 Jul 2026 11:21:27 +0000
Manifest next update: Thu 30 Jul 2026 11:21:27 +0000
Files and hashes: 1: 5Iv1L7wvU90weLyUo7utCjEm88U.crl (hash: wf8AmJOFyVtC/eMNZfQwlX/l2tBNQvHpXedcNe9QIwI=)
2: 6DD5B8F4859111F1BBABB99591A30FBC.roa (hash: kkeNjRMXMW36689rl/JQ+ns23IBHi+og6rmo5ed0reo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Validity
Not Before: Jul 23 11:21:27 2026 GMT
Not After : Jul 30 11:21:27 2026 GMT
Subject: CN=6a61f938-08f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:1d:dd:81:88:a8:6b:ca:5c:39:e2:a8:c6:
82:a5:7c:aa:ce:f5:96:1d:86:e5:cf:d3:65:01:3f:
fb:e7:01:dd:5a:46:4d:71:12:93:47:bb:24:f8:4a:
ba:89:b0:6e:79:d7:b8:d7:ac:7b:de:6e:34:f5:2e:
5a:2f:8c:c3:d7:39:aa:02:3b:20:0b:73:b3:7e:bc:
73:d0:c3:06:d2:45:c7:f8:88:de:7e:01:9d:1a:d6:
b2:4c:27:5c:62:2b:07:78:97:d3:d8:b4:a0:a1:7a:
45:03:80:a9:f9:37:95:06:80:c6:d8:01:21:16:15:
2b:1d:9b:35:67:69:27:85:5d:c2:43:d4:51:73:6a:
61:a8:7d:04:5a:ff:f4:09:1e:41:ce:61:c3:73:ba:
d4:bb:b9:73:08:7b:c3:36:7a:e4:59:6e:61:36:85:
8a:4f:45:49:4f:3d:76:6b:d4:48:42:a8:e2:77:2d:
7b:79:63:6e:e2:b5:28:68:ac:37:d3:85:30:13:c5:
dd:24:a0:93:c2:65:ae:a3:5a:e4:0e:4c:91:96:30:
b9:6c:b7:af:e2:7a:93:65:06:61:2e:cc:63:e3:e5:
3c:4d:c7:46:95:82:3c:62:e6:3a:0e:22:81:a1:0e:
c6:a6:db:c5:3e:38:76:3c:a6:65:67:8b:f1:66:8e:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:78:D8:09:96:92:46:BB:17:6F:F2:88:9D:DC:03:52:FF:AE:1B
X509v3 Authority Key Identifier:
keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c1:f7:34:3d:55:56:14:ea:fe:59:31:9b:da:66:47:4e:a1:
78:b4:bb:50:4e:24:83:54:d0:7f:b7:df:85:4f:2d:29:2e:90:
e0:97:b7:95:c3:27:f2:5c:a3:78:d4:2b:30:e7:28:62:e2:ad:
7c:51:86:d1:b5:46:b9:0a:6a:69:c1:1f:2f:e7:1e:f4:ed:96:
a7:2e:93:7a:1d:b9:be:5a:cf:f0:af:09:81:3d:11:31:dc:7b:
eb:bf:cf:84:19:9e:15:35:92:49:95:41:72:0d:8f:94:a9:1e:
44:ea:00:95:2e:6a:57:2f:4d:60:d2:9c:43:7d:d2:af:fe:28:
44:cb:f6:a5:e7:0a:a9:e0:22:c5:bf:f9:21:c1:e7:76:45:d0:
a3:bb:02:d0:5e:aa:2d:b0:4f:ba:ce:8a:a1:55:db:c5:d8:2b:
00:c6:1d:1d:5e:7e:67:c2:f4:55:8f:75:2b:b9:9e:a8:65:60:
ff:18:f3:0f:cf:37:8f:05:36:30:ce:17:3f:3a:a9:45:43:df:
be:e4:7e:8d:bb:28:76:16:1e:6d:ec:92:59:c6:ab:e3:de:43:
5d:b0:1d:93:ef:c9:0a:16:ed:8a:8d:0c:36:02:30:e7:91:64:
21:da:5d:43:25:ba:ad:3b:de:20:31:91:d3:db:2b:82:6f:8d:
54:1f:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:49 2026 by rpki-client