
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: Dp64zXAO6SJ+AOic189fNzUszicmjJNmABrRGLN96y8=
Subject key identifier: 7A:F9:19:68:AE:8A:F3:60:53:E8:36:0F:73:8E:30:65:C4:4D:E0:00
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 5C
Signing time: Mon 11 May 2026 08:13:13 +0000
Manifest this update: Mon 11 May 2026 08:13:12 +0000
Manifest next update: Mon 18 May 2026 08:13:12 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: MST1VlL8oze1cIprvAMRkHSVaW/KB7KquNOPXDEpFVc=)
2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: MKqJq2FumoKTrTwmyrH8ChMilgYTt/EL/h7r2rH2ApY=)
3: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: 77Ti4coJG6upOfWGSXiHZBgxkM1mBFKcvk6A/BW0GOQ=)
4: 0853E998C45711F080167D38C4F9AE02.roa (hash: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: May 11 08:13:12 2026 GMT
Not After : May 18 08:13:12 2026 GMT
Subject: CN=6a018f99-7185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:95:64:70:42:c3:53:95:bd:23:76:0b:91:
c9:a3:d9:8d:26:19:19:b1:03:2d:7d:5e:93:98:b2:
ce:70:03:3f:4a:a1:32:8f:61:9e:84:dd:31:67:74:
54:99:76:70:0b:73:ce:94:60:7f:2e:6f:41:8c:74:
1e:bf:c1:f3:c9:40:19:71:71:ea:92:32:07:d4:de:
86:33:c7:b7:87:75:f9:00:5e:0a:a0:29:25:f4:4d:
18:e1:5e:7b:3e:94:95:e8:0a:1a:02:bd:7a:a8:6a:
2f:7c:9b:6a:7e:55:ea:a5:f6:ec:45:a4:cb:c0:29:
0a:4a:91:da:41:cd:b7:32:b4:6a:62:89:39:3d:8c:
de:01:a3:7e:7f:58:c2:ae:0b:3c:fa:a5:2a:b1:12:
cb:23:27:0f:c5:ff:55:2b:60:b5:55:36:b4:32:5c:
f9:a8:42:34:99:b4:49:3f:f9:cc:62:9c:46:73:83:
d8:0e:57:4f:43:42:ee:3f:aa:10:1d:ca:56:1f:45:
3c:43:39:95:f1:a5:18:03:cc:13:75:38:c7:e7:10:
f4:de:57:ad:0c:79:6e:13:9d:41:55:dc:5a:8b:36:
28:38:30:b2:5f:b3:87:23:60:d3:d6:27:bb:5a:1c:
36:9b:34:ca:67:e9:f8:6f:aa:20:18:d7:16:c1:e3:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:19:68:AE:8A:F3:60:53:E8:36:0F:73:8E:30:65:C4:4D:E0:00
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:0f:68:ef:5c:2e:24:d6:ec:6f:b4:5f:ee:e5:5f:58:61:3e:
03:40:45:40:51:6b:4c:f3:df:b3:7b:cb:71:19:b0:9f:28:e8:
89:b6:c0:05:d7:39:0a:89:a2:7f:c5:19:2f:c2:54:b3:21:63:
da:de:a1:93:b3:66:8f:c5:b7:79:9e:8d:0d:20:55:5a:39:33:
3a:bc:96:d8:69:eb:e9:42:1e:03:7a:0a:b6:99:74:eb:ca:dc:
93:22:af:bd:ef:d3:1c:21:39:6d:09:01:3e:30:e9:03:06:94:
37:fc:ff:a5:e8:b0:a5:b2:eb:f9:50:a3:83:62:2b:65:6e:62:
e6:af:dd:30:be:81:63:15:c7:8f:5b:1e:1a:b9:72:e5:d5:c1:
70:19:25:cc:a5:dc:f7:be:02:ca:c6:be:b2:e9:60:12:a6:d8:
df:91:10:f0:ad:de:c2:be:8a:2c:28:8d:fd:6b:1e:92:ea:cf:
32:c5:7e:07:bb:29:73:99:03:f8:d7:12:1e:32:8d:21:e6:a4:
f3:02:6c:3f:80:c4:c4:ea:7a:a5:22:e3:87:89:e3:e5:80:5c:
df:0b:8c:08:79:ba:8b:a3:5d:0f:36:7e:ca:44:94:78:32:bd:
4e:ab:b0:93:7c:e3:85:d7:0f:9e:1c:4a:3b:e5:99:b6:65:be:
4c:30:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:15 2026 by rpki-client