
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: V8zcch4tu+inNbZI4bJ21DlpzzcQNx7IyhuHAZyrl7E=
Subject key identifier: C7:3B:BB:5E:C0:10:17:CB:E0:A2:E7:0B:18:1A:D4:DA:B8:DA:2F:BE
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0537
Signing time: Thu 23 Jul 2026 00:21:42 +0000
Manifest this update: Thu 23 Jul 2026 00:21:42 +0000
Manifest next update: Thu 30 Jul 2026 00:21:42 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: hMZAm4s8XxanHdHGIxPnkQKo6tyQxL0fh32ER1VlFG4=)
2: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
3: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Jul 23 00:21:42 2026 GMT
Not After : Jul 30 00:21:42 2026 GMT
Subject: CN=6a615e96-a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:d4:dc:2c:c4:93:74:eb:da:2a:6a:fe:21:
52:a6:58:2c:26:fa:ed:ca:7e:4e:67:c3:42:8b:90:
d8:77:f4:69:aa:f8:31:4b:7b:eb:71:0c:e5:06:e9:
be:ea:89:0b:b1:67:e3:e1:5c:94:42:03:19:84:71:
0f:5d:fa:10:ed:23:4f:6f:58:7f:0b:23:1b:56:8f:
62:79:ef:56:51:d7:fa:e4:9d:47:83:2d:4f:5f:32:
67:3d:14:5e:8c:9f:88:03:97:6a:dd:73:90:2d:74:
e9:21:37:17:a6:21:af:ac:a8:79:1a:79:55:c0:8b:
e4:28:93:fb:a0:c7:19:a6:fa:98:c3:d4:44:d0:ce:
5e:65:56:d2:31:e6:5c:13:41:22:4c:af:90:82:3e:
30:d8:61:97:75:53:ad:0b:6c:6d:b6:3e:a9:d0:0d:
82:7e:5f:3b:f1:ca:02:9c:81:97:da:60:7e:c1:8e:
09:41:1d:77:52:54:09:55:12:26:eb:c9:9a:75:a3:
f8:6b:78:c2:95:18:35:33:49:4a:eb:d7:33:c0:aa:
14:79:99:4b:1d:4b:e7:1f:7b:36:44:69:53:b7:05:
31:56:75:d7:f0:0c:57:7d:09:40:b6:34:7e:69:0c:
5b:05:c3:e3:c4:db:6a:57:02:28:c1:75:5e:52:a9:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:BB:5E:C0:10:17:CB:E0:A2:E7:0B:18:1A:D4:DA:B8:DA:2F:BE
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:a5:32:04:d2:af:f3:fc:cd:d1:cb:10:a8:c3:ce:72:51:
fb:df:88:04:04:20:64:5d:f7:fd:c9:42:1c:06:8b:2b:e2:3d:
b2:ad:40:f6:f3:fb:e3:5f:e5:5b:a0:74:02:9f:c7:8d:6d:4e:
61:74:c9:1b:3f:83:1b:f9:57:07:d6:c4:0f:e3:16:3a:7b:e5:
56:cd:8f:6b:1a:77:a7:59:0c:f6:ed:7f:b9:ad:91:71:bb:90:
d3:63:1c:c9:0b:33:40:e2:74:43:89:7f:b7:ad:7a:4c:b0:ce:
1c:07:3a:7f:29:e5:04:d5:84:5b:b5:33:5a:19:25:64:31:e1:
17:77:e5:08:64:18:bf:0d:9a:e7:9a:af:5b:ce:2f:34:23:ec:
d4:c7:9e:0e:bd:12:01:38:9f:5a:f3:58:66:5a:c4:be:eb:3f:
6e:4f:be:ca:c8:8c:1f:d5:76:33:a8:8f:2c:1b:ea:cb:f6:58:
e8:ff:75:72:a0:44:4a:ea:f5:48:2d:da:17:af:dc:6b:28:cc:
46:2f:0a:aa:ae:a2:ce:69:6a:01:ff:5b:8e:c7:53:aa:6b:89:
c2:e9:ea:21:60:9d:d9:04:2a:ef:fc:75:5d:df:bc:f4:56:a3:
66:35:13:6b:8f:5d:f2:23:c8:bd:47:f6:f3:44:60:ae:05:4c:
50:56:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:22 2026 by rpki-client