
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: o7qaSUbp7XN1wNdOtwdNkTRY23n0OEY9JHLB+Z0KEuQ=
Subject key identifier: 39:F4:0B:83:12:C1:62:A2:CA:FB:71:0B:AF:FD:62:07:37:F5:78:55
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 057C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0559
Signing time: Sat 26 Sep 2026 23:30:28 +0000
Manifest this update: Sat 26 Sep 2026 23:30:27 +0000
Manifest next update: Sat 03 Oct 2026 23:30:27 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: n+cR5krF1qlXvKHlpDM9Gju+bnO1S0jdPevoV4Wdfv8=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Sep 26 23:30:27 2026 GMT
Not After : Oct 3 23:30:27 2026 GMT
Subject: CN=6ab85594-f893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:ca:53:3f:0e:db:27:00:39:d5:d5:1d:52:
59:c8:9c:b7:e9:2a:50:cd:36:6e:63:0e:95:51:86:
21:b2:e5:0f:4c:ce:5e:d3:05:31:76:e9:aa:c9:fa:
37:e2:96:17:c1:60:b2:5e:80:b7:9f:85:23:8b:7c:
fa:1b:08:ae:b4:df:a4:10:59:70:9d:3d:26:5d:82:
76:03:bf:5c:37:50:b1:a9:7a:93:91:d6:bc:2b:9d:
f5:53:91:48:47:c5:89:d4:c1:31:cd:79:0e:49:19:
29:f8:9f:88:f4:c8:d4:1b:d2:79:03:38:11:87:f4:
c0:5d:88:44:5e:bf:67:a0:d2:2a:d9:69:e4:ef:b2:
85:78:c4:e5:1c:82:0d:c4:e8:38:e0:75:25:03:22:
a5:16:1a:ab:37:9e:a0:07:7c:52:fd:f7:77:48:82:
ac:8a:c8:ad:18:1c:a3:bf:e6:f4:07:af:c5:c9:bf:
02:11:2e:d2:19:a6:c1:d8:29:cb:2c:09:1c:12:6c:
3b:72:a1:01:38:b6:fa:09:65:36:e6:2f:a7:00:73:
37:5e:fc:16:45:8e:eb:33:bc:99:93:51:2d:39:79:
9b:f9:75:58:66:8e:a3:a8:61:4c:cf:c0:f1:f1:73:
50:dc:e5:c4:0f:d7:56:e6:a4:79:53:6c:a5:5e:a4:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:0B:83:12:C1:62:A2:CA:FB:71:0B:AF:FD:62:07:37:F5:78:55
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:44:ff:29:19:be:97:74:01:b3:8f:e7:85:d6:21:fb:72:4c:
b1:b3:86:b2:11:26:38:29:48:16:0b:e6:52:59:73:f6:5a:66:
73:68:de:46:72:6a:df:8e:e1:33:28:95:c6:1a:cd:5d:c0:0b:
20:63:79:2e:6e:85:0c:43:94:a1:02:62:eb:12:65:56:05:9f:
b1:2d:5f:49:92:4a:83:7b:ea:ff:1b:da:3f:7d:0b:2d:c1:f3:
02:bf:aa:d5:15:b5:1f:1b:c5:79:8f:b7:d3:c2:01:87:08:c1:
85:ae:ea:37:23:98:a1:0e:dd:f3:6a:4c:32:d4:56:05:c9:f9:
5a:e2:a5:a8:19:5d:79:07:1f:79:65:e3:e1:30:35:93:13:9e:
f4:a1:67:3b:df:94:e9:9a:27:97:b8:dd:c4:bd:87:d1:6c:85:
23:54:c8:fc:f0:be:88:c4:66:05:3f:c9:a9:d0:74:37:ab:a4:
a9:91:6d:f8:e7:43:c9:be:c5:59:61:34:0b:6c:d6:8d:b8:7f:
8b:f2:25:cc:e8:c7:9f:08:91:b6:2c:24:bb:51:b4:05:df:22:
5f:9c:eb:dd:1d:ea:b0:a7:64:c0:72:dc:2b:cf:da:c0:f9:45:
c7:8c:76:3f:5e:9b:ef:b5:63:58:34:ea:f1:31:94:92:22:6c:
2d:49:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:59:30 2026 by rpki-client