
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier: McM4BtAU4Yki0HiJ67bHAvscOyJRybIOZYbmCMj2Hac=
Subject key identifier: 9A:6D:83:22:CE:71:FE:BF:54:E4:5E:9D:01:FA:93:CE:FA:4D:52:09
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 03B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number: 03AE
Signing time: Mon 11 May 2026 05:56:14 +0000
Manifest this update: Mon 11 May 2026 05:56:13 +0000
Manifest next update: Mon 18 May 2026 05:56:13 +0000
Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: A1ppj1mTKnMf6jUnm9Q6rq3LwPIUDzpCfPmKXFOpVp0=)
2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: 1QnIPwxuY/dfkR4MhbghggmusXDfW8Mw8GOCC4ieNXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: May 11 05:56:13 2026 GMT
Not After : May 18 05:56:13 2026 GMT
Subject: CN=6a016f7e-a41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:8c:d8:31:50:23:e3:93:0c:0a:38:0f:8e:
0a:3d:0a:f2:d5:ce:d8:6d:50:6f:69:24:9d:b7:24:
e9:23:7b:2f:f1:7a:0a:0e:32:52:7a:65:f0:d5:b0:
00:45:3e:cd:c6:34:ea:d7:01:ac:81:b8:9c:a9:40:
ea:c1:52:47:fd:fa:96:9e:e3:65:80:84:1e:ac:0d:
37:c8:b4:b3:4f:81:2f:e3:ae:b1:55:a1:2e:e5:8f:
41:b0:56:5d:c2:6a:49:fe:47:91:9f:08:dd:fc:59:
21:a4:d3:3b:5e:79:2c:fc:ab:16:c1:23:67:ed:e4:
fe:f9:46:9e:4c:50:9a:13:e0:ab:27:0e:12:78:3f:
ab:f7:69:c4:f8:a1:62:03:33:39:ab:b7:1a:7f:18:
1c:be:95:05:39:7a:52:c4:e7:51:ab:a5:73:6d:76:
da:4e:66:52:4f:a5:98:50:49:cd:6b:dd:84:8d:aa:
e3:43:80:d6:7b:3a:f6:a9:aa:d2:58:b8:33:21:54:
c8:87:af:14:01:e3:a4:bf:fd:9d:f9:6f:37:d8:23:
0e:b3:22:93:f7:bc:61:94:7c:10:92:ac:d4:e1:b9:
32:0d:54:07:bc:61:0b:93:0a:49:81:92:6b:54:ff:
25:4a:5a:24:8d:45:3b:fa:c9:0d:25:25:fe:96:ac:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:83:22:CE:71:FE:BF:54:E4:5E:9D:01:FA:93:CE:FA:4D:52:09
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:01:a7:a8:15:a4:2d:0b:d1:85:20:ce:52:d9:a1:59:ad:3c:
3a:68:10:3f:6a:44:b9:56:f4:05:db:44:92:33:c0:b0:ae:f3:
31:d6:ab:39:08:52:9a:8e:8c:91:27:04:9a:d5:aa:32:f7:3e:
6f:6f:c1:91:2d:3b:0d:ba:df:9d:5d:f3:b2:3c:5e:c8:85:d8:
f4:7d:ae:69:20:4f:dd:97:0b:4b:86:28:b3:60:65:71:58:05:
19:6a:2f:19:e8:3a:30:69:c5:94:ac:50:95:55:6d:3a:b0:96:
81:44:e5:9a:62:bc:b2:8b:c5:75:42:ee:12:ec:9b:7d:77:99:
a8:11:7e:93:b5:84:14:96:55:4a:ea:1d:37:0b:7b:39:db:9d:
c5:a2:d8:29:7c:35:a0:1e:e4:73:e2:ea:03:c6:53:ef:2c:13:
57:12:0c:e3:21:b4:a0:e7:b2:8d:b3:1e:4a:68:64:25:43:87:
a9:fc:eb:63:86:3c:b2:79:88:74:4c:ac:e7:36:f9:0f:2b:99:
52:17:fb:97:aa:79:ec:23:47:70:f8:b8:00:90:9c:cb:0f:4a:
bc:bb:c9:0f:84:0d:78:b7:31:9d:91:06:14:ed:5e:c5:66:d4:
ca:6f:3f:36:5a:0c:fb:ec:0b:06:95:e5:3a:a3:92:d5:e4:38:
c6:40:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:21 2026 by rpki-client