
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: HS/HYqg/BaAgUN2rIJkcD7fUP+7musH7EqifuhIxoVE=
Subject key identifier: 0E:78:B3:DB:1F:35:93:51:6C:06:2E:30:CA:13:50:F4:36:5D:B9:04
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 0316
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 02F8
Signing time: Mon 11 May 2026 01:23:38 +0000
Manifest this update: Mon 11 May 2026 01:23:37 +0000
Manifest next update: Mon 18 May 2026 01:23:37 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: vb25CW5MVYkT5ubD2dYDU5ikQlcCC/s3IGZhPoAaojU=)
2: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=)
3: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=)
4: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
5: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
6: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=)
7: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
8: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: May 11 01:23:37 2026 GMT
Not After : May 18 01:23:37 2026 GMT
Subject: CN=6a012f9a-abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:1e:ca:31:a7:b4:5e:9a:79:11:50:3d:a3:
ed:71:7a:79:cc:6e:86:b4:f8:d6:d9:fc:d9:6d:59:
59:e9:a9:b3:e0:ea:6a:ae:69:35:53:21:14:2f:61:
f6:f1:7a:57:80:a8:2d:07:bc:9f:38:86:52:75:5b:
77:78:d6:f0:73:8e:c4:14:8f:e1:c1:9b:d2:45:af:
36:9d:05:34:ce:2c:dd:06:ec:b7:1b:52:45:b9:5c:
b1:d0:ca:07:06:a7:80:c5:ea:8c:63:a1:02:59:d0:
5a:52:56:bb:93:76:1a:d0:14:30:78:aa:0c:84:14:
88:05:2e:55:cb:ef:a2:8b:0a:85:18:8f:c2:a1:0f:
fe:de:c1:d4:20:14:45:dc:2f:26:8c:9a:f0:6f:7c:
af:2d:b2:77:a8:ee:24:5f:02:4f:d2:0f:72:5d:eb:
10:8c:eb:dc:86:24:fb:02:cc:de:c6:5b:d0:33:9d:
9d:05:1e:4c:10:bd:b4:b5:20:bc:e1:3d:2b:85:69:
1e:7d:2e:0d:b8:8f:55:53:20:80:1d:0a:4e:f2:77:
70:14:aa:fb:e8:05:73:72:29:11:2a:17:6d:58:1a:
fe:45:8f:64:5e:08:3d:68:b4:27:7e:6f:e3:15:bb:
04:08:ee:a7:5f:08:2a:cf:74:d3:d8:4a:66:54:4e:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:B3:DB:1F:35:93:51:6C:06:2E:30:CA:13:50:F4:36:5D:B9:04
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:ed:77:9b:63:a0:01:e8:e2:66:bf:31:3a:7d:19:d0:62:
0e:87:72:7e:3f:2c:77:17:40:7b:d9:2d:c5:d6:fd:83:16:8c:
b1:c9:56:4a:b9:fe:08:b5:ff:97:4e:ad:66:59:0b:4e:96:60:
03:6d:ba:da:56:18:c8:5c:9b:21:58:4f:b8:ef:ce:d0:83:be:
c2:43:91:67:d0:8f:a7:85:d4:51:60:c9:41:40:19:9b:b1:ca:
68:98:f9:b1:aa:66:89:ed:2d:52:d9:cf:09:46:e3:c9:fe:1a:
4d:e0:70:72:17:2e:55:3b:be:b8:ea:89:cc:44:98:ba:36:99:
14:eb:9b:1b:56:40:4c:64:6d:0e:5e:49:e5:43:23:b3:5c:ca:
43:91:03:ac:70:2f:87:a7:70:e4:7f:ad:a0:c6:be:2a:8f:e0:
41:d2:4b:a0:c8:1d:b8:f7:7f:7b:e6:9b:43:3f:47:48:38:b5:
b0:84:71:f4:32:07:60:0d:eb:d3:7e:a3:fd:b2:d2:49:2f:d0:
19:99:81:0d:62:b0:1a:91:ae:ba:74:e2:60:c0:c2:05:68:93:
02:c6:b1:13:d3:94:14:9a:6e:38:2b:ab:f5:6b:0c:e4:a7:3c:
b4:dc:08:f9:01:e6:fc:d6:87:74:58:3d:a2:d8:cb:7b:96:54:
17:40:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:44 2026 by rpki-client