
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: BKRLC/YO3GNz34EVJGg7zJpNsu6GTWrK5nCUURXpAwU=
Subject key identifier: D4:74:58:65:27:A3:55:92:F4:C7:38:4F:C9:AF:D5:16:24:DF:C1:43
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 0163
Signing time: Sun 05 Apr 2026 04:24:06 +0000
Manifest this update: Sun 05 Apr 2026 04:24:06 +0000
Manifest next update: Sun 12 Apr 2026 04:24:06 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: 8fh4zMOK/aEKyufRV3hQkTFW5kBRuEM476WMsfddgC0=)
2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Apr 5 04:24:06 2026 GMT
Not After : Apr 12 04:24:06 2026 GMT
Subject: CN=69d1e3e6-f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:ed:81:dd:7f:08:f0:13:b1:98:8f:cb:86:
b6:20:54:67:e8:42:2b:56:d1:e5:f7:a5:d9:e4:ed:
b8:03:17:74:c2:de:a1:f5:a8:87:3a:40:8f:e9:00:
3d:cd:c0:6c:20:d2:a6:2c:1d:7a:65:a8:99:51:54:
e8:c4:5a:04:e1:d1:fc:dd:c8:b8:66:a1:a3:dd:06:
3f:c0:7a:38:3c:87:0f:ac:88:85:27:aa:e2:20:d3:
5b:24:60:34:e5:de:1f:d4:be:ba:67:c8:2f:b3:4b:
cb:38:43:d1:1d:67:c9:bb:72:10:d5:63:21:b0:9f:
8a:05:de:8e:43:dd:cd:30:24:3e:1a:75:e2:66:25:
cb:35:29:6b:3a:1a:ff:66:df:cd:45:96:76:66:9d:
5c:71:0f:97:56:c7:94:39:6b:af:65:c1:77:f4:7a:
98:6f:84:89:2f:7c:fa:6b:9a:bf:3a:56:c1:b7:58:
8e:c5:1e:73:7c:18:11:9a:8c:56:b6:1e:5e:59:f8:
56:4a:7d:a0:26:e0:e2:91:93:72:ec:be:18:91:a0:
02:66:3a:a9:28:9f:59:d9:3e:ca:a4:36:7f:17:cf:
10:be:ce:a5:f8:6e:81:18:37:5b:d6:37:c8:9c:16:
7a:0f:b1:26:50:65:54:a7:ae:48:12:ff:68:02:be:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:58:65:27:A3:55:92:F4:C7:38:4F:C9:AF:D5:16:24:DF:C1:43
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:99:ea:83:09:a0:db:77:5b:e4:1d:42:4a:95:30:ce:5d:
c3:ea:05:a6:f0:be:fa:32:b7:98:ee:a1:4c:85:0f:4f:ca:aa:
f4:c8:b2:f1:10:93:fb:bf:fa:6e:10:d2:84:46:25:66:6d:77:
2b:35:a3:cb:ae:e9:38:9a:ec:c5:93:c4:66:97:e8:55:97:9b:
30:65:d5:3a:81:38:ac:52:f4:1a:65:f4:42:a5:72:32:ec:b4:
f6:ba:12:65:07:b0:b0:20:54:28:47:c2:ff:30:7a:ec:65:a0:
1d:d8:17:ca:6e:3a:43:9c:13:d6:71:ad:be:5d:95:4d:c0:13:
d4:b7:00:d4:a0:59:15:b3:05:cd:77:d2:57:48:ff:eb:77:4a:
55:88:e8:2f:f8:95:3f:61:ec:b2:1a:1d:e9:0c:91:cb:bf:1d:
e8:3f:c3:d0:df:a3:e6:06:0a:bb:c6:91:63:59:29:cd:a4:5d:
13:85:51:0e:e4:98:ca:20:0c:09:10:c3:32:bf:db:61:dd:c7:
0e:45:c4:49:80:62:d0:c8:9c:10:4f:41:13:73:59:9d:7e:fb:
30:34:de:a9:a2:e8:b9:78:ee:2a:65:93:1c:e8:71:4c:36:e6:
44:ec:b5:48:4b:f8:9c:b5:15:05:67:ed:8e:7b:cd:ac:0d:15:
d5:c5:9b:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5
ODJFQzdENzkwHhcNMjYwNDA1MDQyNDA2WhcNMjYwNDEyMDQyNDA2WjAYMRYwFAYD
VQQDEw02OWQxZTNlNi1mOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrDtgd1/CPATsZiPy4a2IFRn6EIrVtHl96XZ5O24Axd0wt6h9aiHOkCP6QA9
zcBsINKmLB16ZaiZUVToxFoE4dH83ci4ZqGj3QY/wHo4PIcPrIiFJ6riINNbJGA0
5d4f1L66Z8gvs0vLOEPRHWfJu3IQ1WMhsJ+KBd6OQ93NMCQ+GnXiZiXLNSlrOhr/
Zt/NRZZ2Zp1ccQ+XVseUOWuvZcF39HqYb4SJL3z6a5q/OlbBt1iOxR5zfBgRmoxW
th5eWfhWSn2gJuDikZNy7L4YkaACZjqpKJ9Z2T7KpDZ/F88Qvs6l+G6BGDdb1jfI
nBZ6D7EmUGVUp65IEv9oAr6NDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNR0WGUn
o1WS9Mc4T8mv1RYk38FDMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF
RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk
NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW2yZ6oMJoNt3W+QdQkqVMM5dw+oFpvC++jK3mO6hTIUPT8qq9Miy8RCT+7/6
bhDShEYlZm13KzWjy67pOJrsxZPEZpfoVZebMGXVOoE4rFL0GmX0QqVyMuy09roS
ZQewsCBUKEfC/zB67GWgHdgXym46Q5wT1nGtvl2VTcAT1LcA1KBZFbMFzXfSV0j/
63dKVYjoL/iVP2Hsshod6QyRy78d6D/D0N+j5gYKu8aRY1kpzaRdE4VRDuSYyiAM
CRDDMr/bYd3HDkXESYBi0MicEE9BE3NZnX77MDTeqaLouXjuKmWTHOhxTDbmROy1
SEv4nLUVBWftjnvNrA0V1cWbIg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client