
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier: QVCxqt4OSQEvWzv98HC7FSA156J9eYuNyJnXReDqrd8=
Subject key identifier: A2:27:5C:70:A2:28:19:20:84:6B:4B:15:4D:EC:8C:CC:A6:50:68:16
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number: 020D
Signing time: Tue 21 Jul 2026 04:20:29 +0000
Manifest this update: Tue 21 Jul 2026 04:20:29 +0000
Manifest next update: Tue 28 Jul 2026 04:20:29 +0000
Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: MeMKJCemGxhkpIIDbZOCbvUlwyMM7yT5QNSMG48sqYw=)
2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
3: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Jul 21 04:20:29 2026 GMT
Not After : Jul 28 04:20:29 2026 GMT
Subject: CN=6a5ef38d-f217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:6d:fc:bb:70:df:b5:f6:7a:2b:1e:a7:eb:
74:12:07:bd:04:04:31:09:a5:1f:8b:28:72:6e:d5:
2a:a3:6d:cd:e4:9c:61:36:19:06:f9:67:00:09:d8:
41:21:c6:31:70:f6:30:81:8f:ce:ad:d6:87:c0:3a:
2a:85:74:2b:83:7e:17:d6:c2:55:de:7f:a6:fc:cc:
61:84:b3:7a:ed:c7:1d:4f:0d:03:b0:94:d8:45:c9:
d1:12:bd:91:48:d8:d6:81:3b:25:2b:98:0d:c9:1a:
30:7d:6d:27:72:ef:b1:81:e9:d1:5e:de:4f:31:91:
20:72:52:e4:7f:77:b4:82:33:40:a9:60:08:49:b0:
a0:a4:8c:79:de:41:39:8c:b0:0f:c5:4c:6b:6e:90:
b7:d9:70:b4:f2:2c:ce:11:4c:ba:e6:3d:80:f2:16:
ff:bb:b3:d0:16:eb:41:a3:2b:78:69:e0:4e:58:aa:
37:c0:cd:ce:a9:97:11:ec:9b:39:c0:38:61:29:c4:
e0:e2:1a:e9:6e:50:07:93:1f:34:84:2d:df:fc:4f:
61:44:bb:a0:90:4d:7e:ff:31:2a:b1:f7:43:43:33:
5c:be:f0:ca:10:2f:e7:eb:56:ba:db:a6:7a:b9:56:
84:d6:e3:72:d7:1f:9f:08:1b:e4:71:23:f0:50:b4:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:5C:70:A2:28:19:20:84:6B:4B:15:4D:EC:8C:CC:A6:50:68:16
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:8c:2f:fe:d1:32:e1:96:18:17:79:66:73:93:38:32:94:
0f:d9:ef:91:4f:c3:f9:9a:8a:6a:a8:e1:6c:ce:09:35:d1:57:
7d:35:2d:e5:62:b6:41:82:15:2e:20:78:b6:5f:13:aa:e6:3e:
38:c0:78:d5:f5:88:59:ce:ed:06:d0:ef:1d:0d:d4:dd:d4:11:
82:c2:c0:4d:0b:3f:23:f9:22:ac:e1:bf:c8:1e:eb:70:db:ec:
32:c1:f2:df:c5:26:6c:2f:21:31:2a:a2:5a:21:5f:e6:63:83:
4c:a2:a9:bf:41:25:b8:03:d1:b0:c9:40:89:bf:4b:67:33:49:
dc:6c:c1:dd:b1:78:38:a3:61:a0:6c:ce:6b:38:9c:4a:0f:08:
29:63:42:93:8a:4e:3b:e8:a5:4f:5f:30:cd:1b:b7:18:22:ba:
e9:e5:b7:e8:36:84:07:87:d9:2b:5e:29:ac:f6:6e:92:d7:eb:
0e:10:6a:75:50:48:b1:83:ca:41:77:16:82:05:b1:b8:06:a1:
cb:b4:36:50:a9:e5:22:67:3e:b4:4a:4b:7e:95:80:a8:6c:88:
6d:e0:04:8d:2c:e5:4a:93:bf:40:bc:dc:b8:85:21:df:51:b9:
86:2f:a1:f6:8c:72:80:ae:23:7f:2d:d1:3a:84:45:26:54:2b:
11:73:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:55 2026 by rpki-client