
$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json)
Hash identifier: cNCsog3XsYnyg/mICVk2p7DCSX7gAeLisHNazbV1XLM=
Subject key identifier: A6:96:21:C6:8C:AF:2F:E0:36:20:BD:50:5F:4E:B4:0C:6A:14:4D:7A
Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Certificate serial: 0425
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
Manifest number: 041C
Signing time: Thu 09 Jul 2026 01:35:15 +0000
Manifest this update: Thu 09 Jul 2026 01:35:15 +0000
Manifest next update: Thu 16 Jul 2026 01:35:15 +0000
Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: SmvgoomdT+XIfIajZBxyCFh945HsZsRGCniJOn5X3KE=)
2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: EiXaWk8MN8PRU4m8/hbOE0IqPBgeOCBNgzztG3jvQeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 01:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Validity
Not Before: Jul 9 01:35:15 2026 GMT
Not After : Jul 16 01:35:15 2026 GMT
Subject: CN=6a4efad3-97cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:a8:ea:de:24:af:35:bd:3c:92:34:8d:b7:
55:42:08:be:97:61:51:58:7d:51:a5:a1:2f:0a:00:
1a:04:2b:81:58:07:42:41:b6:f7:39:49:00:fc:11:
b6:13:79:d3:10:72:b7:74:60:11:b1:fe:c8:ed:89:
24:33:06:2c:27:ed:3c:74:cd:34:86:b2:b6:07:5f:
74:48:65:2f:9c:07:3c:e5:2d:f2:58:91:0f:39:74:
19:63:60:15:7e:63:1c:13:49:5c:44:4f:cd:71:48:
cc:f3:8f:d4:98:43:e6:b0:3e:11:ad:38:de:cd:dd:
1d:67:24:5b:84:ac:03:90:d3:3a:5f:03:60:ad:c4:
df:a4:17:7b:50:93:3c:76:56:1b:f1:ea:9f:15:d2:
f6:ac:6e:4b:fa:01:8f:05:73:7e:d5:45:5a:ca:46:
ae:48:20:b6:99:64:d7:a5:57:98:71:94:5b:81:99:
fb:52:83:66:ec:c4:ed:bc:6e:5d:48:b8:d7:80:94:
ef:46:fc:d7:36:c5:41:c7:41:2f:98:fb:65:a5:96:
4e:be:b5:f2:ee:4b:7e:22:bf:19:64:36:8b:1f:5d:
80:3d:54:d9:84:53:4e:66:fa:40:a1:2a:ce:34:5c:
de:11:84:59:a3:f4:ce:45:cc:b2:65:08:02:dd:8b:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:21:C6:8C:AF:2F:E0:36:20:BD:50:5F:4E:B4:0C:6A:14:4D:7A
X509v3 Authority Key Identifier:
keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:55:fa:6d:05:90:ce:20:86:c7:13:dc:3b:15:2f:80:94:9e:
8e:50:14:05:2b:e8:39:f8:d8:38:b3:53:a7:55:78:0e:76:46:
e2:4b:97:30:5d:c4:07:76:62:95:60:7b:2c:65:d7:d3:45:28:
a6:16:ea:f7:e2:03:25:68:91:c5:c5:57:41:7d:fd:d6:d0:68:
13:c3:dc:9e:a8:58:31:f8:16:be:98:5c:9a:48:b3:05:80:c3:
1c:e8:b1:ed:04:b3:63:ca:97:c8:29:c5:62:bb:c0:6a:d2:f6:
44:75:3d:bf:0c:f5:68:4e:73:bb:a1:0d:9e:f8:bd:af:ad:38:
9c:4a:ec:2d:36:f7:dd:2b:6f:0a:98:1f:a7:b1:63:16:57:97:
ca:17:a5:02:ea:34:0d:7f:50:dc:8a:dd:b3:20:79:e0:ab:ea:
b6:65:c2:ee:16:21:4e:90:b4:f7:e3:4b:e7:07:5f:bc:10:5a:
28:e1:b0:67:2b:f1:87:30:cb:a4:4c:ce:43:20:3f:c7:cf:99:
ba:4d:dd:2a:82:82:1a:50:af:db:68:70:2f:71:72:01:d1:10:
77:49:5f:54:ba:e8:65:e2:a0:3f:5d:63:d1:79:15:25:91:bc:
50:81:9b:bf:f4:fa:26:50:75:26:97:0c:c6:db:ee:bf:c2:a1:
fb:8c:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:53:51 2026 by rpki-client