
$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier: DqYJXXYWf6WS6yz1yGRDNSUeBbM7xxkEib+l0Orp+CI=
Subject key identifier: B1:F4:49:7E:C7:EF:14:CE:B1:E1:45:D5:9F:32:62:C8:69:41:1B:9F
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number: 0231
Signing time: Wed 19 Aug 2026 03:12:27 +0000
Manifest this update: Wed 19 Aug 2026 03:12:27 +0000
Manifest next update: Wed 26 Aug 2026 03:12:27 +0000
Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: QKbrfE5xQ5O/NE9eG5sc9CGuL6dxzCR9mUbzcilaGqg=)
2: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
3: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Validity
Not Before: Aug 19 03:12:27 2026 GMT
Not After : Aug 26 03:12:27 2026 GMT
Subject: CN=6a851f1b-599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:3c:da:d2:42:71:ba:9a:fc:43:b3:4c:e5:
14:1c:44:04:54:b8:84:cc:43:f2:0f:30:b5:d7:df:
5f:ff:84:36:06:24:65:6d:75:d9:49:f7:02:97:33:
00:7a:9d:d4:68:ec:0f:3b:e7:21:50:ec:50:8e:02:
38:9f:47:ac:e5:d9:2c:93:ee:1a:f9:f5:d1:79:74:
ae:00:dc:d4:bb:6d:b3:79:4c:9d:de:56:e3:13:c4:
69:7d:24:b3:f5:fa:98:0d:bd:aa:3c:84:6f:ac:89:
ca:d9:7a:35:17:55:03:1a:94:57:ac:56:48:b8:8e:
f8:47:6e:00:62:6f:ee:a5:46:c8:31:7f:23:c3:40:
0e:57:b4:4e:1c:ce:a3:ea:13:e0:e5:cf:34:aa:54:
4c:5a:8e:7d:0e:f4:87:ed:1e:c7:54:e9:48:3e:5e:
4b:4b:9e:84:72:5a:c3:7b:8c:15:e3:1a:29:1c:e0:
8c:ed:51:20:e3:55:45:18:44:73:4c:d4:88:3c:8a:
57:da:fa:f5:94:76:da:3e:6d:ac:18:01:5b:0a:8d:
94:11:9d:34:43:a5:06:70:98:66:c8:9c:2d:60:fd:
91:81:fe:7e:b2:31:ae:3e:b8:cf:6d:5c:00:c4:35:
c9:9b:55:45:d5:79:09:0f:b1:79:ba:02:8a:52:a8:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:49:7E:C7:EF:14:CE:B1:E1:45:D5:9F:32:62:C8:69:41:1B:9F
X509v3 Authority Key Identifier:
keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:10:e8:31:83:d0:bf:22:99:f4:69:8e:be:a6:9b:9d:bc:c2:
c6:6b:28:bd:0c:76:67:76:7c:d1:cf:da:94:b4:5f:57:5f:31:
fd:31:a2:67:f1:31:51:1c:bb:f6:a7:e7:2a:57:6f:e8:74:c5:
5b:60:9c:bd:a2:9e:25:26:d3:96:85:bf:ac:d1:ff:d1:82:d5:
11:2a:58:1a:0e:04:a5:ed:10:a0:b9:88:07:75:82:45:52:5b:
1e:05:58:22:c4:3c:bc:a3:9d:0d:55:11:40:44:cb:be:38:a7:
5f:19:85:8c:a4:53:3a:60:ac:e7:b2:9e:c6:a8:46:34:73:26:
10:de:11:5e:17:f0:8a:a8:3c:a3:4e:81:28:05:b3:b9:aa:c8:
ca:e7:cb:10:db:ef:5a:3a:6e:77:3e:95:58:96:b5:a2:d5:26:
cf:da:40:1f:7f:37:e9:fc:4c:3a:13:05:b4:61:82:fa:dd:e1:
88:72:fa:19:01:2d:cf:88:34:02:1d:21:24:60:19:b6:55:e2:
47:2d:7e:cf:5e:9e:44:7d:e5:41:e6:79:c1:4b:ce:f9:fe:e6:
e6:34:bf:cb:3d:f9:27:49:6e:3c:1c:b0:c7:d4:ad:7d:f7:3e:
08:fb:6d:7e:23:36:95:ac:46:ad:5c:02:da:b0:a8:eb:55:ec:
f9:96:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:02 2026 by rpki-client