
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier: LqwTkqRhgr61izzh8zQlInROIZFZSjbvQuyUnM0l+24=
Subject key identifier: 4B:3A:BD:D9:98:2E:E0:E4:55:2D:25:B0:27:CD:1C:30:70:A4:3E:90
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number: 011A
Signing time: Sun 05 Apr 2026 05:12:06 +0000
Manifest this update: Sun 05 Apr 2026 05:12:05 +0000
Manifest next update: Sun 12 Apr 2026 05:12:05 +0000
Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: xVcjEq4jqI8e8+6p4fjVXz3B4PJU9AdUH+spC/W1J6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Validity
Not Before: Apr 5 05:12:05 2026 GMT
Not After : Apr 12 05:12:05 2026 GMT
Subject: CN=69d1ef26-7ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f7:84:0f:3d:d8:5b:bf:19:15:ca:b9:8b:a4:
9b:f6:71:3d:2c:f0:a1:b3:b6:a2:be:9a:17:a8:08:
26:0d:c0:a5:8e:03:c5:16:af:48:09:0a:a5:dc:77:
d3:09:a6:f5:14:92:64:10:ad:b3:86:ee:d9:7a:7c:
d0:07:a6:1f:66:f2:4d:f6:5b:35:a0:62:35:e3:86:
10:21:aa:6c:5e:27:9d:8b:37:96:83:1a:cc:32:96:
c8:7f:78:13:db:0e:4c:e0:f5:1d:98:f1:df:25:d1:
92:bd:31:17:94:f2:30:48:21:40:41:05:1e:9c:d6:
e2:77:77:bd:9a:1c:54:80:b2:57:09:37:da:14:d6:
81:10:27:90:22:ab:3f:7b:42:f9:6b:5c:10:7c:b5:
31:0e:67:85:cf:5a:c0:bc:76:ed:f0:32:b8:00:e1:
00:de:5d:2e:42:09:50:65:51:e4:b7:4c:46:35:5c:
55:ec:2c:de:fd:c8:02:7c:b6:39:a1:9e:58:6f:af:
42:ec:62:8d:d2:96:6f:f8:76:c8:85:04:5a:01:a1:
93:96:a0:f2:9c:90:b1:6a:27:41:21:7a:c8:34:67:
89:be:25:c3:69:10:ee:17:ef:c6:5c:e3:e2:0b:c4:
e9:57:9c:b5:6f:43:6c:20:08:13:34:82:7c:4c:71:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:BD:D9:98:2E:E0:E4:55:2D:25:B0:27:CD:1C:30:70:A4:3E:90
X509v3 Authority Key Identifier:
keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:a2:fd:81:06:bf:66:22:64:4a:f8:32:ae:76:77:0e:9e:
4d:2b:41:25:db:8b:ea:e0:fd:cb:cf:8e:e7:4e:e6:28:7a:0a:
c9:da:43:8b:bb:8b:95:a1:ae:2b:63:ff:26:86:6b:22:5f:3d:
4a:b7:4b:32:73:e7:06:92:8f:2b:40:d0:54:a2:66:0e:2a:7d:
60:8c:34:d9:f6:da:99:83:0a:02:c3:58:c7:4e:38:bb:77:7a:
38:aa:40:6d:a4:a7:e2:90:72:90:f0:4a:7c:7e:08:c5:94:fa:
9b:a8:3f:6b:f1:1c:5c:e5:93:b7:42:b8:4a:f9:77:38:f8:8c:
8d:7a:ce:c9:b6:09:ea:f4:54:34:20:fb:43:ce:9e:e9:82:02:
ad:9a:9b:d7:e7:29:71:e1:a3:9b:8f:d4:03:eb:a0:9d:47:36:
57:b5:04:f0:bf:91:be:63:c0:1a:b1:6f:89:41:12:11:d1:02:
c8:80:6e:01:95:25:2a:b4:98:b2:87:98:f1:0d:33:a4:6a:42:
b1:10:c4:6c:40:6f:a0:6a:3b:94:fc:67:26:13:e3:b7:e0:7f:
60:d3:c2:41:39:d8:39:cb:e6:ed:3a:d8:d8:d5:3b:00:e3:62:
21:61:e6:13:d8:a7:2c:8c:06:c6:37:5f:eb:5b:f5:ef:17:86:
f5:1f:28:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKEU0MkU0MjAwMkE4Mzc4N0E2N0FGOENCOUE4NTFGOTM5
OTc0NkMxMzIwHhcNMjYwNDA1MDUxMjA1WhcNMjYwNDEyMDUxMjA1WjAYMRYwFAYD
VQQDEw02OWQxZWYyNi03Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9PeEDz3YW78ZFcq5i6Sb9nE9LPChs7aivpoXqAgmDcCljgPFFq9ICQql3HfT
Cab1FJJkEK2zhu7ZenzQB6YfZvJN9ls1oGI144YQIapsXiedizeWgxrMMpbIf3gT
2w5M4PUdmPHfJdGSvTEXlPIwSCFAQQUenNbid3e9mhxUgLJXCTfaFNaBECeQIqs/
e0L5a1wQfLUxDmeFz1rAvHbt8DK4AOEA3l0uQglQZVHkt0xGNVxV7Cze/cgCfLY5
oZ5Yb69C7GKN0pZv+HbIhQRaAaGTlqDynJCxaidBIXrINGeJviXDaRDuF+/GXOPi
C8TpV5y1b0NsIAgTNIJ8THEHIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEs6vdmY
LuDkVS0lsCfNHDBwpD6QMB8GA1UdIwQYMBaAFOQuQgAqg3h6Z6+MuahR+TmXRsEy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy84MENFMjc4QTg0
NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVIcG5yNHk1cUZINU9aZEd3
VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dUSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy84MENFMjc4QTg0NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVI
cG5yNHk1cUZINU9aZEd3VEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW2ui/YEGv2YiZEr4Mq52dw6eTStBJduL6uD9y8+O507mKHoKydpDi7uLlaGu
K2P/JoZrIl89SrdLMnPnBpKPK0DQVKJmDip9YIw02fbamYMKAsNYx044u3d6OKpA
baSn4pBykPBKfH4IxZT6m6g/a/EcXOWTt0K4Svl3OPiMjXrOybYJ6vRUNCD7Q86e
6YICrZqb1+cpceGjm4/UA+ugnUc2V7UE8L+RvmPAGrFviUESEdECyIBuAZUlKrSY
soeY8Q0zpGpCsRDEbEBvoGo7lPxnJhPjt+B/YNPCQTnYOcvm7TrY2NU7AONiIWHm
E9inLIwGxjdf61v17xeG9R8oaA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:52 2026 by rpki-client