
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier: q+VpVnH/hnt3znQSuJ2++tqNYdHfKcljcF8R0ys5EUE=
Subject key identifier: DB:4B:42:EE:35:4E:98:8D:4A:FE:3F:A4:04:8B:53:EC:11:BF:AA:CE
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number: 0141
Signing time: Tue 23 Jun 2026 05:32:08 +0000
Manifest this update: Tue 23 Jun 2026 05:32:07 +0000
Manifest next update: Tue 30 Jun 2026 05:32:07 +0000
Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: dkDR49a0aAzx/KUXYFCKL494gQDNKsBmIQBmqMLXir8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Validity
Not Before: Jun 23 05:32:07 2026 GMT
Not After : Jun 30 05:32:07 2026 GMT
Subject: CN=6a3a1a57-f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:9c:24:07:ed:90:e2:76:28:40:3b:52:a7:
ca:d5:f2:bd:c8:cd:89:2b:d9:58:3a:24:24:e7:c6:
7d:70:c1:b3:82:74:b0:46:3f:35:46:59:d9:43:7d:
33:af:c0:29:a0:ae:52:d0:5c:b8:51:30:b5:d7:2f:
b9:93:98:9c:10:5f:d3:7c:18:f4:29:e3:08:37:85:
41:5b:52:9a:ef:2e:5e:86:55:d9:5b:7d:d8:16:f1:
0a:66:c7:de:3e:66:40:6c:27:11:be:cf:86:35:4e:
44:21:10:40:68:a0:ad:0b:9f:a5:7c:9c:b4:89:38:
e8:d7:e6:5e:85:e5:f9:6a:55:10:a6:ec:e1:8f:9e:
3d:77:bd:97:b9:cd:4a:35:ba:6b:96:c9:b3:07:e7:
c5:ec:89:2b:03:64:a9:a4:70:9f:0e:a6:fe:71:a3:
6b:8d:6b:9c:2e:d9:19:ad:f0:2b:32:dc:e0:dc:26:
15:21:41:90:b9:20:5d:6c:26:67:f0:32:e4:64:c8:
e1:75:ed:36:d9:8a:14:57:98:c8:94:c5:c8:33:a9:
9c:a8:9e:6c:04:aa:87:41:e0:b9:a1:3c:53:56:1d:
70:75:26:23:4a:3e:53:3c:53:b8:74:e9:67:00:cd:
53:30:58:80:23:1e:a2:14:1e:2d:27:0b:32:07:2c:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4B:42:EE:35:4E:98:8D:4A:FE:3F:A4:04:8B:53:EC:11:BF:AA:CE
X509v3 Authority Key Identifier:
keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ba:b4:af:99:2b:0e:a9:39:4d:d6:d5:42:80:66:00:a1:e4:
33:d4:17:31:02:fd:c3:b7:c1:b9:fe:9f:12:52:f2:a4:2e:0f:
e5:12:c1:ef:7a:14:47:72:d2:88:b1:e9:8c:a1:cf:b0:67:7b:
6c:95:8b:7c:74:19:9d:10:30:6a:a6:c7:71:96:08:cb:50:c9:
b6:58:d2:ca:b7:50:5a:15:12:4d:d9:4a:6a:db:e3:0b:3f:d3:
7a:69:e2:26:69:68:e2:3b:eb:da:f2:3c:84:45:33:09:33:fd:
85:10:44:e1:2e:7a:d7:36:c0:78:50:10:a0:58:5f:4a:ef:bd:
96:31:67:72:e9:0a:89:61:7f:58:ec:05:c9:d3:58:48:db:a3:
da:98:d4:57:bf:75:de:7f:fc:0c:d4:33:e6:4b:25:90:68:2e:
ae:37:7a:6f:91:c8:e5:4b:17:80:4e:0d:85:5b:f8:67:16:fa:
32:80:29:27:31:ee:e0:02:af:f5:23:df:f0:f0:fd:8e:9c:af:
15:a0:74:84:62:a7:de:57:fb:46:25:b1:0c:fa:36:14:9a:db:
e4:3c:e3:a1:63:5e:4e:8e:53:12:32:a0:93:68:13:f3:50:e0:
52:45:44:e7:2a:60:83:64:6a:9b:09:17:81:b3:ba:c9:b4:91:
16:6b:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:49 2026 by rpki-client