
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: yiNg5N+HX7wOGveMQjA1FkBj2vnpdEw5itoSzuVWD1k=
Subject key identifier: B9:18:AC:B7:16:51:02:27:FD:11:00:53:2A:38:B7:F9:48:0B:A6:CF
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 017A
Signing time: Thu 21 May 2026 04:45:32 +0000
Manifest this update: Thu 21 May 2026 04:45:31 +0000
Manifest next update: Thu 28 May 2026 04:45:31 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: x3wNwjrM5ZYwxZ/co0QXVBB6kCdN0JqVqiX74HxfGTU=)
2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: May 21 04:45:31 2026 GMT
Not After : May 28 04:45:31 2026 GMT
Subject: CN=6a0e8dec-aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:ee:b8:ba:16:39:dc:7b:ed:c5:51:35:cd:
99:7a:52:10:fe:bf:db:f3:e0:23:7a:7e:36:42:0b:
df:b2:3c:38:66:2c:aa:11:9f:bc:9b:5b:47:f6:17:
b1:e5:4a:e9:99:6e:aa:fc:23:b9:7d:56:28:22:4d:
20:7a:4c:c9:eb:25:ae:db:fc:09:4e:2c:f6:d0:f9:
84:a2:bb:c4:7b:2d:3c:f5:b6:60:df:1c:47:c9:9b:
ec:97:76:77:96:87:b7:15:b9:3e:29:97:11:c0:13:
e9:91:be:f2:20:f0:8d:c8:03:b0:88:86:46:5e:f3:
f9:f4:8d:87:9f:b5:be:f7:77:e3:88:eb:67:64:9c:
4d:61:f2:f6:00:2b:16:95:9f:44:1d:20:2a:7e:77:
ae:52:33:f1:7e:d2:26:a0:e9:89:15:15:64:07:57:
7a:d9:22:04:38:d0:da:64:2f:4e:ed:f5:30:07:e7:
92:1d:66:ab:06:4e:b2:24:c6:4e:12:fd:d6:0a:9a:
e6:b8:22:bc:de:df:58:ed:65:ee:1f:9d:ee:10:9a:
c9:77:e4:57:5a:25:c0:e3:6a:dd:71:40:8c:73:a0:
08:d5:6e:6d:72:e7:09:a3:40:e7:12:5c:b1:e6:f0:
7a:b0:a9:de:46:1d:87:a9:b4:78:cf:1b:43:af:2c:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:AC:B7:16:51:02:27:FD:11:00:53:2A:38:B7:F9:48:0B:A6:CF
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:88:57:7e:c1:c9:e3:b6:cf:68:26:5f:1d:4c:45:4e:f4:
ef:f9:5b:a1:cc:8a:0b:bc:14:fd:a3:44:fb:f0:35:7b:6b:ec:
7f:f2:f3:87:2f:4d:47:11:f3:ea:e8:f8:3a:8d:cc:fe:89:d2:
fc:47:12:63:a8:f3:d8:4b:1b:a5:15:ad:9b:a0:39:ea:01:d6:
1d:24:d0:d0:22:07:f4:9c:59:84:dd:9e:15:5d:e7:5b:4e:00:
cd:8b:65:19:14:c7:65:fd:ec:9b:8b:20:75:59:51:8c:a6:ed:
08:3a:61:58:85:ea:53:d1:bb:ad:4a:1a:a8:ed:f7:43:be:d2:
7f:e7:ce:67:da:d6:db:37:69:40:4d:9d:cb:6a:27:22:0f:93:
ac:58:89:bd:ed:90:e3:a6:8f:af:bf:c0:18:b2:0f:9e:15:9b:
5d:d5:61:5a:3a:db:22:45:73:fa:a9:74:c1:68:4e:c7:1c:f0:
cc:64:d6:9e:11:c2:8f:7b:9e:5d:21:1b:66:4e:0b:76:c8:66:
a4:f9:ee:2d:e9:d5:b3:af:52:df:c2:20:fb:54:32:7b:7f:be:
e6:19:97:84:03:0e:6b:88:cf:69:1e:c3:04:61:f3:d6:58:72:
57:6c:97:1b:0c:ac:cb:91:6c:9a:e7:5a:31:39:b7:16:84:b7:
37:82:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:38 2026 by rpki-client