
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json)
Hash identifier: DboxFmaRA79wqMioW4TBpN1TXkGtS8k6Me8930Uf1OI=
Subject key identifier: 2A:C9:6E:CF:04:4C:24:59:70:84:AB:63:47:A6:62:44:F3:D2:01:A0
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
Manifest number: 8D
Signing time: Sun 05 Apr 2026 06:53:47 +0000
Manifest this update: Sun 05 Apr 2026 06:53:46 +0000
Manifest next update: Sun 12 Apr 2026 06:53:46 +0000
Files and hashes: 1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: REAajP8BNPtFJr0kkictYAfUOt8hrkUCN3xVI4ZNelo=)
2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: xddKCKrciYMQOQDWh0L/UeoRnxPJH7k8BoUpUOdsrCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Validity
Not Before: Apr 5 06:53:46 2026 GMT
Not After : Apr 12 06:53:46 2026 GMT
Subject: CN=69d206fb-0ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:52:65:4f:4e:f6:40:83:24:a8:b3:6b:72:
c5:96:a5:4c:11:bc:44:f8:2b:d2:06:77:34:71:24:
e9:5f:30:e1:84:07:4f:7b:ab:74:a0:28:80:00:ba:
d7:27:50:c6:63:9c:26:d8:45:0f:c8:b2:4f:4a:00:
36:90:4d:d5:a3:d6:58:c5:85:de:8b:03:40:75:e1:
67:9c:e7:9a:78:f5:33:a8:2d:58:33:d6:03:29:42:
b0:9f:81:f2:15:42:a0:03:82:d8:c6:c3:77:1a:33:
f4:97:80:31:9c:d4:f6:fd:55:21:ff:b6:b3:a7:39:
0d:c5:cc:04:28:61:cf:00:2b:39:fb:e9:ed:a1:f1:
68:a0:7b:bc:d3:f3:cc:a4:36:79:27:e6:fa:eb:c3:
dc:83:d9:4a:a1:4b:98:09:d6:d6:22:a2:8b:ab:6f:
48:4a:94:61:f9:02:c3:cb:bb:ee:24:c5:f7:ae:a3:
62:1c:e2:4a:06:a9:bb:1f:76:05:76:56:56:66:26:
9c:13:1a:91:7d:75:f3:f2:07:24:52:51:fe:fe:50:
8b:2c:75:83:38:9a:37:43:65:57:59:f9:02:83:8f:
02:22:f0:e7:95:e5:bb:ed:99:64:98:9d:0c:6b:3d:
5f:70:ed:2d:d4:8b:40:17:80:25:23:3e:b6:a6:6e:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:6E:CF:04:4C:24:59:70:84:AB:63:47:A6:62:44:F3:D2:01:A0
X509v3 Authority Key Identifier:
keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7c:4c:86:4a:e2:79:4e:9f:64:e3:56:d9:82:3f:ec:82:5c:
ad:5d:13:0b:90:c7:a9:7a:f9:78:41:67:87:0d:8b:b3:69:39:
27:21:0f:a9:5c:6a:17:82:f6:6b:43:95:cd:3d:aa:37:de:44:
00:97:2e:0d:3b:60:74:ca:5b:39:60:2c:09:98:50:4e:e4:0f:
23:76:5a:d7:0a:6c:e3:7c:06:11:98:ba:47:d9:c1:a5:e1:b8:
a7:c4:13:5d:66:bf:12:8e:44:df:32:5d:62:c7:19:b6:f8:89:
05:34:8e:85:f5:45:8c:58:0e:02:4d:fd:ee:bd:3e:8f:1d:c4:
c4:d4:14:e0:52:59:fd:a7:a0:5f:19:52:b7:24:44:4c:cf:8f:
6c:f9:66:9c:e5:54:9f:4f:83:45:51:a8:6e:82:54:89:f0:f5:
ff:bf:e2:01:0e:fb:9a:ca:76:97:9e:b9:03:1a:6e:7c:b9:2e:
ec:e9:02:5d:74:cb:ef:61:af:46:2e:c4:c9:81:e5:d2:9e:99:
8f:20:a8:50:23:84:88:54:49:c6:f2:6e:a5:35:11:18:26:4c:
4d:6f:c8:f4:a9:08:cb:6f:0a:ce:91:43:8d:85:d9:23:1b:c3:
85:a5:1d:40:62:f4:83:2a:03:68:20:6e:ed:5d:32:90:a4:4b:
f3:1e:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:33 2026 by rpki-client