
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: UZ1d/NOsFoqVSFWpBVtqUtXhyyK7+Ibxnj0hbNNSvfU=
Subject key identifier: A4:9C:3D:F2:01:CC:2F:66:ED:B5:CB:99:65:4B:91:67:38:09:FB:CB
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 09AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 0980
Signing time: Sun 26 Jul 2026 20:33:56 +0000
Manifest this update: Sun 26 Jul 2026 20:33:56 +0000
Manifest next update: Sun 02 Aug 2026 20:33:56 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: 93WNvTskJ/bBNwz8MY4AP2KSGaBmVpt1DOFXAsQQyp4=)
2: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
3: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
4: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
6: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Jul 26 20:33:56 2026 GMT
Not After : Aug 2 20:33:56 2026 GMT
Subject: CN=6a666f34-726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:11:5b:5d:8b:2d:7d:7b:2b:39:93:29:71:
e4:c0:92:f1:08:9a:cf:bd:ba:d3:30:fd:ef:d8:42:
94:54:6b:e3:08:b1:e2:16:e3:1d:8b:9c:5f:b5:dc:
61:43:12:f0:04:16:94:05:74:aa:9e:75:d2:1d:97:
48:28:41:ff:95:c7:04:0f:f1:55:74:86:d9:0e:0a:
d3:fe:74:c9:a7:2a:db:82:f9:10:29:2b:e6:19:9f:
df:21:52:2f:06:8a:d1:98:6b:80:88:d9:0e:b5:d1:
b7:b4:29:40:9e:5c:63:ca:78:38:1e:91:af:47:f8:
7f:4b:71:e1:14:71:4a:d4:0e:81:e2:be:c0:7f:9a:
12:46:d7:ec:dd:29:47:cb:21:f4:4a:62:53:1e:57:
b4:e3:cb:fc:24:00:a5:c6:47:18:50:64:f5:2a:af:
f3:56:ad:54:94:12:b1:d1:57:b1:45:b9:35:fe:6d:
ce:fb:09:f2:cc:17:d6:10:af:7c:d5:39:8d:c5:a2:
f9:1c:37:10:a2:ec:53:7d:c9:21:32:15:fe:09:01:
92:1d:50:6c:d5:2c:51:fc:62:3c:0c:ee:2c:65:72:
e9:f8:b7:0d:c2:7d:2e:02:bb:1f:82:32:6b:d0:2d:
e5:49:44:69:b6:ed:52:c2:8b:ad:39:13:05:13:48:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:3D:F2:01:CC:2F:66:ED:B5:CB:99:65:4B:91:67:38:09:FB:CB
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:30:59:78:6c:ce:63:b8:cd:c0:6d:e8:1b:d8:37:fc:9b:d2:
0a:60:e4:97:35:53:9b:0f:a1:74:7b:f5:da:12:2c:78:0c:5f:
e4:97:5b:73:28:91:40:b4:bb:17:d2:f0:df:88:6d:80:2c:d5:
88:71:e9:04:42:18:a1:7d:d5:7b:3f:33:a9:d1:75:10:80:82:
df:da:98:4e:93:86:bd:3f:99:1d:b6:61:e5:70:44:98:7d:ce:
66:63:af:e5:94:8e:86:f7:6d:2f:7b:41:4e:37:fe:cc:b8:3b:
c0:2a:bf:3d:f6:4a:f9:4e:01:14:e5:d7:c9:40:b8:b7:ea:00:
92:48:4d:c0:47:49:5e:6d:a5:3b:2b:cf:17:7c:ec:e9:f8:66:
49:fb:fc:97:67:4c:2d:3a:2d:f6:5b:2d:b6:f7:2a:87:48:7f:
b1:f6:66:bf:e1:2e:e1:ec:fe:b6:94:6b:9c:f5:87:4c:42:8f:
da:e2:d3:64:84:83:1d:4a:71:48:92:1e:89:b5:db:5b:b2:62:
1e:57:c8:9a:01:6d:bd:46:ff:58:16:d3:4b:b1:43:04:6b:ed:
5c:55:9e:72:bf:74:1f:ba:d3:16:fc:45:13:0e:4d:97:7a:41:
eb:94:1d:3d:60:d1:95:94:9c:1a:de:36:f5:56:09:5a:f9:55:
e8:c9:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:12 2026 by rpki-client