
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json)
Hash identifier: Uq5aw1Np6yyi+ro+SS6ZX6m1899ucRDJFIdenxHwy08=
Subject key identifier: A5:A0:87:9E:74:9B:79:B4:68:76:57:B7:3F:C9:19:B0:15:F7:F9:C3
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
Manifest number: 0169
Signing time: Mon 01 Jun 2026 05:35:15 +0000
Manifest this update: Mon 01 Jun 2026 05:35:14 +0000
Manifest next update: Mon 08 Jun 2026 05:35:14 +0000
Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: KznV8FlOaV3Fbl7ST0ajXuwHBXotmp8+f5Yj4aAHcUM=)
2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: +BAp+39366AUiOK5SmP/mdRqu6NWeoWLjWnOKT+SW/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Validity
Not Before: Jun 1 05:35:14 2026 GMT
Not After : Jun 8 05:35:14 2026 GMT
Subject: CN=6a1d1a13-8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:ed:20:ff:25:88:20:88:93:8c:38:3a:57:
1a:fb:76:41:9c:c1:81:2d:9d:93:76:0c:4d:6b:c0:
c9:6d:fe:13:a6:aa:52:39:aa:a5:c3:d4:c8:8c:06:
33:29:8b:89:69:bc:3b:17:75:87:a5:ab:1c:19:b6:
3b:e0:57:4d:1c:2a:b6:56:50:39:de:bb:8f:a1:a1:
f2:fa:d7:6a:05:bc:a4:ba:9c:0d:16:06:c9:5b:5f:
64:5b:be:76:62:56:e9:9c:bf:72:f7:6e:1c:ac:cc:
8e:9e:3c:10:16:81:e0:89:0c:28:26:de:c4:1a:b3:
f1:c7:65:f2:07:3e:fb:fe:d8:e5:53:7b:5d:8b:94:
c0:28:34:59:e4:d4:a1:67:1c:0b:64:f5:c8:61:cb:
15:df:d4:6d:51:8d:81:f4:1a:19:dc:ac:a6:09:25:
27:46:16:58:71:b6:27:50:95:10:d8:d5:42:6a:7e:
3e:d0:ae:60:81:86:1a:dd:5e:a3:8e:b7:5f:f8:42:
92:10:65:d3:64:0a:7d:96:ab:47:1b:45:2e:57:6b:
34:f0:4d:7a:e8:cf:79:08:b6:80:01:e7:0b:df:38:
91:fc:d8:bb:33:f5:e0:69:0d:14:60:09:ec:41:ec:
42:90:c1:85:35:a9:29:b8:c7:de:08:a1:bc:06:ef:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:87:9E:74:9B:79:B4:68:76:57:B7:3F:C9:19:B0:15:F7:F9:C3
X509v3 Authority Key Identifier:
keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:de:b6:13:e6:ba:73:06:78:88:f2:e2:7d:d4:73:34:90:79:
11:5f:98:4d:87:28:73:cb:84:b8:8f:75:48:a4:c4:c8:18:e3:
45:49:fe:9a:05:a6:a3:98:ce:20:72:1b:56:6d:8a:a6:c2:eb:
45:e4:8c:a6:73:19:1a:33:45:58:dd:6d:cd:18:b2:5b:69:dd:
30:5a:47:43:36:df:0f:7d:32:2d:06:1a:2b:24:48:53:d2:37:
a8:7b:52:52:72:0a:a1:d2:45:a9:45:c1:15:b1:09:e0:0d:68:
44:26:6c:48:02:b7:92:bc:d2:93:50:4a:9b:b4:25:ff:01:3a:
88:af:dd:50:dd:d9:15:a9:1b:bb:95:94:6a:ca:8e:c7:86:77:
79:71:52:d7:1f:69:1f:f0:d2:c9:f4:55:1d:d9:c7:5c:7b:06:
af:5f:73:23:24:3d:4e:c1:25:13:1c:43:90:c5:af:69:e2:40:
f8:00:2f:89:0c:ea:4a:c1:63:f5:9f:75:93:48:e1:d9:73:6d:
e1:79:e7:70:1e:77:b0:52:31:51:67:41:2b:97:4a:94:2e:47:
f6:86:92:5d:d0:d7:88:b6:fd:4f:e0:8e:bf:f2:6a:d9:02:37:
ef:1f:b6:84:3f:af:86:d5:95:a6:40:10:a3:4c:13:55:c2:19:
27:a7:e6:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF
QzdDNzBEMkEwHhcNMjYwNjAxMDUzNTE0WhcNMjYwNjA4MDUzNTE0WjAYMRYwFAYD
VQQDEw02YTFkMWExMy04ZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9ztIP8liCCIk4w4Olca+3ZBnMGBLZ2TdgxNa8DJbf4TpqpSOaqlw9TIjAYz
KYuJabw7F3WHpascGbY74FdNHCq2VlA53ruPoaHy+tdqBbykupwNFgbJW19kW752
YlbpnL9y924crMyOnjwQFoHgiQwoJt7EGrPxx2XyBz77/tjlU3tdi5TAKDRZ5NSh
ZxwLZPXIYcsV39RtUY2B9BoZ3KymCSUnRhZYcbYnUJUQ2NVCan4+0K5ggYYa3V6j
jrdf+EKSEGXTZAp9lqtHG0UuV2s08E166M95CLaAAecL3ziR/Ni7M/XgaQ0UYAns
QexCkMGFNakpuMfeCKG8Bu8C3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWgh550
m3m0aHZXtz/JGbAV9/nDMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4
RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDg3My80RTI1QzhCQzM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6
MzJHV1lGYm41QlhzZkhEU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZN62E+a6cwZ4iPLifdRzNJB5EV+YTYcoc8uEuI91SKTEyBjjRUn+mgWmo5jO
IHIbVm2KpsLrReSMpnMZGjNFWN1tzRiyW2ndMFpHQzbfD30yLQYaKyRIU9I3qHtS
UnIKodJFqUXBFbEJ4A1oRCZsSAK3krzSk1BKm7Ql/wE6iK/dUN3ZFakbu5WUasqO
x4Z3eXFS1x9pH/DSyfRVHdnHXHsGr19zIyQ9TsElExxDkMWvaeJA+AAviQzqSsFj
9Z91k0jh2XNt4XnncB53sFIxUWdBK5dKlC5H9oaSXdDXiLb9T+COv/Jq2QI37x+2
hD+vhtWVpkAQo0wTVcIZJ6fmCg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:53 2026 by rpki-client