
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: Okh2KDwvjtJnTzvTTSUPYbb8yRuMp4yepVeRUKPp/uw=
Subject key identifier: 42:F8:A1:A5:5F:FE:72:A5:AA:19:82:41:EA:60:14:56:5A:92:88:04
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 0264
Signing time: Tue 23 Jun 2026 03:02:01 +0000
Manifest this update: Tue 23 Jun 2026 03:02:00 +0000
Manifest next update: Tue 30 Jun 2026 03:02:00 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: albbRtoXPKMXgiU+ON2792rRWJQG6E5box20rui2/oA=)
2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Jun 23 03:02:00 2026 GMT
Not After : Jun 30 03:02:00 2026 GMT
Subject: CN=6a39f729-5357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:ad:f7:d5:db:0a:d3:36:b2:2f:b1:06:e3:
16:91:ad:2b:6a:0a:e9:a0:cb:4c:e7:24:ed:36:cd:
cd:e1:e9:32:fc:c1:39:db:0f:9a:9e:5d:d2:6b:a3:
5d:ae:04:99:11:88:a8:92:f7:89:66:45:fa:c9:71:
15:52:27:45:af:dd:02:c4:61:e1:c5:0c:62:5f:bc:
58:3f:17:2f:3e:2d:fd:6c:fe:32:ed:be:48:7f:83:
d2:80:21:6a:d0:2a:e8:5b:1b:ec:e3:4f:41:08:65:
d3:ac:a9:b3:ad:73:30:52:dd:ab:53:be:dd:25:da:
0e:d1:14:69:19:e9:c7:b7:d7:bb:c5:5c:31:a8:95:
e4:88:4c:b2:04:08:a7:96:39:79:1a:05:f7:2d:f5:
97:0a:2e:c8:4a:df:dc:ec:0e:0c:93:e4:41:1c:40:
47:31:23:0a:03:40:eb:29:b6:c3:12:2c:4b:b3:67:
82:ec:e5:06:49:29:30:89:6c:89:5c:94:ba:bb:22:
47:70:2b:6f:c4:2b:ed:43:70:b4:be:bb:ae:49:4f:
f6:eb:84:01:72:45:dd:54:b8:1e:f0:6c:41:14:52:
f1:a8:8c:93:d8:1c:0a:61:d3:fc:86:ef:65:52:26:
ba:5a:45:73:56:39:08:d0:f2:98:11:cb:1f:e8:5c:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:A1:A5:5F:FE:72:A5:AA:19:82:41:EA:60:14:56:5A:92:88:04
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:f4:1e:e3:64:eb:fa:57:4e:16:fa:9b:15:4b:7d:c7:1b:
23:b6:0d:1c:82:54:70:8b:c9:06:76:21:ed:f8:57:1b:60:c2:
38:c3:75:95:f3:9a:37:cb:56:d4:f9:d1:c7:36:34:d4:0f:46:
7f:df:41:d2:bb:0c:e0:0b:66:09:a4:0f:5a:f4:f7:f6:6e:61:
6d:06:05:49:91:7a:8a:6c:0d:30:ad:09:b5:c2:2e:9b:61:b4:
67:3f:17:6e:7e:b8:b0:96:7d:2f:72:90:60:62:93:30:0d:9a:
5a:80:76:7e:df:00:50:9f:8a:75:39:64:60:6b:13:c6:02:02:
a0:ad:35:f3:79:9e:8d:b0:bc:2c:d3:b7:e0:83:66:ec:56:63:
b6:b5:0e:ee:de:32:39:9f:87:98:57:b6:b1:ab:9f:ff:b4:4e:
82:d4:c6:88:d8:0c:62:e5:1c:4e:b2:4f:47:a4:f4:67:10:b9:
a2:7d:e9:7a:45:7a:13:9d:ab:0e:9a:a8:bb:48:76:1a:90:d4:
a6:a0:6a:40:74:94:5d:f7:b2:db:91:92:87:c1:dd:2e:1f:4d:
1f:38:23:10:e6:fb:19:5e:3c:3d:b2:28:5d:95:5b:63:a6:51:
b3:70:81:18:33:e3:b0:55:6d:83:48:11:5f:5e:40:92:9d:7f:
b8:ed:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client