
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json)
Hash identifier: 6jqRjbHAKAGI/A6JBreO0o0MFtiafGcDNz2VInX8CP8=
Subject key identifier: E0:CA:34:BC:97:92:F4:80:3A:D4:4A:83:CA:0E:B3:2A:D4:98:1B:D6
Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31
Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
Manifest number: 80
Signing time: Mon 19 Oct 2026 08:26:58 +0000
Manifest this update: Mon 19 Oct 2026 08:26:58 +0000
Manifest next update: Mon 26 Oct 2026 08:26:58 +0000
Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: PXw+gX/SNkz5lkszbu0bhFQKDvgebT7e9MNgqKW+E3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl
rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431
Validity
Not Before: Oct 19 08:26:58 2026 GMT
Not After : Oct 26 08:26:58 2026 GMT
Subject: CN=6ad5d452-4ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:76:30:11:59:a1:57:5c:d6:0d:75:ff:87:
9b:a0:c0:bd:1b:83:44:54:0b:81:bd:3c:f6:e6:18:
70:97:b2:84:15:4f:d5:ac:b2:8e:13:ba:f0:08:f7:
28:21:95:47:69:c6:8d:ce:c6:f6:dd:6c:0d:38:83:
d1:60:58:74:f6:a7:21:b4:fb:3d:82:1e:93:94:42:
e6:11:a2:90:23:7e:79:17:ea:9f:1a:3b:f4:97:11:
ee:20:0c:0b:46:67:ab:82:7b:50:7b:1c:a6:23:4c:
e3:7b:e1:55:b6:30:aa:19:43:bb:5d:11:d6:66:93:
0e:2e:3b:56:77:3d:a7:d6:e8:03:0e:9e:a8:86:03:
af:0a:b6:03:99:5d:a4:0c:0d:56:f3:34:4f:07:28:
a9:75:4c:13:74:e8:83:a1:a3:14:58:7b:b3:55:8b:
60:76:0f:cd:44:ef:c4:66:96:04:b3:63:08:99:20:
a5:ab:0b:83:27:f0:1b:c2:5a:6a:47:57:6f:cf:5b:
f8:08:c2:f3:75:c8:22:91:ac:d9:bb:a3:a3:e6:56:
97:0e:c4:9f:34:d2:9d:9d:4a:7d:c9:d7:5e:22:ae:
57:6e:0e:14:6a:a5:f8:42:d9:71:cc:d5:a1:fb:b6:
bc:61:74:6e:10:2a:25:7e:c9:df:70:34:79:ef:5a:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:34:BC:97:92:F4:80:3A:D4:4A:83:CA:0E:B3:2A:D4:98:1B:D6
X509v3 Authority Key Identifier:
keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ee:25:af:47:5f:bc:65:fe:70:5e:d6:b0:f2:ea:0b:73:c1:
2a:fa:ca:fc:c0:8c:58:51:f6:cc:f4:4f:c2:20:cd:df:2b:ef:
81:64:40:32:88:12:b4:31:16:5f:c1:68:05:f1:38:f1:e7:bf:
0e:61:6d:37:57:0d:83:a9:cd:ac:8d:43:f6:b4:e2:95:7c:8a:
dc:1f:79:41:60:a8:72:8a:d6:57:bb:3a:b8:c2:47:2d:b0:a9:
3e:e6:df:63:a8:82:80:f4:43:2a:21:32:4d:db:9d:04:4d:4a:
db:47:69:df:7c:e9:27:cb:b2:9d:ee:f0:b0:e5:63:4c:7d:30:
9f:21:b2:be:71:55:44:2e:cd:2f:df:08:ea:54:ae:9d:36:35:
49:07:a0:15:05:7d:a7:17:5c:96:6c:94:1b:3e:e6:45:cc:7c:
6c:1a:d1:5e:e3:61:ba:60:dc:e4:cf:25:ac:f0:9d:5b:22:5a:
d3:ca:25:cd:ef:3e:94:15:38:ce:5c:38:6d:62:40:30:4c:9f:
ec:b7:c7:52:15:37:3e:39:dd:eb:18:28:e3:69:78:7b:77:21:
14:e0:e8:c2:66:fb:ea:9d:7b:2e:37:03:aa:18:7b:8d:08:3d:
10:9e:5e:a7:1b:b7:10:db:91:0a:4b:a2:8b:b2:55:1b:6d:3b:
ac:84:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:29:29 2026 by rpki-client