
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier: rh++l6Qgky11lzsiGUV1DWOhuPRO9Ba388ho0QHFhko=
Subject key identifier: E9:21:7D:40:B7:48:9D:1E:52:1D:1E:75:07:CF:A5:50:76:F2:6A:D6
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial: 06F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number: 06EA
Signing time: Mon 31 Aug 2026 22:09:27 +0000
Manifest this update: Mon 31 Aug 2026 22:09:26 +0000
Manifest next update: Mon 07 Sep 2026 22:09:26 +0000
Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: KHe0GHZi2Gyup2J28gCX1J0m8/5pLIFH58BAFOedwUg=)
2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Validity
Not Before: Aug 31 22:09:26 2026 GMT
Not After : Sep 7 22:09:26 2026 GMT
Subject: CN=6a95fb97-9538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:62:85:b8:24:4a:2a:60:35:06:87:ed:89:
4f:af:8f:cd:84:75:53:e8:80:8e:b3:de:f9:65:8d:
13:c0:e7:6c:ba:57:fb:45:b3:d0:81:65:ac:2d:8e:
53:08:94:b6:fc:77:cd:00:42:0e:aa:70:5d:fd:98:
1c:0e:fc:89:d7:79:f5:1a:a3:67:00:dd:d7:dd:a7:
81:25:e4:3a:fb:80:e5:d3:08:ed:c5:8f:0e:f3:75:
1a:5d:64:48:35:94:86:a2:81:5a:95:4a:6c:78:00:
4e:e7:98:c6:ad:66:cd:c8:3f:ba:0a:bd:bf:63:80:
f7:62:b0:fc:71:6a:42:c2:a0:b2:11:93:41:d2:2e:
8f:05:e2:e5:1a:da:4c:ab:8b:f8:51:1d:56:1c:85:
3e:c7:9e:36:e2:b4:c5:e5:ad:3c:00:04:9f:a4:c4:
24:46:4f:87:6d:95:28:1d:10:24:05:43:a7:6a:2a:
41:b3:34:84:d6:3f:46:37:d3:5c:f8:5a:b7:a7:21:
22:2c:61:24:98:a0:46:3c:e4:5b:3c:32:da:e0:04:
1d:95:19:c2:71:69:bf:af:79:97:77:ac:ca:7d:93:
85:75:ce:fa:64:e3:4e:ab:df:53:4b:45:51:ec:c9:
ee:df:35:5f:41:f8:c2:09:af:a2:c9:63:c9:59:ee:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:7D:40:B7:48:9D:1E:52:1D:1E:75:07:CF:A5:50:76:F2:6A:D6
X509v3 Authority Key Identifier:
keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e9:01:6d:58:09:4a:3e:50:2b:db:1a:4c:14:45:96:b2:c0:
08:e1:c7:a7:18:fb:88:69:bb:18:7a:83:80:f4:1c:3a:81:f3:
31:e9:5e:4e:e7:98:22:c4:6e:c5:a6:20:4e:64:2c:e1:67:6c:
28:1c:e9:3e:4e:57:3d:5a:45:db:fc:cd:e6:b8:17:5d:76:84:
c0:4a:ad:76:1c:ec:d6:42:8a:ec:3d:7a:68:ec:77:3b:88:de:
82:d3:2d:53:34:da:f9:af:02:d8:cc:58:35:26:86:53:4a:ef:
5d:be:f7:26:83:2b:db:f1:17:49:9f:99:23:1f:c1:13:01:a7:
91:2e:e0:03:0c:95:39:1f:e1:b1:4b:66:57:91:0e:f1:e9:8f:
e9:3d:a6:5c:cd:48:61:d0:46:16:52:4f:4c:65:d2:70:69:31:
37:8f:c6:63:0a:b8:3f:01:07:39:21:b1:2d:a0:07:af:f6:ae:
b3:a3:d2:d1:f2:2f:88:22:a9:ad:61:ef:a0:90:01:62:03:80:
dd:97:6c:b3:fc:c5:cd:ff:8d:fc:d6:4f:9c:db:75:cb:c0:9e:
85:14:d1:d1:78:c2:fe:14:88:83:97:64:e4:62:81:7b:95:85:
94:01:73:7f:d1:45:1e:8b:31:6d:ab:be:20:27:2c:1f:fe:ed:
9a:3b:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:17:37 2026 by rpki-client