
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier: iplFrgI6VQVvh4hbybKtuEx0q3O9Gpzt44CycoXuHro=
Subject key identifier: B2:AA:3A:33:EF:E8:20:82:C5:A9:07:FB:74:7C:D5:0E:F4:2F:A3:33
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number: 0274
Signing time: Thu 11 Jun 2026 04:13:03 +0000
Manifest this update: Thu 11 Jun 2026 04:13:02 +0000
Manifest next update: Thu 18 Jun 2026 04:13:02 +0000
Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: lEM8R+ftx/Qko1AGCtCJu2kzs5VU+L/tlVExv52yEto=)
2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=)
3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=)
4: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Validity
Not Before: Jun 11 04:13:02 2026 GMT
Not After : Jun 18 04:13:02 2026 GMT
Subject: CN=6a2a35cf-7e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:75:3c:e9:02:49:98:b4:39:8f:b9:24:da:
e1:14:67:46:4b:3c:0d:f3:62:35:e1:9f:c8:cc:c1:
56:4a:8d:03:f8:7c:e6:ba:c3:d2:ed:ca:57:ba:41:
c4:fe:70:9c:e9:7f:c6:91:16:9b:77:88:16:f0:27:
7f:15:18:f0:8b:80:0e:f2:a2:7d:b6:48:a7:43:0a:
91:61:ef:42:be:3f:bc:b2:59:c7:39:83:7f:f4:70:
6a:07:aa:e7:6e:4a:40:82:e8:c2:79:c9:2e:3c:9b:
54:90:37:27:c9:2c:97:3b:aa:ed:a1:73:3c:5e:b3:
98:b3:f4:1c:3f:aa:a5:10:fa:26:60:68:60:0c:11:
c6:8d:82:b5:c3:98:46:95:d5:da:d3:fc:b1:ed:fc:
9b:40:de:93:54:a8:0c:ef:28:d7:09:dd:16:ff:22:
a4:fd:0d:f9:da:df:64:51:d7:55:16:d8:8d:5f:65:
77:4e:65:23:9c:e3:d4:47:78:b7:3a:b6:f7:75:07:
79:a1:f0:41:e3:62:17:44:42:e0:43:a6:fd:3c:4a:
83:f0:47:1c:82:9a:cd:29:7b:cd:42:43:4e:50:ae:
cc:62:5e:f1:19:e8:64:0d:ce:20:2e:dd:66:01:b3:
40:6c:ee:17:27:c9:14:c1:0b:ee:59:91:4b:39:46:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:3A:33:EF:E8:20:82:C5:A9:07:FB:74:7C:D5:0E:F4:2F:A3:33
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:5f:0f:14:f6:f2:ac:7f:4f:7c:ec:6a:91:e5:3f:8f:d6:
0b:1b:2d:fe:7a:52:ac:d8:10:01:24:40:41:0d:c9:37:0e:ec:
b0:f3:6a:c7:d0:95:ac:6e:23:b5:e1:d6:6d:93:88:27:d1:78:
da:e2:9c:80:55:38:75:1f:33:3e:ee:5c:bb:30:cc:f3:76:a1:
e3:26:00:4e:95:04:a6:70:bc:43:7b:b9:5d:1c:3e:2e:61:f5:
e7:9e:55:e9:8e:d9:28:5f:e2:db:18:9e:ec:bb:4f:d7:00:74:
f1:fa:4a:36:79:62:2d:5e:a0:e8:54:29:c1:9d:83:44:7e:91:
cf:9f:94:04:bb:23:8a:2a:db:b2:70:bc:fe:ae:2f:18:c5:56:
43:b5:37:fb:2b:f3:67:44:7d:4d:4a:4b:79:b4:4d:e9:05:2f:
c3:c0:88:07:1c:bb:fb:a3:e2:94:50:42:c6:81:71:37:cd:f4:
30:8a:74:1d:30:a5:44:29:c6:09:51:54:2b:8a:05:40:60:f6:
0d:f7:8e:bf:a0:4f:b0:79:9f:eb:1b:43:22:21:50:cd:ee:1a:
61:43:85:3f:16:c0:89:3f:77:03:71:52:d6:7b:7f:ec:53:29:
2b:8b:b2:a4:7f:ca:d4:67:42:79:10:86:7d:c0:c1:19:c3:b9:
4f:fd:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:53 2026 by rpki-client