
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: ttwz/+qJHQSGnePIJ4gROrJl8DBLifqgBS447Uhmal4=
Subject key identifier: 7C:8E:9E:75:04:AF:C6:97:E1:96:99:00:F5:98:2A:29:D7:C2:E8:08
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 0397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 0390
Signing time: Tue 23 Jun 2026 00:50:20 +0000
Manifest this update: Tue 23 Jun 2026 00:50:20 +0000
Manifest next update: Tue 30 Jun 2026 00:50:20 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: zGzpt68N/igNKGmEvbckuAt//aAzgSvukOw4bySlFIE=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: f5h2sD9kDZrihuG/xzAAfLrQX5aqTNr2XYWOpp8neZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: Jun 23 00:50:20 2026 GMT
Not After : Jun 30 00:50:20 2026 GMT
Subject: CN=6a39d84c-9727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:a5:ad:2c:d1:ad:27:47:3a:ec:22:29:c8:
4f:04:7f:fb:52:cc:4a:f3:ee:08:1a:50:16:58:ed:
0e:11:96:e6:f8:31:db:e6:11:af:a1:a6:e1:92:68:
0e:e4:0a:39:36:85:f7:c3:b7:80:01:36:de:29:c8:
df:a9:30:d7:12:61:1f:7f:a3:ea:c3:00:01:53:bf:
54:e8:38:2c:a1:c4:40:04:de:70:bc:55:d0:2d:de:
e4:d8:59:cf:93:0e:60:93:2a:ef:be:80:cd:78:cd:
e9:e1:81:b3:15:b3:ab:21:4b:c2:a6:9b:75:c7:ce:
44:40:16:92:fd:af:68:8b:75:b0:fc:f0:24:e0:ea:
c5:5e:1e:08:5e:69:e6:a8:58:bd:dd:61:34:2b:60:
bc:3a:be:0a:c1:0e:1b:78:aa:de:e9:f1:f8:4f:fd:
ed:68:20:f4:d3:be:de:b5:04:2f:be:e8:b9:93:02:
8f:7b:a7:7b:3c:7a:9f:dd:d3:05:b5:98:a2:bf:aa:
67:04:07:54:61:71:79:48:b3:8c:c0:3b:5f:12:c5:
74:c4:23:85:e1:1c:b2:a6:29:a8:47:a8:72:1b:03:
77:8c:c5:46:7f:e1:26:24:7e:79:bc:96:b0:ed:d2:
ad:a1:8c:53:52:ad:6b:a5:ef:d5:07:d8:7f:67:79:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:9E:75:04:AF:C6:97:E1:96:99:00:F5:98:2A:29:D7:C2:E8:08
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:8e:7e:ba:28:d4:27:60:47:36:05:ba:73:6d:e8:ec:70:
69:34:6f:4f:8f:48:0a:bd:5c:2f:62:0a:37:1c:c6:d6:b6:0a:
08:a6:8c:e4:8b:ef:cb:76:75:d6:07:b5:7f:ed:6a:c1:05:01:
51:f6:76:01:6d:bf:f1:7d:bf:8f:4d:ea:ba:84:10:a5:e5:6e:
eb:de:97:98:fa:01:75:48:6b:97:08:ca:68:fb:56:d0:fe:d9:
6c:ee:75:67:5f:20:d4:88:ae:4c:97:e3:6b:22:d5:1a:a3:af:
30:61:c0:d1:23:49:82:06:df:a6:69:e5:2e:d7:b3:6c:d2:96:
eb:64:ed:99:df:cf:ee:5c:bb:01:61:a1:15:b4:99:d1:2c:d3:
f3:6d:2c:28:f7:e7:7c:a5:40:89:71:b9:8f:c7:91:63:df:36:
42:d0:3f:19:c4:bc:98:e5:f3:d8:3d:f1:68:84:a4:25:50:72:
d1:76:95:f7:26:c5:46:f0:4f:75:1b:26:62:cf:aa:87:e2:38:
ba:df:34:2b:a3:71:b5:52:0b:ce:3c:be:2e:dd:ff:17:21:4c:
86:75:8a:e3:1e:6b:fd:82:a8:5a:88:c3:76:32:e6:45:43:3e:
4b:bd:52:76:97:12:9d:44:9e:de:0b:a1:c2:b5:9b:f1:7f:2a:
63:6f:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:24 2026 by rpki-client