
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
File: 52ijbgWHwyVfmjLZGP7HEPoEZRw.mft (raw, json)
Hash identifier: T51UxnvM63a0nbwVdu0f6zHmOURqeMKIarMdn4c4IZ8=
Subject key identifier: 94:12:3D:FF:A9:66:E8:6B:00:F1:BF:53:C9:19:4F:FC:EF:1F:EF:17
Authority key identifier: E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C
Certificate issuer: /CN=A91C5911/serialNumber=E768A36E0587C3255F9A32D918FEC710FA04651C
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
Manifest number: 17
Signing time: Mon 01 Jun 2026 09:45:46 +0000
Manifest this update: Mon 01 Jun 2026 09:45:46 +0000
Manifest next update: Mon 08 Jun 2026 09:45:46 +0000
Files and hashes: 1: 52ijbgWHwyVfmjLZGP7HEPoEZRw.crl (hash: sX1mkha/f2N+1DtwsfVUHX5jUYoLz2SRDptX/EkZ1j4=)
2: A50B29AE3E0511F19E528F9BA6833773.roa (hash: nGeSRfbe7avEFpwg3ASNJxBKGhA5xKxjZ0T8pfJRU/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.crl
rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5911, serialNumber=E768A36E0587C3255F9A32D918FEC710FA04651C
Validity
Not Before: Jun 1 09:45:46 2026 GMT
Not After : Jun 8 09:45:46 2026 GMT
Subject: CN=6a1d54ca-e051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:c5:e5:e1:e3:71:7c:ac:2c:67:c0:8d:8f:
71:6f:3a:0d:82:aa:c5:4a:f8:cb:ac:a3:f0:7f:9a:
4e:0e:c2:58:bd:3c:1c:51:ed:2f:cf:e6:f8:84:cb:
4c:66:de:94:05:5e:cf:9e:eb:d2:83:da:0b:e3:13:
4b:be:ba:8f:9d:09:17:99:99:9b:5a:00:c8:4f:25:
87:90:43:9c:e6:48:d2:b3:cf:b8:d9:c0:8f:8c:9c:
8a:d1:27:2a:12:95:88:2c:a1:85:7d:76:a3:b7:6e:
76:81:1b:73:15:24:19:f9:53:80:4e:92:33:7b:e0:
8d:b7:72:a7:a3:0f:8e:bc:67:23:c9:0f:e0:02:72:
fa:ab:b1:51:ea:e9:0f:1c:cf:4b:5d:e9:92:e8:ee:
dd:e3:82:46:b8:d1:49:28:d3:83:e7:2d:de:62:40:
69:69:19:70:3a:ed:6c:f4:af:54:7f:20:12:f6:3e:
4f:98:35:d6:65:f2:0b:23:0b:6c:6e:fc:19:ae:e3:
59:12:54:70:e7:0c:86:a4:da:73:28:c0:e4:d3:26:
eb:e4:22:00:55:59:a9:f5:c4:e5:78:5a:97:74:83:
43:d6:27:a0:a0:6c:fe:4f:98:e2:a5:d6:03:50:87:
95:77:62:45:53:ae:33:14:5d:d9:38:19:05:65:c6:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:3D:FF:A9:66:E8:6B:00:F1:BF:53:C9:19:4F:FC:EF:1F:EF:17
X509v3 Authority Key Identifier:
keyid:E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:cb:17:5a:66:e8:b9:bf:ad:d4:34:96:d8:0f:97:c6:28:65:
40:07:31:97:e0:b4:83:4b:a3:36:0f:bb:7a:ba:5b:e1:f0:1f:
1e:f1:9f:1c:22:8a:2f:0b:e4:41:3c:cd:42:69:f5:4d:09:80:
61:77:bd:78:a5:fc:fc:32:e7:d3:c7:a4:6a:47:49:3b:67:1d:
10:c6:16:e2:90:ce:79:51:b5:06:ec:dc:9b:84:f9:12:da:31:
5b:97:40:34:20:8d:0a:88:58:d9:6d:c3:4b:f5:fd:a1:61:3f:
c7:3b:ba:67:7d:c2:84:95:2d:5e:d2:7e:8d:a5:a4:b1:05:3b:
13:aa:61:28:24:be:92:ad:dd:9c:b6:91:62:aa:ad:6f:27:76:
8f:36:2a:22:a9:a0:5b:fb:81:02:4c:97:b7:be:38:0d:70:25:
35:75:34:00:c4:79:67:4d:5e:89:da:eb:ff:41:df:5a:5d:16:
0e:72:53:f3:ce:19:c7:35:9a:0c:b5:b9:24:e7:01:3a:8a:71:
b6:67:7a:7b:0c:7f:6a:30:ed:20:9c:90:7f:cb:21:96:e3:0e:
77:fb:b3:c5:50:6d:ed:eb:aa:73:c1:2b:84:0a:53:30:b4:6f:
4c:0b:e3:97:ee:b0:ae:e9:ec:99:93:44:bc:76:a4:2e:3c:ac:
d1:2f:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:51 2026 by rpki-client