
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier: DvKLOA4bMxW0k4XVs+ZfyvxtPlZQ7GvrKqh5i+xst80=
Subject key identifier: BA:2C:76:02:55:E8:0B:D4:B3:FE:87:E4:91:BD:53:FC:CC:B1:3C:13
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number: 0170
Signing time: Sat 03 Oct 2026 05:35:52 +0000
Manifest this update: Sat 03 Oct 2026 05:35:51 +0000
Manifest next update: Sat 10 Oct 2026 05:35:51 +0000
Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: f40muPYlAfBzHv94J9BJm7xCEGFOq7VWAxCQgfTaSRU=)
2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: E/UjcIn0wlrlZQH9DRKC67zkHtOeFvf1WN6PywtlyRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Validity
Not Before: Oct 3 05:35:51 2026 GMT
Not After : Oct 10 05:35:51 2026 GMT
Subject: CN=6ac09438-7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:bc:e9:cc:02:8a:c8:3e:2b:f5:7d:ad:a6:
56:e1:b5:db:15:3c:85:01:91:33:8c:2c:13:6a:e7:
e5:8f:4e:2a:79:0c:f1:3a:31:64:58:81:1a:a0:76:
72:7e:9f:b3:a6:4d:4c:a9:31:77:1d:ba:81:3f:15:
d5:05:85:5d:9d:eb:98:08:9e:5b:d6:47:09:b1:44:
e6:e0:7e:34:2c:b3:f3:58:db:a0:39:d3:93:a7:cd:
cf:d0:77:6e:cb:c7:62:79:0c:5c:f1:62:5e:33:fd:
54:27:db:67:f7:8f:d7:2a:2c:3e:42:cc:a9:72:09:
75:1a:ce:b2:f4:db:4d:08:a0:b6:e9:a6:5f:a7:41:
9a:f2:2d:86:9d:fc:aa:5f:93:58:79:65:6a:24:a5:
a8:96:cf:03:13:db:6e:c5:c3:a4:7d:e0:44:7e:d7:
ab:99:6a:71:35:f2:8a:b8:3f:de:52:0c:ab:cb:9b:
76:cd:77:ba:a0:0c:61:70:3b:60:50:c0:6c:66:21:
41:d0:50:50:f5:51:60:3f:1e:71:54:63:19:2b:e8:
3e:88:69:68:5c:e9:7a:33:0c:56:13:11:02:8e:16:
50:25:78:e4:ac:20:fb:74:66:0b:f2:d1:f0:f7:c2:
c9:f9:50:20:1f:49:e2:7f:aa:78:77:64:b5:71:a7:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:76:02:55:E8:0B:D4:B3:FE:87:E4:91:BD:53:FC:CC:B1:3C:13
X509v3 Authority Key Identifier:
keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:40:35:7b:af:e3:a6:26:4a:2d:7a:74:4b:70:f8:28:57:
b7:98:37:7f:48:b6:7e:e2:5d:af:09:d6:b0:4e:a1:45:b0:da:
f6:5e:e1:f3:02:f3:9b:06:5f:9d:44:a1:b0:a1:ca:f9:39:53:
25:9f:31:f9:19:0f:4a:2d:a8:40:78:d7:6d:f1:da:86:61:4f:
3c:db:29:49:83:cd:10:3e:ed:80:68:50:d4:06:1b:99:f2:27:
fc:11:e1:b9:1b:1e:d7:ff:3a:c6:e0:f0:c9:ab:ae:d3:c3:89:
19:f5:2b:38:a7:ea:df:a6:5d:ab:f9:8e:ed:5d:3f:f6:50:76:
c9:97:18:a4:8f:68:30:aa:da:92:94:1d:e5:30:4b:54:fd:ed:
46:fd:03:b8:70:8a:c5:5b:6f:94:d6:e5:fe:ed:6a:7a:fb:bd:
7c:96:03:a4:0e:5f:12:06:86:7e:a9:c4:57:d0:18:ed:3f:49:
c5:69:36:22:37:f5:23:27:a7:cf:8d:0c:01:ac:0d:d8:3b:9b:
6f:38:20:ef:4e:54:6a:29:b4:34:fc:12:1d:38:df:08:47:5a:
0f:68:7c:18:02:ae:26:87:73:a4:49:7a:50:25:da:3b:92:62:
99:04:0a:5d:fd:45:dc:68:e5:17:c5:95:67:ea:21:79:c1:7c:
0e:b6:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:25:14 2026 by rpki-client