
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier: y/56CulggSiqKle9VLhx+dXic7GbJXIrVUJpKw2gbi0=
Subject key identifier: 69:C2:60:FD:69:7C:40:D4:89:E9:33:45:2D:9F:6C:BA:E1:0D:5D:50
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number: AB
Signing time: Fri 21 Aug 2026 07:11:15 +0000
Manifest this update: Fri 21 Aug 2026 07:11:15 +0000
Manifest next update: Fri 28 Aug 2026 07:11:15 +0000
Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: op0z2/vfmWcqoARW3iThnMnfuv3uNfA9/kltLnFrEAY=)
2: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
3: 7A339E4448F711F1A886AD5191833773.roa (hash: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=)
4: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 07:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: Aug 21 07:11:15 2026 GMT
Not After : Aug 28 07:11:15 2026 GMT
Subject: CN=6a87fa13-6b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:15:bf:6b:5a:39:db:3b:07:ef:3c:b9:92:
9b:71:f5:01:1d:e7:64:a6:f8:b9:b5:aa:ec:a4:be:
a2:08:5f:06:86:28:e3:c5:b5:4e:e6:83:67:97:b3:
45:49:eb:f0:15:1a:71:e7:31:e8:c8:a4:13:21:7d:
05:77:81:aa:57:14:b7:37:92:29:0b:c7:ec:5d:d0:
d4:13:2b:64:70:c6:e1:b3:7a:2d:7e:19:50:3f:80:
7f:b3:a7:f4:ae:62:85:3a:52:d9:7a:61:c7:ca:77:
5a:ee:a0:e2:5a:1c:2f:38:d6:21:d0:0c:f7:fb:7b:
3f:ad:4a:89:72:5e:af:08:ed:61:be:f1:1c:85:9b:
1f:72:8f:90:c6:b5:fe:c1:0e:a3:3f:66:5f:83:d0:
b4:0f:70:6e:67:dc:59:cc:34:36:16:e9:e7:78:4f:
2f:05:00:51:42:d1:8e:35:87:fc:da:dc:1d:3a:85:
34:46:f1:0a:19:e7:bd:46:79:5d:ea:30:3a:74:d2:
d6:64:7d:3f:ed:1d:0c:5e:12:be:62:61:dc:ce:99:
f2:d5:64:e4:67:4d:3e:c2:94:d0:fb:46:7b:83:7f:
4e:a3:09:6f:94:70:ff:7c:6d:f1:b9:03:64:29:fd:
d3:75:6d:1a:d2:0d:71:28:5b:b0:b2:be:e2:db:ab:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:60:FD:69:7C:40:D4:89:E9:33:45:2D:9F:6C:BA:E1:0D:5D:50
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:f0:01:ad:c6:45:fe:2f:e3:32:33:e1:4c:e1:d0:02:54:
72:14:6e:aa:b3:fd:fa:7d:79:16:1a:16:ff:d6:5b:31:7c:b5:
36:1c:4f:9c:00:62:8a:48:81:a3:1b:52:de:b1:bd:ba:53:05:
c7:5f:f9:7f:e6:f4:a0:cf:b9:31:e8:56:4f:b2:75:2e:22:cd:
e7:e0:6f:13:6f:e3:2a:48:85:89:ff:9d:13:5b:86:70:01:41:
85:03:c2:13:89:70:a0:b8:be:e8:24:d9:52:28:f8:27:2c:8b:
c1:0c:a2:9a:75:bb:90:8d:e7:da:db:a6:f7:0f:38:29:21:bc:
f5:cd:8a:9d:5d:44:e9:d2:f3:9a:fc:69:c2:b9:7c:89:73:78:
34:22:09:4f:a6:c1:7c:60:6b:d9:27:bc:f1:53:f7:ee:fd:d6:
7f:43:53:29:b5:51:42:97:13:13:a5:e8:f1:46:73:fd:36:61:
49:58:a8:27:1d:bf:db:8c:2d:45:c9:24:02:12:9c:29:58:44:
2b:c5:89:91:ef:7a:73:ff:b1:0a:fc:f4:e4:1b:b2:10:56:41:
0e:5a:19:11:28:3c:89:5a:ca:9e:05:5a:fd:1a:03:7e:06:34:
a3:a0:11:6a:51:92:c5:11:53:6b:62:c1:6a:82:df:93:7c:4b:
9d:0d:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:18:30 2026 by rpki-client