
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: KK4s0Uaiae4Nj0VBID3WnyIi9xptSqSTojsabW5573k=
Subject key identifier: C8:28:B1:FE:68:4F:89:76:B3:5D:B3:5A:91:47:03:6F:B7:E8:FA:EB
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: F2
Signing time: Thu 21 May 2026 06:25:51 +0000
Manifest this update: Thu 21 May 2026 06:25:50 +0000
Manifest next update: Thu 28 May 2026 06:25:50 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: tFnz9PQSaSW2/8rXL1agGK9+4P4ch1ChPx2JG5fptlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: May 21 06:25:50 2026 GMT
Not After : May 28 06:25:50 2026 GMT
Subject: CN=6a0ea56e-74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:ac:19:d4:4f:ba:2e:b2:d0:de:1b:9a:c2:
cc:0b:89:47:82:c5:35:30:04:89:2d:0a:cc:35:2d:
3b:87:80:39:71:aa:4a:2c:b7:6d:db:dd:4a:bd:95:
46:c9:cd:5e:d2:cd:7d:03:7b:2f:0a:b7:e4:27:28:
0d:cc:95:85:95:59:85:59:7d:02:b8:18:08:67:3b:
e2:68:8d:dd:c5:1c:05:e0:60:20:df:72:29:fa:ed:
7a:3b:28:dd:a1:f8:32:12:97:9f:93:e0:5e:5c:94:
ff:eb:31:86:46:44:a3:35:38:da:3b:c4:06:9f:a5:
38:6d:83:96:d1:96:8a:76:86:cc:6a:02:0e:9d:a9:
4f:22:c4:99:84:90:d3:47:a7:83:dc:dc:ef:ec:e1:
9b:f4:ab:b7:c9:c7:17:f5:67:9b:b0:3d:3f:2d:4a:
25:fe:40:5b:0d:7c:da:ce:04:3d:5f:c7:03:b4:56:
8c:b8:54:ee:c5:78:7a:2d:f0:71:37:ec:42:4c:c7:
db:8e:ca:f0:26:23:6b:02:64:86:2f:ee:09:5c:35:
28:49:ff:c5:43:d1:d3:1c:67:66:e3:be:a7:4e:d1:
90:64:a0:f4:26:76:c5:c5:f2:62:98:a5:3c:77:12:
40:82:c3:e2:b9:8d:6f:a1:d3:36:b0:0e:15:15:47:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:B1:FE:68:4F:89:76:B3:5D:B3:5A:91:47:03:6F:B7:E8:FA:EB
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:9f:9c:8e:ba:a8:18:ca:7c:ba:7f:be:c2:74:a4:3e:22:24:
de:e0:69:57:01:a2:69:ed:4b:43:e3:d4:3b:ae:47:7d:83:a4:
e9:34:87:a4:26:58:6a:4f:e0:8b:a6:bb:39:7f:3a:d7:97:3c:
ad:82:f5:80:3d:e5:01:b6:c7:21:d8:6d:10:8c:1e:f1:58:3f:
aa:53:c2:ff:a1:54:3e:0e:9f:1a:a4:ca:69:80:96:5d:24:8f:
00:b6:d1:bd:55:66:c8:3c:7b:70:7d:8c:0f:01:33:40:ef:03:
94:5c:95:78:eb:47:7e:94:80:00:57:e7:65:c6:95:07:46:b2:
45:65:2d:05:be:a1:34:d6:28:20:6a:a8:a5:a2:3a:c6:78:0e:
fc:d2:fe:ea:f4:1e:3f:31:4a:6f:9e:84:0b:e7:cc:a9:8d:fc:
5a:a3:36:d2:0d:8b:bf:d9:4a:c6:1d:0c:22:16:df:8e:4c:a9:
5c:86:f6:eb:0f:ee:85:2e:05:ae:62:93:34:d7:31:7a:3d:27:
dd:29:a0:c6:55:ff:2d:dc:d3:8c:0a:c3:e8:24:16:74:a1:1f:
16:71:59:ac:c6:f8:a9:a5:c0:dc:7b:d6:78:bc:66:68:cc:95:
5a:89:de:1b:3a:65:b1:6d:7a:11:86:94:6f:77:b5:e4:eb:2d:
a7:b2:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:31 2026 by rpki-client