
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json)
Hash identifier: dj3KMurQrBwJnsf5yZF1h8W+ZOjXrV57VEYK5ILSWl4=
Subject key identifier: 80:2A:9E:9C:20:61:88:E6:FE:35:EB:36:A4:58:3C:63:9C:3E:E1:D0
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
Manifest number: 1E
Signing time: Tue 19 May 2026 08:53:16 +0000
Manifest this update: Tue 19 May 2026 08:53:16 +0000
Manifest next update: Tue 26 May 2026 08:53:16 +0000
Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: W0UtBvGDSsX6f89E9FmF0hzPBtw0++z/IYNeOciTygE=)
2: 32D300684EFF11F19AA82571A4833773.roa (hash: QkW8hoEVlDhqW1xMLJkGg7Bfu6Vbp9RtQ1kbqUS7Lvk=)
3: 31D240FC4EFF11F19AA82571A4833773.roa (hash: jMRDP/qs0RHwH+iBEl/1d5klpgVUB9IxO0Edj6/Ig7o=)
4: 60DB6CCA4EFF11F1A5F5EC7BA4833773.roa (hash: mY/FOCcURrqlorv2xJh+RWjjQwbG9GW87KnRS8kWnM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: May 19 08:53:16 2026 GMT
Not After : May 26 08:53:16 2026 GMT
Subject: CN=6a0c24fc-11af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:11:35:3d:1e:0c:e9:76:c1:0a:0b:7c:09:
35:22:ef:77:d8:6c:07:e8:ba:cd:5b:33:06:04:c8:
3d:73:8e:2d:3a:cd:13:d7:b3:c6:b2:43:8f:af:6d:
15:f9:b1:ae:bf:7a:ef:dc:37:5e:2b:7c:9a:be:bf:
39:3b:d1:5a:64:45:32:06:66:57:0e:44:90:57:11:
06:57:c9:39:a1:bd:69:18:a8:05:10:3b:69:af:5c:
d8:e6:d2:71:6b:d5:1e:ef:f5:e0:b6:00:10:81:b4:
a1:53:06:9f:eb:d5:fd:5d:d2:28:01:31:9c:c1:c7:
76:ba:4c:e7:d5:34:54:72:2e:92:c6:61:b8:f9:a4:
16:4c:30:8e:7c:d6:70:b3:aa:2a:b4:0d:3d:8b:19:
2e:62:8b:56:e7:81:29:4e:e9:98:16:1c:97:c3:61:
df:ca:aa:45:1d:1e:db:03:a7:da:f5:6f:72:cf:7c:
dc:f1:2a:18:62:dd:3d:78:7b:a3:3c:c0:ba:e5:0a:
37:d3:0d:74:b5:b3:ea:23:04:a6:ee:7f:12:97:e7:
7d:e5:81:88:00:e0:bf:70:65:40:4e:d3:9f:d1:6b:
99:0f:51:32:a4:94:b2:e4:c9:6d:b6:f8:e3:68:19:
62:b9:2d:ca:53:58:6d:22:e5:a1:00:41:f6:f2:54:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:9E:9C:20:61:88:E6:FE:35:EB:36:A4:58:3C:63:9C:3E:E1:D0
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:e4:06:07:fd:97:ca:39:30:93:2a:20:4f:32:40:6d:9d:
71:09:d3:c0:e1:21:68:1c:02:e4:a4:37:c9:b3:b9:d7:e6:a9:
e1:e4:6f:0f:c7:8a:d5:33:fa:07:de:f3:a8:3c:62:b3:c1:28:
8d:a9:eb:b6:81:40:34:32:1c:55:20:62:27:e7:40:c7:c5:a8:
f4:66:68:30:a4:9b:0c:25:0d:d3:bf:b3:db:06:9c:b5:53:08:
ac:7f:45:b9:16:b3:31:62:f3:44:77:ef:85:0c:4c:1c:21:76:
88:23:78:f5:1c:66:08:f1:0b:37:1c:4c:d7:3e:cd:0a:1b:11:
7d:39:b4:22:80:76:ef:2f:44:d5:21:32:6f:65:12:34:7b:07:
1b:a9:ed:62:37:fe:2c:4a:13:cd:fe:9b:8d:9b:ef:ee:8e:f5:
6c:0b:d6:fa:37:81:8a:48:46:4d:b1:10:27:57:78:a1:c2:ee:
7a:a8:de:ca:b6:04:a0:97:9b:fb:34:28:4d:5a:00:21:51:c7:
44:29:53:d9:ae:a1:85:5e:4a:98:24:ca:fb:6e:cb:dc:0a:2b:
ed:e8:a4:19:90:c5:82:51:7d:90:c8:44:7a:d5:e0:9e:fa:d8:
41:4f:b4:00:71:74:78:c6:11:75:24:9f:bc:30:26:0a:b6:49:
72:8e:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:12:47 2026 by rpki-client