
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier: XaNNjLWxQNzDYqXfWDu6pmb86WvCsfLko5E/410NAMs=
Subject key identifier: A7:72:16:3C:02:14:83:46:76:9A:F5:03:44:C7:A5:C0:7F:53:EE:14
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number: 0260
Signing time: Mon 27 Apr 2026 02:01:52 +0000
Manifest this update: Mon 27 Apr 2026 02:01:51 +0000
Manifest next update: Mon 04 May 2026 02:01:51 +0000
Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: TfsXUFAB5gwtvZJ3QgGO6O67IllOnT1y4MpdI3jd1BE=)
2: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
3: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Apr 27 02:01:51 2026 GMT
Not After : May 4 02:01:51 2026 GMT
Subject: CN=69eec38f-52fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:82:58:ae:03:df:bf:c6:7a:51:fc:50:2e:
e3:90:44:f9:38:79:a6:b9:70:19:3b:35:62:ff:18:
7c:52:8f:36:8b:c0:c5:9d:b9:5d:a0:9c:96:5c:4b:
7b:2b:b1:54:e9:84:6e:19:66:1f:a7:30:d8:e2:19:
5d:30:c4:c5:45:2d:83:06:c2:0d:39:76:e1:43:42:
f4:0e:02:3f:01:90:20:69:83:f9:fe:0f:f7:32:0f:
b3:b6:be:b4:9c:1d:63:6d:06:b7:e2:cb:7f:9f:67:
57:f4:ad:78:c3:5d:af:1f:71:5b:b3:86:0f:5b:0c:
5a:44:f4:5c:55:d9:15:a7:cf:be:6d:86:de:89:3f:
02:23:d8:3f:d0:29:1d:88:d4:29:e4:35:3f:dd:e3:
49:ca:4f:1a:73:46:40:bb:15:8e:9c:ab:ad:06:f3:
ff:bd:db:11:05:4b:03:9e:05:9b:df:6a:7f:78:07:
d7:ea:d6:82:fc:82:2b:63:bf:bd:b5:2e:6c:14:c7:
e2:fd:0a:8c:1f:eb:a4:de:f5:76:80:e8:62:e6:a4:
f7:05:87:1c:ea:55:a2:8e:fd:6a:c8:7b:bd:5c:ba:
80:e1:99:3e:38:1a:10:2c:44:a9:35:53:b9:34:53:
c6:9f:b2:d4:7f:2f:18:c0:4d:f3:68:09:fd:4b:a6:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:16:3C:02:14:83:46:76:9A:F5:03:44:C7:A5:C0:7F:53:EE:14
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:8b:10:05:67:fb:fb:96:92:44:4f:14:0b:0c:29:f3:2b:
6c:f3:58:1e:b9:d7:55:e7:6d:c0:f0:d2:18:d0:75:b8:bc:f7:
ea:05:81:66:67:ba:ff:3c:09:79:5c:64:a8:b1:fc:18:46:93:
11:d2:83:20:f6:ef:c4:e6:b3:3a:6e:04:f0:08:09:cf:a6:86:
ea:9b:3f:51:4a:db:bc:01:69:72:b2:0f:6c:a2:91:a3:b0:76:
b0:7f:d3:36:d5:42:59:26:4e:c4:6d:ef:82:ef:43:f5:e4:25:
8b:17:f6:40:8c:02:15:98:b8:1f:54:16:d5:11:44:82:3c:df:
66:9a:ac:88:2c:49:6b:0f:bd:21:5f:18:a4:e5:44:1c:6a:4d:
d5:33:aa:5a:0d:2b:94:76:64:ab:c7:37:ab:cb:6b:37:bf:16:
24:67:e5:35:5c:02:02:c4:c5:cd:68:72:de:79:43:67:5d:a1:
59:f6:30:85:62:b9:25:d6:a2:c6:f2:75:88:25:56:67:f9:5d:
56:14:2f:c1:2c:bb:6a:e3:d3:a4:09:46:cd:21:34:30:7e:30:
b4:af:13:08:ad:2c:b3:42:da:c9:dd:e6:bf:8c:94:8a:ed:eb:
eb:8c:b0:a7:48:24:95:f2:42:5e:02:3f:e6:7d:58:0b:f6:5e:
3b:c7:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:28:27 2026 by rpki-client