
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier: +/yiybD7i5IkfR2Bg8FGm3PIh1KiDjLPWuOurHdzztk=
Subject key identifier: 77:20:34:A1:D9:DD:6C:0B:38:59:9B:4B:92:1B:0C:CE:4A:41:DA:2B
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer: /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number: 26
Signing time: Fri 17 Jul 2026 10:09:55 +0000
Manifest this update: Fri 17 Jul 2026 10:09:55 +0000
Manifest next update: Fri 24 Jul 2026 10:09:55 +0000
Files and hashes: 1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: PH0vFnKYqEFfdVvQu0lAN5rk8a+LM/u9UfmG95/25Eo=)
2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Validity
Not Before: Jul 17 10:09:55 2026 GMT
Not After : Jul 24 10:09:55 2026 GMT
Subject: CN=6a59ff73-8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:16:09:49:f1:89:ef:31:4d:56:0d:98:d7:
7b:36:2e:11:ff:f1:26:d2:65:97:e6:19:56:50:b8:
92:ab:a0:83:7b:9a:14:4f:63:e9:93:c0:a3:62:e7:
23:51:41:e5:17:08:82:2d:38:29:04:5b:ca:1b:3a:
97:51:78:dd:d8:a2:01:a5:86:6b:2f:d8:1b:55:6d:
39:ac:e3:fa:c1:ae:6c:63:da:72:e3:42:4a:40:6f:
49:07:26:a9:7e:50:6e:5e:56:60:b7:5e:87:9e:e5:
6a:e6:e1:11:7d:64:25:7c:d3:1b:14:59:34:44:9b:
42:9e:ab:73:99:8b:2f:c1:9e:c1:f3:ca:bb:28:1e:
9c:0a:ea:69:26:5e:d4:84:e7:99:69:1d:f1:48:91:
43:5e:c0:e6:6a:b3:e1:09:cb:80:9c:99:e3:9b:f6:
ee:fe:44:7d:2e:aa:ef:16:bd:72:dd:c0:80:cf:5f:
28:75:ca:a2:f3:d3:41:98:25:0d:f0:de:81:de:cb:
6f:01:08:f2:30:85:6a:6c:bc:c0:bc:2a:cd:bf:14:
d4:eb:cc:02:8b:40:23:03:bc:2b:41:d4:78:2b:88:
19:14:65:de:07:58:21:98:5d:0c:23:9e:83:8c:36:
2e:31:c3:42:68:68:e1:b4:84:fc:09:4b:77:e6:fd:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:34:A1:D9:DD:6C:0B:38:59:9B:4B:92:1B:0C:CE:4A:41:DA:2B
X509v3 Authority Key Identifier:
keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:fe:7e:31:79:17:95:1d:ee:4b:f5:f5:d3:41:ee:ac:77:
a8:b8:a6:3b:c9:e3:9e:e3:db:39:61:22:8b:ff:43:de:44:21:
ee:bc:d3:90:cb:e3:c4:ec:f9:cd:96:5c:f5:dd:ba:ca:e1:7d:
2a:4a:26:97:21:62:4c:aa:92:3a:fd:57:43:86:34:e7:12:69:
3e:07:7f:b0:57:3e:f1:7c:2f:d2:38:28:f3:b8:19:8e:3b:84:
8f:d5:91:bb:d4:64:49:d8:46:67:3c:b5:45:19:7e:51:37:75:
8b:94:aa:2c:89:12:cc:e2:75:3a:37:bf:f6:0e:aa:e8:23:20:
d7:34:a9:5f:66:04:46:d2:6a:76:db:b4:6f:cd:cb:33:0c:b5:
48:2d:66:c2:1b:e2:1a:87:d6:7e:b1:e1:5f:9e:85:9a:a3:77:
56:ed:44:23:45:a7:65:09:09:b7:fe:16:f2:19:42:be:9d:ba:
44:4a:69:a8:70:42:32:e7:8b:e5:d2:18:7b:27:9b:bc:48:3e:
c8:9f:75:79:63:15:be:ac:5b:df:bd:e2:ac:0e:63:1f:eb:50:
ed:72:d5:b3:75:ce:47:47:40:62:ec:da:9c:f1:35:e7:4a:97:
b7:d8:8a:80:a3:e8:7c:7b:c8:a8:a8:34:05:f3:08:16:18:30:
c5:ea:ef:03
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDcyNzExMC8GA1UEBRMoRTQ5RDYzMjAxODY3QTkxRkIyRTk5NTAwMkE3Q0NCNTNG
MzQxRTc1QjAeFw0yNjA3MTcxMDA5NTVaFw0yNjA3MjQxMDA5NTVaMBgxFjAUBgNV
BAMTDTZhNTlmZjczLTg4NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpzRYJSfGJ7zFNVg2Y13s2LhH/8SbSZZfmGVZQuJKroIN7mhRPY+mTwKNi5yNR
QeUXCIItOCkEW8obOpdReN3YogGlhmsv2BtVbTms4/rBrmxj2nLjQkpAb0kHJql+
UG5eVmC3Xoee5Wrm4RF9ZCV80xsUWTREm0Keq3OZiy/BnsHzyrsoHpwK6mkmXtSE
55lpHfFIkUNewOZqs+EJy4CcmeOb9u7+RH0uqu8WvXLdwIDPXyh1yqLz00GYJQ3w
3oHey28BCPIwhWpsvMC8Ks2/FNTrzAKLQCMDvCtB1HgriBkUZd4HWCGYXQwjnoOM
Ni4xw0JoaOG0hPwJS3fm/fSdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdyA0odnd
bAs4WZtLkhsMzkpB2iswHwYDVR0jBBgwFoAU5J1jIBhnqR+y6ZUAKnzLU/NB51sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0VFNDQ0M0MyNDlG
RDExRjFBMEYxRDE0REJEODMzNzczLzVKMWpJQmhucVIteTZaVUFLbnpMVV9OQjUx
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUoxaklCaG5xUi15NlpVQUtuekxVX05CNTFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
NzI3L0VFNDQ0M0MyNDlGRDExRjFBMEYxRDE0REJEODMzNzczLzVKMWpJQmhucVIt
eTZaVUFLbnpMVV9OQjUxcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA54v5+MXkXlR3uS/X100HurHeouKY7yeOe49s5YSKL/0PeRCHuvNOQy+PE7PnN
llz13brK4X0qSiaXIWJMqpI6/VdDhjTnEmk+B3+wVz7xfC/SOCjzuBmOO4SP1ZG7
1GRJ2EZnPLVFGX5RN3WLlKosiRLM4nU6N7/2DqroIyDXNKlfZgRG0mp227Rvzcsz
DLVILWbCG+Iah9Z+seFfnoWao3dW7UQjRadlCQm3/hbyGUK+nbpESmmocEIy54vl
0hh7J5u8SD7In3V5YxW+rFvfveKsDmMf61DtctWzdc5HR0Bi7Nqc8TXnSpe32IqA
o+h8e8ioqDQF8wgWGDDF6u8D
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:54 2026 by rpki-client