
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier: 3+1psstnXY37dlvmQ1KWxY3FfqNvhozVlkfaCuV8080=
Subject key identifier: F5:E0:C3:E3:45:07:E5:C2:CF:EF:D7:30:22:69:4E:53:84:B5:9E:5C
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer: /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number: 56
Signing time: Mon 19 Oct 2026 08:58:08 +0000
Manifest this update: Mon 19 Oct 2026 08:58:08 +0000
Manifest next update: Mon 26 Oct 2026 08:58:08 +0000
Files and hashes: 1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: PisC7vvMEtJAPzPHO+5vQIn5FotSpMY4LQIhnlq5Rpo=)
2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Validity
Not Before: Oct 19 08:58:08 2026 GMT
Not After : Oct 26 08:58:08 2026 GMT
Subject: CN=6ad5dba0-ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:ae:2b:35:1c:ab:82:b8:3b:cb:73:ee:a8:
57:12:0d:de:fa:ac:0e:1c:75:85:91:37:6b:1c:f0:
75:59:87:5a:cd:fd:31:b0:2c:fc:55:b0:c2:88:cb:
b8:3d:d3:82:aa:97:ab:56:ae:2d:24:0c:1c:1c:36:
5b:17:9d:0c:05:72:47:f7:a3:73:29:e0:dd:96:e1:
10:23:fa:be:3f:0f:09:25:37:db:cc:54:5f:d1:0b:
c7:96:15:15:7f:94:55:ac:f8:e7:54:72:ea:20:40:
1b:2d:38:4c:fe:54:34:64:65:5a:ef:f9:18:7c:57:
75:7b:8a:06:88:11:63:cc:5f:b8:1e:51:d2:28:0b:
cc:ae:69:55:bb:98:63:f4:a8:36:42:70:bd:38:b6:
70:dd:cc:0c:4c:65:a5:a5:1f:0d:f9:d0:29:cd:91:
45:ff:43:17:80:c7:b1:67:f1:01:ae:1e:54:7b:5b:
c8:9f:c3:0e:10:1c:ef:ec:1f:d1:d6:bf:1f:62:fa:
b6:b9:96:9d:1a:5c:ae:e1:f9:ec:88:33:61:f6:f4:
b9:46:15:c7:08:33:1a:91:3e:e3:cf:96:3c:15:de:
54:92:93:40:a3:57:c3:12:9f:22:ca:bf:13:74:38:
16:b6:17:c3:2d:e5:f7:65:36:cc:95:3e:4b:c3:f6:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:C3:E3:45:07:E5:C2:CF:EF:D7:30:22:69:4E:53:84:B5:9E:5C
X509v3 Authority Key Identifier:
keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:fd:ba:86:45:97:13:52:45:66:7d:87:98:69:80:f1:70:
54:49:03:ac:4e:7c:0e:d8:97:9c:c3:b3:d2:49:c5:32:47:7a:
09:3f:91:3f:bf:43:71:b0:0c:1b:ad:44:97:f2:6b:f7:92:9c:
09:4a:cb:51:31:3f:ca:ad:af:70:fd:44:5f:f6:42:78:8c:97:
07:bb:b4:d1:60:75:40:fe:63:75:09:57:16:76:70:f2:6e:b5:
10:06:02:b3:69:b4:d5:f2:01:41:f1:41:53:48:e3:e8:0d:a8:
6f:b5:c4:97:f8:35:6e:84:3a:4d:d7:df:6b:24:a8:f5:4a:76:
e0:f7:29:0f:85:7b:cb:37:ed:58:7f:52:db:99:3d:61:c1:a5:
bb:74:3d:4a:34:78:36:a2:73:01:27:cf:28:7c:6b:c0:81:cf:
40:bf:57:71:05:17:8d:3f:05:06:32:fa:58:c4:f4:e4:3c:6a:
be:19:ec:5b:a4:2d:7e:16:e9:24:0d:33:38:7c:f7:6a:54:20:
01:1a:d9:08:28:d5:7d:c0:25:a2:3f:0a:26:64:ea:2c:c6:2a:
0b:ab:d6:81:6c:6c:b4:5a:48:d2:95:a8:77:a5:93:ff:f5:f4:
9d:b4:3c:b1:ba:de:d3:5a:3f:37:db:d3:d9:da:f1:7b:54:88:
2d:08:a6:b1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDcyNzExMC8GA1UEBRMoRTQ5RDYzMjAxODY3QTkxRkIyRTk5NTAwMkE3Q0NCNTNG
MzQxRTc1QjAeFw0yNjEwMTkwODU4MDhaFw0yNjEwMjYwODU4MDhaMBgxFjAUBgNV
BAMTDTZhZDVkYmEwLWFkNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpza4rNRyrgrg7y3PuqFcSDd76rA4cdYWRN2sc8HVZh1rN/TGwLPxVsMKIy7g9
04Kql6tWri0kDBwcNlsXnQwFckf3o3Mp4N2W4RAj+r4/DwklN9vMVF/RC8eWFRV/
lFWs+OdUcuogQBstOEz+VDRkZVrv+Rh8V3V7igaIEWPMX7geUdIoC8yuaVW7mGP0
qDZCcL04tnDdzAxMZaWlHw350CnNkUX/QxeAx7Fn8QGuHlR7W8ifww4QHO/sH9HW
vx9i+ra5lp0aXK7h+eyIM2H29LlGFccIMxqRPuPPljwV3lSSk0CjV8MSnyLKvxN0
OBa2F8Mt5fdlNsyVPkvD9sSpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9eDD40UH
5cLP79cwImlOU4S1nlwwHwYDVR0jBBgwFoAU5J1jIBhnqR+y6ZUAKnzLU/NB51sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0VFNDQ0M0MyNDlG
RDExRjFBMEYxRDE0REJEODMzNzczLzVKMWpJQmhucVIteTZaVUFLbnpMVV9OQjUx
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUoxaklCaG5xUi15NlpVQUtuekxVX05CNTFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
NzI3L0VFNDQ0M0MyNDlGRDExRjFBMEYxRDE0REJEODMzNzczLzVKMWpJQmhucVIt
eTZaVUFLbnpMVV9OQjUxcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpvv26hkWXE1JFZn2HmGmA8XBUSQOsTnwO2Jecw7PSScUyR3oJP5E/v0NxsAwb
rUSX8mv3kpwJSstRMT/Kra9w/URf9kJ4jJcHu7TRYHVA/mN1CVcWdnDybrUQBgKz
abTV8gFB8UFTSOPoDahvtcSX+DVuhDpN199rJKj1Snbg9ykPhXvLN+1Yf1LbmT1h
waW7dD1KNHg2onMBJ88ofGvAgc9Av1dxBReNPwUGMvpYxPTkPGq+GexbpC1+Fukk
DTM4fPdqVCABGtkIKNV9wCWiPwomZOosxioLq9aBbGy0WkjSlah3pZP/9fSdtDyx
ut7TWj8329PZ2vF7VIgtCKax
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:28 2026 by rpki-client