
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier: UzoCaYEcg/h+GtQaxrLQAzqi1vjyJ8PBrV4u7zOYdJM=
Subject key identifier: C4:23:9D:27:12:6D:0A:3C:21:51:46:85:DB:0A:0E:52:2B:65:91:F5
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number: 0160
Signing time: Mon 31 Aug 2026 05:28:28 +0000
Manifest this update: Mon 31 Aug 2026 05:28:27 +0000
Manifest next update: Mon 07 Sep 2026 05:28:27 +0000
Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: LPyDogA3M5Jhbl9Z8aAAmce1FFnpVYJrW+aOVfjxBr8=)
2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 05:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Validity
Not Before: Aug 31 05:28:27 2026 GMT
Not After : Sep 7 05:28:27 2026 GMT
Subject: CN=6a9510fc-4ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:c2:4a:44:75:b9:07:ca:b6:06:bb:09:f8:
40:06:39:ef:31:50:07:64:df:b2:a4:a1:40:99:ec:
40:76:73:27:3b:00:06:ad:90:c9:f2:2a:9d:fe:c5:
b3:a2:f5:e9:07:e4:01:33:2a:f8:98:cb:db:b2:58:
fd:ae:9d:ce:ca:cb:90:b0:0b:27:67:6c:2f:17:b5:
84:d8:d8:d6:48:ea:53:d7:7b:46:ed:79:58:58:d5:
74:2f:4d:5b:bf:15:34:7d:a4:83:25:65:65:8e:26:
70:a9:c7:de:98:8a:e8:78:2d:68:47:00:b0:63:3a:
5e:7c:a9:a2:b8:26:1e:88:5b:0d:15:3a:98:a1:dd:
56:31:9b:2c:e7:17:98:f6:28:ee:f4:0c:70:3d:fb:
b8:39:68:1e:65:b6:8a:ba:b5:89:fd:8b:7e:d0:ca:
71:24:6b:1e:11:d4:58:77:97:50:72:6a:bc:c1:28:
2e:98:43:2a:58:96:e8:cc:57:c2:ee:f0:58:44:af:
b3:bb:85:64:28:23:7d:fb:3a:55:cf:cc:91:29:e0:
0c:11:24:ff:59:f5:98:4c:a6:98:76:ae:23:03:4a:
63:98:c5:16:20:15:7f:42:2d:79:4d:0d:3d:00:f4:
a0:c8:51:44:26:a9:93:05:13:06:2f:e3:4c:bc:c5:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:9D:27:12:6D:0A:3C:21:51:46:85:DB:0A:0E:52:2B:65:91:F5
X509v3 Authority Key Identifier:
keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7b:51:8d:43:56:4b:ff:9b:1e:fd:09:2d:22:95:2e:b1:ec:
2b:fa:2b:76:89:a7:2c:87:4c:ae:73:3d:e0:8f:21:3b:1e:ef:
97:31:fd:3d:b5:69:62:e4:f0:f5:4b:ec:9c:ec:b4:78:ef:ca:
9a:1b:df:07:b7:f3:64:1d:1c:5d:fa:c4:d4:ad:1b:cb:50:2d:
8e:58:f7:a0:8b:d9:8f:ad:f7:8e:ca:7d:37:6f:ef:45:86:23:
cc:a4:80:ce:5f:c5:9a:cb:4e:95:b6:09:db:f3:33:35:e3:ae:
e5:0b:86:6c:2f:2d:1b:4c:5d:89:32:85:eb:45:5b:e5:8c:71:
f9:67:01:82:bf:a9:08:3f:a2:27:19:50:58:64:7d:f1:f9:5b:
58:86:a4:4f:4b:8d:fc:6b:42:12:b5:9e:89:a1:89:76:76:10:
35:2a:f9:79:d9:83:66:8e:20:64:14:b3:27:95:dd:2e:f9:24:
6f:33:1f:a1:fa:ff:97:b3:7f:cd:9c:b8:46:f2:98:74:54:85:
2d:a0:e5:2a:b6:d4:05:af:8b:f0:4e:ee:31:93:f3:54:09:80:
b1:1c:2c:9c:1d:04:2f:ed:1a:cb:d9:b7:54:ae:db:2d:98:c1:
b5:10:af:e5:6a:32:57:c0:7f:89:b5:57:f5:ce:da:c7:a6:5f:
da:cc:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:36 2026 by rpki-client