
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json)
Hash identifier: dKa2wvuEfEmBUd0pgD7uGu0hzXjyETJ5Kg0bifsATpU=
Subject key identifier: 4D:38:1B:F2:BB:4C:1C:53:36:07:DA:C0:FE:13:13:A0:E3:88:F2:1B
Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7
Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7
Certificate serial: 1A7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
Manifest number: 1A64
Signing time: Sat 04 Apr 2026 16:15:18 +0000
Manifest this update: Sat 04 Apr 2026 16:15:18 +0000
Manifest next update: Sat 11 Apr 2026 16:15:18 +0000
Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: BexOY/V3/64jOCSZdsaN3q25dJkKL4gCBgPMdym63Xc=)
2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: 4HTCBd1B951dp8RI98cRe5qVuag3SCN+aI63ZMLFsbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl
rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6778 (0x1a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7
Validity
Not Before: Apr 4 16:15:18 2026 GMT
Not After : Apr 11 16:15:18 2026 GMT
Subject: CN=69d13916-2198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:65:63:39:5e:22:82:7f:4e:69:6e:7f:26:
41:0b:03:c5:74:6a:8b:c6:9e:43:6e:19:f7:e7:0e:
bc:fc:9a:1e:85:56:79:01:b9:53:4a:d6:0a:be:d5:
de:81:10:24:ff:41:1c:25:c6:60:a5:23:36:91:50:
02:3c:c7:31:3a:2d:18:f7:d8:d9:a2:e1:a3:bf:75:
9a:52:9c:8d:ea:0a:00:c0:6d:24:d0:13:2f:88:a3:
29:28:b9:f0:e0:66:e9:17:31:01:72:d9:88:39:93:
42:c5:84:35:47:7c:88:a9:12:80:07:cd:59:6e:0c:
9d:db:ac:cc:6c:2c:10:77:b3:77:17:6e:02:97:93:
06:9e:35:3b:59:fb:e6:c8:4d:8a:b2:d9:e8:84:20:
39:af:0d:53:24:55:79:b3:c8:d0:2b:34:d4:66:d7:
52:77:e2:10:8f:db:9e:3e:e9:92:70:7b:64:fe:47:
6e:f0:b2:12:aa:ee:46:95:71:c7:4b:07:01:53:c4:
e6:dc:59:56:5b:b6:ae:01:8e:70:d7:83:31:20:fa:
33:06:b0:15:8b:e5:57:2b:7b:71:85:8a:a0:e2:dd:
51:fa:3b:93:75:e0:7c:99:a9:ed:53:4d:ce:18:54:
cb:8c:db:68:da:29:f7:c7:84:83:00:7f:41:ff:91:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:1B:F2:BB:4C:1C:53:36:07:DA:C0:FE:13:13:A0:E3:88:F2:1B
X509v3 Authority Key Identifier:
keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:bb:2a:27:6a:2b:71:31:0c:15:1c:42:9a:a9:9e:b6:30:
22:15:f1:e2:0c:ab:70:a2:3b:fc:4c:7f:1c:3c:1e:b2:13:82:
fa:20:ae:99:84:6a:df:3c:7f:89:8a:f6:ff:ae:18:0f:33:6b:
81:9b:cc:ad:bb:e9:54:e1:01:25:cc:f1:e9:1d:d9:05:78:f5:
8d:77:3a:c0:28:a5:c3:2c:ab:8e:3a:51:92:b6:62:05:7e:1f:
d8:1a:86:b1:3c:b5:02:07:6c:20:d7:0a:8a:53:2b:2a:ed:f5:
e9:8c:ca:6f:12:4d:e5:4e:ac:5f:f1:49:2c:0a:90:42:c0:dd:
e7:b3:6c:8b:1f:a1:73:cc:ad:56:20:e7:42:b9:40:85:5b:f9:
43:75:13:ab:17:b7:3d:6b:7c:24:b8:af:cf:51:6a:bc:7c:53:
b1:b4:ac:27:da:af:b4:f1:f1:80:a8:78:71:25:1e:4b:32:d0:
17:04:1c:95:d2:96:7d:0b:79:ec:2e:3b:02:ea:84:a5:f1:b7:
29:b6:fb:14:18:69:ac:b5:aa:ee:92:da:79:8b:65:99:cd:05:
30:53:5b:f5:4f:7d:40:d9:1d:ef:e9:5c:b9:aa:c5:94:7f:b5:
24:c5:3a:8a:e4:15:43:db:3d:10:cd:da:80:bc:ba:79:bf:ba:
d9:d8:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:43 2026 by rpki-client