
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json)
Hash identifier: IGkTM3byGELSiiqVjnHtnZHMbYv+8LS+Cc0BIBbLNJA=
Subject key identifier: 85:88:EA:25:4D:0C:05:15:FA:6A:F6:06:31:62:25:42:28:23:76:BE
Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
Manifest number: E1
Signing time: Mon 01 Jun 2026 07:24:38 +0000
Manifest this update: Mon 01 Jun 2026 07:24:38 +0000
Manifest next update: Mon 08 Jun 2026 07:24:38 +0000
Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: RV5GDChgVeo1Qiu/edOfVtev9p7WpowHXfBwQGgZIa0=)
2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Validity
Not Before: Jun 1 07:24:38 2026 GMT
Not After : Jun 8 07:24:38 2026 GMT
Subject: CN=6a1d33b6-8460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:45:ba:62:a6:f2:35:f5:cb:b1:e4:94:5d:
0d:e5:62:21:53:34:51:5f:d6:33:e4:94:23:9e:fc:
63:74:c4:81:23:7a:77:04:c3:5d:ce:02:89:73:12:
42:bf:86:3e:ae:6a:fe:98:8a:10:e5:54:f5:8e:98:
47:25:ba:c9:6b:cb:4e:45:41:11:0a:85:68:87:33:
02:d9:10:4d:8c:b4:b5:37:76:60:58:32:cb:48:2c:
54:54:b7:9a:a3:34:22:6b:05:ba:fa:ab:45:1b:a2:
86:b2:50:de:c3:09:5a:d2:64:47:38:49:d9:91:b6:
cb:58:01:b1:05:46:73:92:69:5b:18:25:58:7f:89:
02:3b:fd:6b:9d:af:0c:46:81:cb:02:e6:b6:0a:a5:
ff:9d:b9:ea:c3:f3:ac:cf:4c:93:af:26:73:86:42:
93:b1:40:89:cb:62:6a:0a:8a:f6:26:af:39:01:92:
ca:8b:f3:cd:51:bd:46:ff:fd:8d:07:d0:6f:45:75:
8e:f5:7d:09:45:02:3a:24:77:f4:09:2f:6d:5b:5e:
56:22:fb:0d:c5:1e:08:32:e4:ff:11:0b:a5:85:bc:
4f:19:ae:83:c8:78:2d:84:45:9e:90:72:4d:32:59:
54:fe:ba:fc:4d:b0:a0:d8:ec:5d:d6:8c:e8:4c:6b:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:EA:25:4D:0C:05:15:FA:6A:F6:06:31:62:25:42:28:23:76:BE
X509v3 Authority Key Identifier:
keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:83:b1:1a:c3:ae:11:42:35:4d:61:10:ea:fd:3f:53:8a:ae:
1a:5a:64:09:5f:09:5e:de:d0:ff:a3:88:29:39:75:01:df:64:
46:e9:da:62:96:c2:2e:50:0b:63:9d:5f:20:5c:a0:b9:7b:c7:
e4:18:7e:f9:fa:7d:8a:47:77:ea:06:a4:f5:7b:0c:75:38:50:
69:a8:35:c5:07:e6:81:97:cc:18:e9:de:70:6a:ab:8c:7c:cc:
fb:a8:9c:5e:2b:8d:94:f9:56:b2:6b:a3:68:0e:d4:59:86:ed:
f2:ae:ba:bd:ae:ac:c1:2a:4c:25:70:c6:9b:d1:cb:be:88:b4:
ec:6b:cc:77:f7:79:5f:18:14:8f:b7:8d:b4:05:52:e9:8e:d5:
b4:90:e9:1d:28:53:1c:82:4b:e7:7b:6b:cc:1d:e7:a0:e9:46:
81:63:2c:13:24:8c:53:78:27:e2:45:97:32:d5:ab:b7:9c:71:
18:fc:3c:b9:8a:6a:ef:81:4a:91:93:e3:bd:4d:99:0e:8f:25:
66:72:ed:64:e3:df:9d:39:01:1b:65:bb:f0:0e:1f:c4:f0:af:
a9:f4:c4:37:54:a4:89:6a:91:4a:42:4f:dd:e9:21:45:5f:f7:
c3:b2:26:30:2f:d2:88:3d:70:17:89:15:71:45:01:43:53:59:
c6:ec:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:11 2026 by rpki-client