
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: SufJfTcYj5WsZVgrZ7xaSRUhvtbGilBUeNQ9v82jKDw=
Subject key identifier: 13:8C:2C:10:D6:29:7D:11:34:DA:61:AE:21:EA:B9:8D:B4:CB:47:17
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0500
Signing time: Sat 04 Apr 2026 23:30:43 +0000
Manifest this update: Sat 04 Apr 2026 23:30:42 +0000
Manifest next update: Sat 11 Apr 2026 23:30:42 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: JTYl8GvzmKEjvVk8+/xPFFAZe5AIv1I32ST9F4a01S8=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Apr 4 23:30:42 2026 GMT
Not After : Apr 11 23:30:42 2026 GMT
Subject: CN=69d19f23-2352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:8b:9f:c9:64:a8:95:0c:af:74:f7:1d:4b:
67:e0:00:9b:1d:6f:7c:95:0f:1a:20:88:0e:74:4e:
e0:c9:96:91:0f:19:e9:49:49:57:cc:f7:cd:00:39:
76:98:fc:ad:dc:f7:7a:7e:fa:55:cb:6d:a0:b7:a1:
10:c1:6b:ae:92:0a:f0:af:69:88:95:17:de:c5:ef:
1c:bd:7e:cb:0d:b5:d1:1c:51:78:a4:3a:b6:61:f0:
31:44:a7:24:bf:eb:30:5d:e8:2a:e7:66:44:6d:73:
fd:24:d4:79:2a:97:dd:8e:c0:57:39:83:61:14:76:
a3:69:f7:f4:cc:27:16:a5:55:5d:78:2c:dd:25:30:
b2:e3:7e:69:b5:27:a8:10:36:d3:2d:3d:fb:eb:bb:
d2:06:20:39:e3:99:ff:7c:7d:e4:5f:c1:70:9e:cf:
a5:61:a9:e2:43:7f:49:26:30:58:66:63:a4:80:25:
08:08:29:56:41:0d:f0:08:76:4c:89:4a:3c:6d:7a:
33:3d:33:8c:37:13:a8:4d:c9:0b:e0:7b:f3:79:4e:
08:20:6d:ab:ea:ab:03:dc:23:40:aa:18:16:d6:2d:
8c:43:5b:29:f7:68:97:42:86:a5:47:f4:b4:60:9b:
d0:c8:44:c9:8b:b8:1d:05:8f:3d:9e:1e:a4:6c:61:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8C:2C:10:D6:29:7D:11:34:DA:61:AE:21:EA:B9:8D:B4:CB:47:17
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:38:9d:cb:e9:c2:f4:5d:e5:f2:2e:1c:8a:f8:fd:0d:d2:
70:d6:44:78:ac:1a:c9:d8:32:80:61:85:0d:19:28:d3:39:32:
86:0d:80:b3:2e:6e:20:a3:a5:26:b7:27:30:b3:f2:8f:a8:b8:
5e:3b:49:89:dc:e7:61:c5:6b:23:4f:4a:44:79:ab:98:7c:5a:
d5:34:42:fb:d4:13:de:b8:e1:dd:b2:a0:62:4a:69:f6:85:aa:
90:e2:92:58:9b:5c:fd:35:61:94:eb:70:13:2d:67:d6:be:0b:
d3:94:3a:4e:82:dd:5e:21:86:5c:55:49:6d:74:71:5a:43:0d:
f2:f9:da:ee:3d:b5:58:a8:49:c7:20:6c:5f:bb:77:f7:cd:a6:
82:af:76:dc:45:d5:c7:12:f5:2a:19:a1:b2:0e:cd:2a:f3:d1:
5b:6f:cc:37:b7:88:10:04:fd:63:b9:7e:b7:52:29:cd:7c:17:
f9:51:0d:b5:53:dd:59:04:64:bd:4b:10:71:42:e5:7d:b2:95:
16:24:1c:e0:6e:8e:75:c4:2d:48:49:0f:4f:8a:20:c0:7d:14:
ea:c4:f4:4e:9c:db:c2:0f:ab:07:15:09:34:63:6f:da:4c:0a:
b6:b1:1b:c4:01:d3:57:ce:43:f0:8d:85:ff:73:b7:f5:ac:a7:
80:af:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:27 2026 by rpki-client