
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json)
Hash identifier: Vv7VagQht4VNQgrE6OmB7xe18is8CVm4md0Lvo7DNJM=
Subject key identifier: D7:3D:D3:12:9B:8B:BD:C6:68:8C:7A:91:59:8E:6F:9A:EA:D8:58:DE
Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57
Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
Manifest number: 05BD
Signing time: Thu 08 Oct 2026 23:13:58 +0000
Manifest this update: Thu 08 Oct 2026 23:13:57 +0000
Manifest next update: Thu 15 Oct 2026 23:13:57 +0000
Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: b/sGr5uvg0qeBLMziXb8J1rPkpB2GNZACp4RgeSUaGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl
rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
Validity
Not Before: Oct 8 23:13:57 2026 GMT
Not After : Oct 15 23:13:57 2026 GMT
Subject: CN=6ac823b5-bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:98:fa:ec:d6:23:1b:ac:aa:f5:2b:87:c3:
d9:31:54:e4:da:8f:85:34:58:02:4a:a0:da:0d:ac:
2b:b2:4a:82:67:0d:e7:25:43:f3:c2:30:05:82:9c:
6a:37:71:44:95:86:f7:80:f0:9d:6b:e4:32:c6:87:
00:46:a2:66:c2:64:5c:e5:65:96:17:f5:c6:50:22:
91:aa:c6:71:71:a8:ec:8d:a3:27:81:5a:fe:cb:36:
b7:b6:2c:28:af:9a:c5:4a:fe:43:e4:75:07:d4:35:
2e:9b:2c:73:82:8b:80:6a:db:1d:2a:f6:a3:85:4b:
af:47:01:73:4f:c3:9d:7e:a7:b4:25:e8:30:6b:11:
7e:8f:95:8d:06:62:70:05:05:c4:9c:a0:31:1f:44:
bf:d5:86:73:5d:ac:77:76:25:65:86:0f:64:79:20:
18:50:4c:a7:14:af:a6:11:ea:81:09:e9:89:38:06:
e5:7e:e0:77:24:ab:21:be:5c:8c:a4:c1:41:b6:c7:
c3:f6:f2:9e:49:3d:78:df:36:39:4b:31:e1:06:bb:
d9:cc:0a:63:84:5e:c8:5a:5c:eb:30:ca:99:76:1f:
94:07:00:91:2f:00:97:0b:cb:74:3c:47:19:06:ad:
d7:ad:53:e1:db:5f:9f:cf:26:9e:e8:74:ae:a3:73:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:D3:12:9B:8B:BD:C6:68:8C:7A:91:59:8E:6F:9A:EA:D8:58:DE
X509v3 Authority Key Identifier:
keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fd:2d:b7:04:28:e1:c9:f0:d8:85:75:c5:69:cb:69:06:21:
89:9d:6d:32:ce:46:7b:86:62:dd:35:03:7e:40:05:68:05:a3:
40:3d:63:5a:79:5c:63:00:a4:cd:1b:13:dc:d8:ae:21:51:30:
e4:c2:34:be:47:26:64:54:cd:dc:16:03:45:1a:a6:c4:ff:7e:
df:50:5b:10:73:67:92:84:e9:e3:6d:55:b0:5f:f1:23:36:99:
74:6c:e2:e8:f7:d9:6a:c1:36:d7:35:6c:47:74:b9:eb:d6:e6:
84:e9:72:24:b0:db:e6:dc:f4:58:ca:f3:d5:11:99:01:49:8e:
11:fc:cb:88:e1:e0:10:a4:39:e1:e6:3f:47:6b:c1:9e:aa:37:
4d:f8:c1:31:7d:08:ca:19:e7:f0:e1:95:ed:83:ca:91:0d:c4:
b3:98:5e:1d:57:48:b5:bd:e4:2a:53:1c:d9:9a:79:29:48:2f:
26:54:b1:39:8c:aa:3b:31:c8:c8:24:a8:82:0f:61:85:bc:15:
11:71:8b:27:f2:aa:c6:64:69:2e:8f:65:3b:c9:d5:43:4a:a6:
d2:ab:dd:a5:4f:11:9e:0e:9e:70:35:0a:8b:b2:72:f3:58:c6:
84:86:ab:b4:12:af:22:73:df:95:59:2c:c6:c8:e1:68:d2:02:
37:07:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:39:31 2026 by rpki-client