
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: D/pqcgXryOqWucZ/KDDaXEy6ak2GPjsyPyC9vkai0a0=
Subject key identifier: 55:28:B9:8D:B5:6C:CC:23:77:3E:68:15:13:CC:18:7D:C4:CB:44:A4
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 07AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 22C6
Signing time: Sat 18 Apr 2026 15:52:10 +0000
Manifest this update: Sat 18 Apr 2026 15:52:10 +0000
Manifest next update: Sat 25 Apr 2026 15:52:10 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: CSaflP90UirmOkr2aC5d/aitsmf8/nf/ZFNL3pywnJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Apr 18 15:52:10 2026 GMT
Not After : Apr 25 15:52:10 2026 GMT
Subject: CN=69e3a8aa-92cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:3c:86:9e:42:d8:82:4c:a9:ed:dd:40:62:
6d:46:8d:ec:6f:e4:46:58:a8:ba:10:90:fb:17:57:
e5:68:0c:64:3f:90:d7:81:2c:ee:2b:8d:61:75:5e:
c7:e7:01:81:fb:9c:0e:fb:f2:26:79:f5:aa:7c:8f:
a2:8b:35:40:f1:74:c6:5c:bd:70:c0:1d:3e:8a:5d:
82:4e:87:d0:4f:e1:d8:90:30:d7:1f:63:d4:58:a1:
94:76:4f:54:3f:71:69:c0:a2:af:fc:65:98:c9:70:
a9:a6:09:6f:af:f7:3a:1e:c8:cb:ad:2d:41:58:7f:
23:87:9f:55:75:82:31:63:3c:2b:63:67:e3:f6:4a:
c2:c5:34:ab:3a:5e:5f:ef:7f:0e:81:e5:75:7d:68:
e7:c7:28:f6:3b:52:d6:18:65:e6:75:e1:78:36:e3:
cc:d6:64:23:1c:00:ad:cb:81:58:72:14:89:a8:e2:
75:a6:54:82:a0:12:9b:30:2e:05:8a:df:21:9d:86:
b6:15:c5:43:3c:df:cb:0e:41:67:c4:fa:a6:f8:39:
82:e9:a9:84:59:8b:2d:4f:00:ef:c0:72:5b:9d:a3:
b6:96:8a:20:06:1f:42:49:29:77:80:22:6a:e9:1a:
43:87:46:95:32:45:53:03:02:2c:01:eb:90:c7:96:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:B9:8D:B5:6C:CC:23:77:3E:68:15:13:CC:18:7D:C4:CB:44:A4
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a1:41:60:34:e9:ed:9a:3d:bb:af:11:5f:19:dc:06:40:bf:
52:6f:6c:fa:5b:88:4e:00:8d:16:e6:e4:ef:97:6d:6c:80:a4:
7a:ce:54:e8:5a:bf:60:03:bf:1b:a7:8e:67:02:46:27:ce:c4:
55:bc:e8:25:bc:77:08:94:fe:ea:f9:cd:7d:ab:85:9c:38:46:
c3:a4:0d:cc:d8:57:28:72:2a:1b:5a:7a:de:99:51:08:84:6a:
8a:13:ea:4a:f8:fe:d1:f0:44:bf:4d:4c:37:5f:b9:81:29:16:
a7:bd:31:61:b1:78:4a:90:a2:48:a2:48:18:09:ea:15:cb:0d:
ce:7c:16:d6:5b:22:fe:57:37:7f:c5:df:0e:2c:07:86:1c:81:
d1:c2:bb:54:d3:e6:d9:5a:14:47:dd:16:29:48:76:15:56:16:
95:d4:a8:23:35:df:2d:69:9b:31:a8:b8:31:2b:85:31:1a:67:
39:0d:da:fc:de:9c:4e:23:4e:3f:a0:03:05:b4:1f:65:1f:1c:
70:11:5e:71:81:e7:51:f6:8a:c2:dc:14:20:97:63:83:4b:2b:
b0:c2:b8:6d:f1:0f:a1:cd:82:f0:e8:2f:3d:3b:42:68:d3:b8:
34:99:15:8d:2d:1d:0d:23:9c:5c:37:84:fd:a0:43:b2:99:18:
37:98:3b:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy
MzVFOUNBQUUwHhcNMjYwNDE4MTU1MjEwWhcNMjYwNDI1MTU1MjEwWjAYMRYwFAYD
VQQDEw02OWUzYThhYS05MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/Y8hp5C2IJMqe3dQGJtRo3sb+RGWKi6EJD7F1flaAxkP5DXgSzuK41hdV7H
5wGB+5wO+/ImefWqfI+iizVA8XTGXL1wwB0+il2CTofQT+HYkDDXH2PUWKGUdk9U
P3FpwKKv/GWYyXCppglvr/c6HsjLrS1BWH8jh59VdYIxYzwrY2fj9krCxTSrOl5f
738OgeV1fWjnxyj2O1LWGGXmdeF4NuPM1mQjHACty4FYchSJqOJ1plSCoBKbMC4F
it8hnYa2FcVDPN/LDkFnxPqm+DmC6amEWYstTwDvwHJbnaO2loogBh9CSSl3gCJq
6RpDh0aVMkVTAwIsAeuQx5YA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUouY21
bMwjdz5oFRPMGH3Ey0SkMB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH
SHFHbWM4ZWphVVVqWHB5cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAKFBYDTp7Zo9u68RXxncBkC/Um9s+luITgCNFubk75dtbICkes5U6Fq/YAO/
G6eOZwJGJ87EVbzoJbx3CJT+6vnNfauFnDhGw6QNzNhXKHIqG1p63plRCIRqihPq
Svj+0fBEv01MN1+5gSkWp70xYbF4SpCiSKJIGAnqFcsNznwW1lsi/lc3f8XfDiwH
hhyB0cK7VNPm2VoUR90WKUh2FVYWldSoIzXfLWmbMai4MSuFMRpnOQ3a/N6cTiNO
P6ADBbQfZR8ccBFecYHnUfaKwtwUIJdjg0srsMK4bfEPoc2C8OgvPTtCaNO4NJkV
jS0dDSOcXDeE/aBDspkYN5g7Rg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:58 2026 by rpki-client