
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: ZYlkEbdX9P+6d64/LB4w3JKEoOktjbVXZ6axpyxCJFc=
Subject key identifier: 76:A9:F4:AD:BC:9C:F5:EE:C7:F5:F1:50:78:21:C1:A6:09:27:F1:E5
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 02F1
Signing time: Mon 27 Apr 2026 01:17:05 +0000
Manifest this update: Mon 27 Apr 2026 01:17:04 +0000
Manifest next update: Mon 04 May 2026 01:17:04 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: y8Me/zf1t5o7u9FW/MJwznfNFbFqrOOaYi9Boq5vync=)
2: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=)
3: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
4: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=)
5: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=)
6: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
7: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
8: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Apr 27 01:17:04 2026 GMT
Not After : May 4 01:17:04 2026 GMT
Subject: CN=69eeb911-b705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:e9:84:c8:25:ab:74:88:98:27:e3:bd:ee:
66:11:ad:88:7d:7b:b7:1b:f9:74:71:6f:7c:5d:05:
24:68:6d:1d:cc:fd:ee:87:82:99:c4:47:20:35:47:
fb:d7:2c:1b:1e:6a:e1:7d:1c:cc:1d:51:3f:57:6e:
06:94:b5:e3:0f:da:1c:36:57:b3:98:aa:07:70:2d:
2b:37:81:e4:e8:49:1e:27:26:26:39:4a:ca:95:12:
7a:56:01:56:67:a3:5e:12:57:1e:05:2f:a2:fe:31:
c4:c0:92:b2:27:90:0b:25:de:92:95:7e:30:09:7c:
1c:f6:ed:c0:d9:ea:10:fb:ec:76:ab:e6:49:9f:4e:
5a:5f:f7:4d:c3:8d:66:82:11:dc:0e:88:68:bc:5f:
02:11:8a:29:5a:e4:a5:7b:d6:ec:fc:6f:ad:3c:08:
b0:14:3a:a5:c5:b0:99:af:a1:b3:e0:18:86:92:b3:
01:ca:72:8a:c8:04:40:ce:22:0c:76:9e:c7:dc:ae:
45:a4:cd:e0:a0:51:f4:fd:cb:0f:31:ba:49:01:56:
45:72:27:3a:f7:dd:4c:66:4c:6d:ae:72:e5:76:43:
e9:76:23:02:11:d9:cf:ad:f6:a7:fd:36:c9:fe:44:
e1:2b:da:94:13:b6:5f:a5:fa:7e:03:52:72:6e:58:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:F4:AD:BC:9C:F5:EE:C7:F5:F1:50:78:21:C1:A6:09:27:F1:E5
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:62:48:60:33:ec:f4:ad:d4:5f:9a:0c:83:0a:f2:99:18:f4:
72:60:4b:42:ea:63:3f:39:93:ab:9a:8f:b6:fd:66:2d:f2:6d:
f4:47:36:b3:61:4d:8a:d4:76:a7:ef:ae:2b:60:d7:93:a5:39:
ca:95:09:88:d3:26:be:77:39:63:10:ed:c7:3f:54:19:3d:8d:
8a:c7:2a:4f:1d:51:b8:2a:08:14:af:9a:26:d0:c5:ba:e2:69:
0a:c7:04:ef:1e:35:65:6d:4f:0d:00:b6:a4:d5:c7:a7:ef:f8:
2d:0a:c2:ad:2c:8e:8f:26:0e:32:90:c9:c6:c9:f6:19:dc:6d:
22:88:21:8d:37:04:6d:c6:da:c4:9b:f6:13:bb:4f:5b:4a:cc:
52:9b:d7:8d:e2:c4:cd:05:f7:ad:1f:ef:6f:60:45:08:2e:71:
bb:ca:25:4d:91:a0:0e:5a:14:be:38:a1:9c:92:22:5e:11:07:
51:5c:1c:80:0c:f0:90:93:11:98:af:ff:d3:d1:62:e4:4f:6a:
27:c9:4a:7d:91:31:d1:65:29:82:d1:33:1a:0f:89:94:00:80:
1f:ff:f6:47:be:fe:7d:24:bd:ce:e4:0f:ec:23:c8:00:97:37:
76:fd:cb:37:e1:7c:a9:b7:9d:75:e6:b7:eb:12:35:b4:62:f7:
24:cf:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:22:53 2026 by rpki-client