
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier: o+wrV+p3P0J37L8h2ZkWAeCoietyjDy1GNhaepeZ44c=
Subject key identifier: 1B:1A:2C:FF:BB:30:5A:AF:78:38:A7:E5:B5:CC:37:B3:41:6C:81:66
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 054F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number: 0541
Signing time: Sun 01 Mar 2026 00:07:20 +0000
Manifest this update: Sun 01 Mar 2026 00:07:19 +0000
Manifest next update: Sun 08 Mar 2026 00:07:19 +0000
Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: hfEuHEFQEAb+herzt3I4Jr5p+tHTdli/j8U8rhsmP88=)
2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: Xm1rBXhmf8C7NwIdzHcktuLy6xLXnZf/ojX3SwmWi0s=)
3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: 3n3nLW0U6YcpS2DSLwMtSeUZ5bCt2NFI2SAX/eDJKCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: Mar 1 00:07:19 2026 GMT
Not After : Mar 8 00:07:19 2026 GMT
Subject: CN=69a38337-851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:ac:19:09:9f:80:ed:80:3f:7a:e0:97:e7:
be:da:dc:41:4a:77:68:5d:81:60:7b:2d:4e:86:09:
70:08:90:85:d1:41:40:d8:b3:55:73:2c:d1:f8:0a:
62:e9:d7:9b:88:2c:15:a3:fd:b8:56:36:06:0c:25:
2f:a3:c8:d1:05:bd:0f:f2:6b:bc:97:60:1a:e1:79:
d9:80:87:00:1c:06:cc:3a:55:c8:65:f7:ee:40:4e:
38:ae:3b:9d:a2:2a:a0:17:6b:46:4f:b0:0c:c2:3a:
98:f0:79:ac:7d:45:fe:af:82:1a:a1:7b:e1:ca:ea:
5b:74:9b:b6:7a:92:be:0a:73:44:08:aa:eb:11:50:
9f:c6:6e:69:a8:9e:07:3a:87:fd:7d:cc:13:2a:0c:
4f:d6:ce:1f:0b:06:21:e2:86:44:fe:b4:b8:b1:7a:
74:55:fa:2a:8b:82:a4:9e:7f:bf:b4:e2:79:e9:b6:
14:a6:23:08:cd:95:ab:6e:49:a9:c0:14:33:88:b6:
84:d0:2b:d5:cf:10:8b:f3:9f:ba:74:b3:c3:7b:9f:
a9:df:b0:b7:8f:97:b7:ef:fe:2a:00:1b:e7:3a:fd:
48:a5:2f:d6:19:36:a5:50:a1:ac:97:22:af:d3:c1:
98:56:6b:3c:97:17:1f:5e:49:82:2c:97:71:1b:4d:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:2C:FF:BB:30:5A:AF:78:38:A7:E5:B5:CC:37:B3:41:6C:81:66
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:8c:85:8a:2d:8b:d9:25:ef:72:a9:07:63:6b:74:05:22:
c7:33:3c:fd:ce:5f:4f:58:07:b9:bd:39:52:88:21:a3:8b:09:
61:74:a2:a7:b4:df:14:9c:4f:f4:29:87:b3:66:f3:89:b3:0f:
c2:6c:99:d0:59:04:3c:37:20:93:ac:0a:ac:03:bb:38:29:12:
e4:59:f7:02:9a:23:9b:28:26:c2:90:a7:86:de:66:fb:4c:b7:
12:72:28:fe:fe:50:15:b4:a5:b3:a6:ba:34:f6:2e:5f:c8:ec:
0a:21:24:ea:d6:53:72:5f:28:d5:80:21:39:82:15:ae:2c:ae:
da:d1:4e:f8:c4:52:ce:45:04:98:1d:60:a2:00:69:ac:c8:70:
b3:fc:48:10:3e:e4:b1:fb:1d:ba:4d:fe:92:55:2c:67:d4:2c:
1f:60:ff:79:c6:ef:de:7f:a4:b1:0e:57:00:2a:98:44:b0:aa:
7e:4c:d8:bd:fe:7e:25:96:5a:51:62:d4:d9:52:ed:45:6f:09:
14:64:fd:a6:6c:70:c7:d0:9e:e3:88:bc:2c:c3:81:85:24:5d:
49:80:8d:66:62:f6:c7:a8:30:ca:79:61:44:eb:34:dc:b6:1b:
c5:8d:3c:5c:f3:12:17:39:d1:3c:cb:09:a4:be:e6:37:1a:4f:
0b:a1:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:07 2026 by rpki-client