
$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier: FiCfEVqXX5j0IvA1x/YoEXxFBrkIwA+kiGURo0Vtx1A=
Subject key identifier: A4:ED:67:81:21:D4:CA:F1:90:8F:D9:1B:C2:4C:79:F3:62:7D:10:41
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number: 01D7
Signing time: Sun 01 Mar 2026 04:17:26 +0000
Manifest this update: Sun 01 Mar 2026 04:17:25 +0000
Manifest next update: Sun 08 Mar 2026 04:17:25 +0000
Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: oMvdKDSynnjqPnI9E4ODB7uSGvpRp/YkvnJIz+OUa2Y=)
2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=)
3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Validity
Not Before: Mar 1 04:17:25 2026 GMT
Not After : Mar 8 04:17:25 2026 GMT
Subject: CN=69a3bdd6-08e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:16:bf:e4:c1:9c:e3:c3:cf:d9:16:32:cb:
d8:e0:2d:9c:ce:59:30:bf:74:bf:27:1f:69:8a:a4:
0a:b9:83:e3:b4:97:be:9f:52:29:1b:9d:c2:49:bb:
6a:b1:c9:a8:24:d1:c8:e1:91:df:f3:e2:61:ff:7a:
b4:9b:55:1d:81:ba:03:f4:d3:be:95:b1:ed:ff:26:
03:a1:8e:f7:0a:e5:40:de:d4:87:2d:45:d9:22:5f:
1c:31:a5:bf:74:0e:e1:e6:29:42:5a:6e:1e:ce:37:
82:97:96:a1:1b:4b:fe:61:a8:37:19:f2:e6:fa:41:
8e:0f:1f:76:f5:f5:48:0a:85:24:a0:86:00:3c:6f:
5c:79:64:5e:6d:03:16:ce:12:fa:1b:d7:d7:02:3e:
94:65:e3:45:77:a0:8e:2b:c5:c0:aa:fb:73:6e:92:
9e:05:48:a4:a2:dd:9c:d5:e2:e2:71:d9:a2:4a:4a:
5a:f7:a3:0c:59:46:30:46:3b:68:02:fa:5c:54:18:
4b:3a:e0:83:d5:d4:80:bc:4c:cc:6c:c9:b4:bf:76:
d8:60:1c:11:6d:2c:70:ca:a9:66:0d:2f:f7:2b:d7:
6c:6c:4f:92:08:3b:a3:e9:e2:73:05:57:b5:29:fa:
4f:d7:53:e5:ef:62:2f:94:47:99:f4:b6:6d:c2:aa:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:67:81:21:D4:CA:F1:90:8F:D9:1B:C2:4C:79:F3:62:7D:10:41
X509v3 Authority Key Identifier:
keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:1b:78:6c:7b:58:6a:7e:58:b8:88:24:91:56:b7:c1:47:
88:92:34:dc:99:72:89:fb:4c:de:58:d1:48:92:97:cf:4c:21:
40:92:8c:84:26:2e:7e:aa:3f:ab:1c:f1:03:d7:9e:e9:e8:e2:
55:6a:6d:2a:75:72:dc:53:22:f2:c1:78:dd:52:4f:0f:85:46:
c7:fd:4d:93:48:9b:db:d3:51:a0:43:b8:a4:4d:45:ff:cb:79:
77:84:0f:c5:11:c8:33:e5:b7:49:90:79:1b:5a:aa:7b:3d:3f:
a0:c7:95:3b:02:5b:28:ed:a8:8c:b0:66:1a:80:23:3e:d9:17:
53:27:08:dd:23:cd:d1:75:c7:ba:f4:a2:08:ea:0e:e4:cc:c2:
33:44:bb:49:4b:38:8b:82:a9:2f:d1:62:b5:38:1e:8e:59:be:
30:fc:0f:20:15:92:bc:0c:39:68:a8:41:bf:1d:e3:f1:f8:f1:
aa:1f:ef:6b:70:ab:42:51:16:dd:a9:89:82:86:77:e9:7e:dd:
09:4f:5b:da:94:6b:03:b2:14:2c:fc:f0:eb:b2:71:67:5a:77:
f8:c6:6e:96:88:ba:7e:5b:8c:69:98:41:5e:1e:70:a8:40:90:
39:07:63:db:af:96:3b:db:b1:92:1a:fb:88:62:9c:57:c3:d1:
4c:e6:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:16 2026 by rpki-client