
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft
File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json)
Hash identifier: O3w9sag3NuTTXr4QU/bXxRDY5Kdqcw/+5kr9MfPe9OM=
Subject key identifier: BE:A2:93:B1:83:A0:DF:B3:17:85:72:6C:E4:27:62:0C:DB:36:D0:27
Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70
Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft
Manifest number: 05
Signing time: Sun 01 Mar 2026 10:43:20 +0000
Manifest this update: Sun 01 Mar 2026 10:43:20 +0000
Manifest next update: Sun 08 Mar 2026 10:43:20 +0000
Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: rDSvfZ7imLodK6IbRevBlbBbg62Rn0M0a03wtt8qUl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl
rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70
Validity
Not Before: Mar 1 10:43:20 2026 GMT
Not After : Mar 8 10:43:20 2026 GMT
Subject: CN=69a41848-d537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:bc:70:ff:16:fb:1c:d5:9f:33:20:56:66:
5c:8b:8c:9f:2b:e2:24:cc:3f:93:a6:18:dd:80:f1:
01:ca:d2:c5:95:cd:a9:b6:53:60:df:5b:4e:34:f3:
66:47:0d:f2:69:94:1c:42:a8:8b:90:66:13:4f:e0:
b7:2a:77:d0:1d:3a:0c:e6:a3:f5:8a:ba:33:8a:23:
02:1e:5b:3c:d9:3f:49:12:ec:4c:5b:49:01:93:f4:
e6:09:5b:9d:8a:56:5c:51:93:28:57:0b:f3:66:56:
af:67:48:4f:3f:0d:32:6e:ab:f2:e0:dc:04:95:a3:
32:5c:ee:59:5d:3b:9f:8a:31:39:a6:70:17:2e:7e:
46:9f:e7:fb:7f:f7:da:32:6b:82:09:97:fc:eb:de:
61:0f:cb:62:ed:02:ac:ce:fb:ce:f1:7f:a3:f2:2a:
6a:3c:d0:c0:f1:55:9e:ea:21:46:b0:12:0f:73:91:
c6:a3:d5:a1:02:78:02:68:6b:04:af:f9:fb:30:b7:
ea:fd:e0:6a:93:c7:3b:f0:a9:f9:68:4e:ed:cf:5d:
54:57:3b:1e:00:c9:c0:db:be:1e:ba:95:8f:ca:0b:
0a:16:62:33:76:75:0d:b6:96:e1:7e:b0:fc:05:29:
d9:fe:02:d5:bd:f3:70:9b:1b:c3:d9:bf:cb:ea:87:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:93:B1:83:A0:DF:B3:17:85:72:6C:E4:27:62:0C:DB:36:D0:27
X509v3 Authority Key Identifier:
keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5e:be:46:70:8a:06:33:da:eb:71:96:eb:5e:24:ab:fe:bd:
aa:52:f7:65:b3:56:43:28:c3:17:3a:44:ce:ee:4f:60:9b:0d:
0e:c5:1b:10:43:ea:61:72:8f:64:3d:3c:7e:95:f2:a1:38:9c:
89:cf:73:42:b3:ba:ad:3f:b2:c1:e6:1a:fc:71:bf:20:77:b1:
b6:81:34:e7:2c:bf:a2:55:06:c8:d7:90:38:8f:a1:6d:dc:9d:
9d:d9:88:0b:18:3c:86:7a:4f:ba:c7:e6:d4:8b:a2:db:01:02:
f2:d2:20:a3:bd:c8:b6:e7:d3:66:ab:95:c3:28:db:d1:7c:99:
ba:7f:1d:a1:47:30:c3:8a:4a:0c:58:87:ac:35:8c:f9:b3:5c:
2b:4c:b2:38:e8:2b:83:da:92:32:bd:d7:54:39:b5:1e:95:3f:
20:a6:bb:64:91:a1:06:0b:e7:34:04:92:93:dc:df:78:38:ea:
cc:2a:ca:df:46:41:14:8d:c0:c9:9c:82:be:b7:8a:ba:2e:c2:
38:4e:4c:a3:ae:2b:b1:7e:2a:9f:14:5c:e5:d9:38:ac:18:e0:
a4:77:dd:23:e0:f9:52:a4:70:0b:f6:f8:63:41:e5:cd:0c:16:
9b:e1:99:f6:57:2c:3a:b6:74:0d:d7:6c:ab:fd:91:cc:4c:cd:
2a:bb:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:24 2026 by rpki-client