
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier: AUerYh0M1OKXzfif9U9qNnQq/9hRHwpumPcJf65cuIQ=
Subject key identifier: 49:C1:82:86:84:03:CC:27:71:DE:C3:63:7D:A9:10:E8:32:5A:B1:2D
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number: 6B
Signing time: Sun 01 Mar 2026 09:23:28 +0000
Manifest this update: Sun 01 Mar 2026 09:23:27 +0000
Manifest next update: Sun 08 Mar 2026 09:23:27 +0000
Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: +Szbg90n9MIwhITgcXJjWBNd5eM6tJ0U7s/1ZC3/iHs=)
2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Validity
Not Before: Mar 1 09:23:27 2026 GMT
Not After : Mar 8 09:23:27 2026 GMT
Subject: CN=69a40590-b8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:f4:84:47:cf:f4:9b:bd:37:2b:ae:3d:96:
e5:48:91:5d:83:6f:66:75:57:46:c9:ee:bb:81:35:
6f:4c:32:f4:83:8d:b8:26:c5:21:d0:9e:ed:f2:66:
72:c1:1b:51:d3:cc:5e:94:58:0d:1c:51:5b:72:94:
ed:f2:b1:fd:32:56:ef:c2:ae:f7:ee:18:16:2d:1e:
f4:50:b1:68:b5:f0:f3:f2:29:d2:ca:08:a9:91:8d:
ee:7f:9b:b8:dd:bb:c3:33:c5:b3:2f:59:c9:3e:54:
43:65:66:6b:4a:eb:87:93:bc:16:c8:60:cc:d3:a4:
49:62:01:65:bb:08:f1:d3:a8:40:0a:1f:12:61:6f:
ef:cb:e0:50:d5:7d:ce:9d:e2:8b:ca:b1:68:37:78:
ad:16:c0:ba:64:88:b0:a2:1a:19:f6:30:c3:49:f5:
17:a5:54:73:e6:98:04:e9:dc:e0:ae:36:2f:b2:18:
21:98:95:51:f5:26:b2:52:4e:53:5a:26:25:f3:2b:
e7:76:fd:79:ac:bd:ae:52:24:70:75:f8:62:38:89:
03:3a:28:59:72:e4:74:b2:71:d8:1b:73:1b:3f:fd:
16:4a:47:ae:04:27:96:59:ac:92:2a:ce:fd:dd:4d:
82:b8:04:4b:df:42:e6:49:ef:ab:20:aa:34:81:6e:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:82:86:84:03:CC:27:71:DE:C3:63:7D:A9:10:E8:32:5A:B1:2D
X509v3 Authority Key Identifier:
keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:49:98:4a:9c:26:a5:ff:c9:58:c5:ff:47:f1:46:47:55:fc:
98:28:c8:05:75:79:b1:60:59:99:23:d6:dd:47:c7:82:1b:48:
27:56:95:48:71:35:9c:2b:48:86:25:2e:f9:3c:82:b4:84:9c:
30:42:4a:e9:14:6c:cd:60:07:07:c7:4e:10:c2:70:3d:1e:81:
3f:26:ce:d1:aa:38:2c:b2:46:21:e2:ab:c5:c5:d6:0f:94:ae:
75:d7:15:d8:d6:3f:0e:f2:84:1c:0c:8b:98:d3:35:eb:82:e6:
07:2d:2c:05:f3:6b:f2:c6:dc:a0:ea:d7:d5:e3:55:d0:13:c0:
2f:89:ef:37:23:84:82:8e:d3:d9:30:f5:01:8d:2d:11:5c:c1:
44:a3:26:d9:df:8a:ac:9e:79:35:4a:be:57:c0:7a:93:8e:e4:
2c:ab:18:d0:71:88:15:07:17:29:97:16:61:99:3c:35:ec:08:
cb:e3:69:58:61:78:b9:85:7c:da:e5:5d:b0:50:71:17:47:19:
81:aa:cc:f8:3a:4d:76:84:5f:35:22:96:28:b5:31:e9:ca:e6:
31:9e:3f:af:1d:65:d5:02:ff:1d:65:48:ac:63:98:6e:0e:27:
42:f6:3b:ee:42:c3:d2:c3:53:f8:1e:2f:4d:48:53:2c:b3:3b:
56:20:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:03 2026 by rpki-client