
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier: OuoCRdFlNr4KVbfoTvfopc+ig3zcD6iWmLA1BtOyy6U=
Subject key identifier: E6:98:55:64:08:CA:AB:07:E0:AB:7B:E7:58:85:EC:F3:E7:E9:7B:39
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number: CF
Signing time: Sun 15 Nov 2026 06:55:43 +0000
Manifest this update: Sun 15 Nov 2026 06:55:42 +0000
Manifest next update: Sun 22 Nov 2026 06:55:42 +0000
Files and hashes: 1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: aGUCu38E5aN+z+TyKoLtORYXl+HgriatOOPA1vpa26s=)
2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Validity
Not Before: Nov 15 06:55:42 2026 GMT
Not After : Nov 22 06:55:42 2026 GMT
Subject: CN=6af9576e-fc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:7f:fd:1f:75:ba:18:7c:65:88:1a:c8:51:
f2:bb:ab:72:d5:af:fa:f5:21:70:f6:bc:b7:20:8b:
1c:7e:fb:c5:05:c6:19:a5:ef:f3:e6:da:ae:d7:b7:
a3:23:8c:6e:7a:38:b9:ff:66:ea:9b:b2:0e:0a:59:
ba:ae:62:c1:25:59:41:a4:54:d3:da:70:60:24:f0:
28:9c:10:f5:0a:eb:bf:7a:97:39:11:1a:8e:a7:ac:
ac:a3:e8:15:51:74:9e:ae:d7:9e:49:9d:b6:b7:d4:
ea:18:a3:6e:d9:c9:99:26:3c:6d:f9:3c:14:0d:8a:
d7:e3:a7:4e:79:01:69:ad:f5:5f:fd:6a:6c:e0:e6:
b0:b7:f7:5e:25:01:9c:33:eb:39:48:b6:72:b8:79:
5b:8d:0d:1e:f4:24:a0:21:3e:31:43:8b:be:6e:6c:
84:e0:42:8c:f1:a5:71:58:a3:45:2a:37:fe:a6:6a:
df:b1:7b:34:ba:1f:7e:4b:38:63:02:17:ee:fd:a4:
16:64:85:da:51:02:0b:dd:4b:a2:4b:e3:44:53:92:
06:cd:91:e2:5a:cf:32:4b:c6:a4:82:84:78:ee:16:
f6:e2:cb:4f:c2:ac:ce:a3:3d:98:0e:0c:64:79:4c:
9f:e8:66:34:59:a3:e3:8d:e5:37:12:fc:14:d7:8a:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:55:64:08:CA:AB:07:E0:AB:7B:E7:58:85:EC:F3:E7:E9:7B:39
X509v3 Authority Key Identifier:
keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:26:4d:f7:70:39:31:6b:8a:b6:fb:ca:c0:95:ba:50:72:cc:
35:8e:85:d9:ff:2b:46:f9:f4:4f:9c:f5:62:ee:91:88:23:5b:
57:1b:9e:0f:ee:97:b9:a8:0b:b6:71:44:cb:91:76:8d:07:b1:
60:bf:19:92:97:3f:65:85:ff:fc:42:7c:e1:ee:13:be:87:9b:
52:69:fe:30:85:dd:b6:14:70:19:52:bb:3f:73:3c:d6:b8:ca:
d8:4c:ec:82:2b:60:de:c7:71:ea:19:09:b7:62:9b:d4:01:ce:
23:7a:c6:41:48:d9:d1:28:03:8b:01:f7:a3:a6:ad:27:12:f7:
70:f3:5c:17:3b:a8:81:68:12:10:8c:2d:f2:c4:35:e4:14:25:
30:19:45:2b:6a:7a:b8:67:d3:30:fe:0c:1f:48:d7:69:12:12:
08:6b:c0:18:1a:c0:61:80:64:ec:d4:8c:c4:af:23:a1:de:81:
0e:cd:1f:42:fb:b8:62:de:39:ad:6d:99:54:ef:31:86:8c:9b:
2d:a3:1e:a1:be:75:6c:36:27:50:02:eb:76:8d:f3:8a:bc:1d:
27:bd:3d:15:9b:79:d0:bf:d9:25:0e:6c:db:4d:d9:fc:44:5d:
2d:0d:f4:43:08:2a:e2:08:c9:44:76:9f:31:b8:0c:fa:f8:91:
a9:c3:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:53 2026 by rpki-client