
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: RQo4L5oLm7Io+VqZNeITyBHNw9RGG1jIXPze7rykvlw=
Subject key identifier: D8:71:DB:B2:E8:42:B0:D2:00:61:04:14:51:80:36:BD:D8:D3:67:14
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 0960
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 0935
Signing time: Mon 02 Mar 2026 02:13:57 +0000
Manifest this update: Mon 02 Mar 2026 02:13:55 +0000
Manifest next update: Mon 09 Mar 2026 02:13:55 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: fFTOYhf2dB+2wK6UllqJSYbI7/Ac75IozB7n1pcvs7Y=)
2: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
3: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
4: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
5: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
6: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Mar 2 02:13:55 2026 GMT
Not After : Mar 9 02:13:55 2026 GMT
Subject: CN=69a4f264-9ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:8e:a6:1a:91:37:14:3d:ca:41:12:40:c9:
68:2b:a5:4f:dc:18:17:93:d3:83:38:19:93:36:85:
ea:8e:3d:43:e2:52:ae:fb:d2:d0:5d:ab:81:0f:59:
7d:b2:90:5d:2d:57:70:db:4b:26:f8:c9:2c:05:71:
a0:37:ee:7f:49:27:9e:dc:96:92:93:59:f6:2e:7f:
7b:fa:70:4c:e0:fd:f8:16:35:40:42:d2:30:1b:f0:
c3:31:4b:2f:46:69:22:3b:fb:49:cb:64:7c:0d:c9:
64:f7:f0:cc:54:3b:7c:46:f6:b8:58:38:2e:8a:40:
f1:a2:fc:76:ee:bf:36:4c:c6:ca:46:3d:b1:49:cf:
c4:f6:8a:9a:47:62:69:65:f0:9d:85:92:bd:a2:14:
d1:f8:9f:77:d1:f0:fc:4b:dd:57:87:52:0d:03:d9:
9f:b5:17:d7:60:52:02:63:c9:4c:85:92:c2:45:8c:
f9:86:3d:48:ca:76:40:4b:90:7e:bb:73:65:6d:40:
05:ea:8a:bd:cd:28:d8:ed:49:e2:f9:17:c8:80:fd:
fd:a9:ae:4a:3d:19:17:e2:da:db:ac:1a:1b:28:10:
57:6c:e2:59:26:bb:9a:ba:ef:e1:e2:7a:59:b3:be:
8a:2d:69:b9:93:35:f6:a3:fd:26:59:86:e6:aa:20:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:DB:B2:E8:42:B0:D2:00:61:04:14:51:80:36:BD:D8:D3:67:14
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:a5:b0:05:d5:7b:77:17:4c:91:6c:ad:67:58:89:24:22:
3c:c5:61:06:a9:2c:0f:03:c6:d0:dc:03:2e:e3:9b:ca:d9:f0:
b1:cb:55:02:f7:10:c5:6d:47:24:70:19:e1:15:b7:34:1d:f3:
3c:ab:35:fd:04:07:37:5a:48:38:94:8c:47:cd:15:0b:35:02:
c7:9d:21:46:e0:a9:b9:88:81:30:b4:ec:a6:8a:d9:2d:aa:ab:
31:eb:aa:95:e1:bf:4a:23:dd:7f:c1:6c:a6:99:0d:55:c8:50:
42:a0:86:da:4d:71:95:f4:68:fd:a2:03:56:aa:8b:3c:07:0d:
41:00:26:5b:92:89:c6:34:f9:e6:d2:42:f6:4e:9c:e1:ea:1e:
b5:2b:18:2f:7b:64:58:e7:b3:a5:3b:7e:7b:9a:82:f5:5e:48:
c5:61:c2:25:1a:81:4f:34:e9:79:c1:e5:55:63:57:3d:35:d0:
1c:60:a9:c6:e3:81:0e:7e:bb:5c:c5:b0:8c:fc:80:41:2e:3b:
45:47:30:23:10:e5:e5:c1:9a:4c:49:d7:4b:aa:3f:bb:e2:96:
58:9c:5e:67:ae:93:f1:6f:41:18:46:f2:8b:2f:05:f2:02:30:
2c:16:89:93:8b:2e:89:ce:d5:49:e7:1f:89:b4:80:5f:1e:97:
fc:53:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:41 2026 by rpki-client