
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier: ynHvr1P3by/cQanbyQsIAu54AlozUpJhGzwyy5zGbew=
Subject key identifier: 65:8D:58:E2:D4:7E:16:2A:7E:0D:84:44:D8:AB:90:9F:C6:B3:32:89
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number: 014A
Signing time: Sun 01 Mar 2026 06:10:22 +0000
Manifest this update: Sun 01 Mar 2026 06:10:21 +0000
Manifest next update: Sun 08 Mar 2026 06:10:21 +0000
Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: Jz6/+3fir3x14um4Fr/HYff6R37fISdTWgr7MDLFr2g=)
2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Validity
Not Before: Mar 1 06:10:21 2026 GMT
Not After : Mar 8 06:10:21 2026 GMT
Subject: CN=69a3d84e-96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:db:d3:c2:93:8e:34:cc:82:91:f8:bf:e1:
82:7a:fa:4b:11:18:36:96:b6:f4:d5:e5:2e:64:fd:
c4:fb:de:a7:b1:8a:25:6b:56:be:c3:88:d7:a9:42:
c7:69:17:f9:bb:e3:e2:6a:27:2b:ed:7d:9d:3c:92:
25:0f:85:f3:75:2f:49:41:1e:ae:6f:47:87:1a:85:
dc:a6:7c:3c:2b:64:36:f2:2b:aa:9d:01:ad:dd:cd:
53:68:84:27:1b:68:40:21:c2:12:1d:ef:2d:ed:ee:
24:79:bd:b1:54:20:0c:79:59:91:81:b0:96:27:5c:
34:e5:3f:9e:05:4a:c2:99:d2:aa:f7:e6:f1:20:ba:
39:cb:8c:e5:57:61:be:ac:48:24:b8:5e:3c:52:b8:
b4:bb:58:7d:65:85:2a:13:35:43:1e:eb:80:db:2a:
81:32:a6:61:8c:87:1a:0e:96:07:d4:77:48:84:bb:
bf:85:88:33:a2:8f:65:40:fa:aa:84:63:1e:5a:5f:
24:b5:a6:2a:00:10:b8:c2:3d:54:ee:2f:ec:ae:72:
b3:06:bf:29:fb:3b:44:d9:3a:be:c9:d0:95:d8:9b:
a7:0c:ac:06:11:f1:fd:5a:f3:19:bf:79:84:97:2d:
93:cf:4a:c9:60:ba:e1:ed:8a:34:33:09:02:e5:8e:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8D:58:E2:D4:7E:16:2A:7E:0D:84:44:D8:AB:90:9F:C6:B3:32:89
X509v3 Authority Key Identifier:
keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d5:e8:fe:1b:56:5c:b9:d9:45:a6:75:45:73:f0:51:d2:65:
bb:c7:fb:a6:9b:9c:42:61:34:d4:d0:3b:ca:63:f4:98:9b:60:
95:7c:0e:0f:26:d6:43:44:d1:b5:55:50:4a:e6:c6:ac:83:a7:
80:44:e5:23:f6:c9:09:37:f9:02:39:a6:a0:6b:f8:e5:de:4e:
f3:8e:4c:78:f6:3a:3a:48:9a:d9:d9:fa:7b:22:76:dc:1b:27:
9a:3c:0d:19:c7:3c:80:fb:d0:37:69:62:0c:4e:a1:a9:5d:ff:
c1:38:b2:97:23:9a:e5:80:67:bd:9e:40:ed:64:a1:61:1c:08:
83:10:68:e1:de:72:eb:78:78:a0:3b:1b:db:3f:94:bd:04:6a:
3e:8f:4a:2e:76:f9:52:fb:50:c9:02:77:49:22:db:9e:2e:99:
41:88:af:54:78:a9:ec:bd:45:51:d3:ab:3f:f0:6c:fa:ac:e3:
1b:a2:f6:55:64:a2:88:3d:75:ac:a2:20:20:20:2b:40:09:74:
cb:4e:03:ce:69:e8:4c:34:f3:fa:6f:47:0b:21:13:17:ef:07:
9a:12:07:32:54:cd:61:21:22:b9:d7:1e:bb:71:6c:b0:97:fa:
77:43:b0:47:56:1d:0c:65:de:24:8a:da:26:3f:0b:11:43:58:
a1:5d:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:50 2026 by rpki-client