
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: 2Inq7FhncmNMPKANR9Rk9SfTOigZ4fuJwtVbhsOmFkQ=
Subject key identifier: 97:19:07:EE:C0:B5:D0:42:A9:51:DD:8A:6B:08:0B:90:43:D4:B9:43
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 0229
Signing time: Sun 01 Mar 2026 04:13:47 +0000
Manifest this update: Sun 01 Mar 2026 04:13:46 +0000
Manifest next update: Sun 08 Mar 2026 04:13:46 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: zMHuKbRHRudDGlgxTCc+Iphf74klv0/FFou647+P4gI=)
2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: MOCyDx3MMCgJ0iKiHYJPId15Yf0kFHcGhSay9PLqfd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Mar 1 04:13:46 2026 GMT
Not After : Mar 8 04:13:46 2026 GMT
Subject: CN=69a3bcfa-3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:dd:bf:4c:ae:8a:5e:dc:c0:94:a0:d7:ba:
76:1b:06:66:38:1f:ae:2f:90:8f:3f:c8:50:a8:a2:
5f:b0:ab:e1:c0:f9:40:75:ba:9d:e6:05:5a:6d:41:
f5:3f:22:01:65:32:87:bf:0c:00:02:8f:ad:af:f1:
ce:c4:4a:91:47:13:59:5b:c1:88:d5:96:ce:09:25:
00:1c:49:d3:ed:25:98:42:9e:c8:ed:fc:ef:c3:ea:
b3:3e:71:fa:c6:b9:79:c1:b3:1e:dc:ed:d8:a4:f7:
15:00:b3:c0:25:47:8e:3c:83:61:13:10:d9:9c:da:
14:a1:56:e9:d0:e8:f6:81:aa:5a:2b:88:98:8d:24:
05:97:f3:e9:5f:cd:84:5d:4b:6a:49:f4:47:93:a6:
1f:0e:f2:44:57:ef:01:3c:d9:ba:22:29:aa:03:94:
06:8d:2f:43:27:ef:9b:a7:e9:ac:9f:72:7e:c8:38:
c8:63:57:bd:67:3f:de:1e:00:84:c0:60:21:0f:c9:
26:28:7a:3c:65:fe:f0:7b:b3:66:4e:86:25:64:4a:
28:6e:a8:16:68:4f:18:41:4b:d3:c4:17:4f:8a:ca:
3e:57:0a:25:ea:3c:12:48:d6:e4:6a:7c:7d:33:44:
90:57:3d:69:b9:18:15:e7:33:ac:8c:fa:e9:e8:d1:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:07:EE:C0:B5:D0:42:A9:51:DD:8A:6B:08:0B:90:43:D4:B9:43
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e5:db:95:77:dc:cd:97:cf:c6:1c:24:97:2d:56:87:f1:0b:
ba:eb:af:ee:5c:35:cb:1b:58:7d:96:69:86:e7:65:81:ba:94:
59:2c:74:35:a7:34:6f:d8:7f:53:e7:8f:50:10:54:6a:91:35:
2e:90:6d:c9:41:3d:96:21:d8:67:ff:5d:c9:1a:23:f1:27:9e:
dc:ad:59:37:26:f5:37:d3:6d:da:d3:3b:87:e1:83:9b:05:45:
fd:49:63:62:82:c3:d5:9b:28:b2:b7:34:a3:2b:be:63:c4:92:
82:4e:93:3c:7d:cd:cd:89:8f:2c:54:06:59:cf:9f:9d:e1:e4:
48:8c:cf:33:14:22:0c:5e:6c:e6:b5:ad:ee:2e:18:f1:1b:80:
69:22:de:7a:44:f0:5e:ee:46:ca:fc:d9:73:1a:17:55:73:e8:
c5:07:75:4a:ed:3f:02:17:6c:52:24:86:8a:b7:51:9c:1a:da:
ca:15:2b:4f:78:60:5d:47:c2:27:e4:66:1d:c0:51:f4:b6:7c:
ee:0a:3f:67:07:e2:49:91:b9:f3:08:2d:a3:09:ae:06:2c:a5:
b7:db:47:68:94:53:4b:de:be:5b:d4:b2:6f:0d:4e:2e:ae:19:
51:7d:64:bd:b6:60:27:15:30:24:9e:35:da:d0:8d:60:ec:01:
18:64:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:17 2026 by rpki-client