
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json)
Hash identifier: 0zqmvv2sSQb1mJSuxGi4u4t5t9rER0+p5trnWcTWlYg=
Subject key identifier: 84:A2:DF:06:77:66:75:D5:15:E4:59:F7:60:6C:C3:43:A6:8B:02:F2
Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
Manifest number: 052D
Signing time: Sun 01 Mar 2026 00:08:29 +0000
Manifest this update: Sun 01 Mar 2026 00:08:29 +0000
Manifest next update: Sun 08 Mar 2026 00:08:29 +0000
Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: l8l6ee3rAXModNOSFpZmXYlas+a6Hv+M2ZyCFN3wmDA=)
2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Validity
Not Before: Mar 1 00:08:29 2026 GMT
Not After : Mar 8 00:08:29 2026 GMT
Subject: CN=69a3837d-66bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:d7:f8:08:12:f9:80:58:dd:7c:c0:09:a0:
c5:a5:3f:72:90:4d:56:ec:14:c7:18:cb:04:3e:62:
96:a1:23:a2:f1:d7:57:f9:0a:4c:a5:76:a0:4e:22:
ad:39:7a:a3:dc:a4:21:22:0d:ed:3f:11:12:5f:42:
7c:5e:a8:1f:fb:c9:4c:fb:3c:6f:1d:bf:b9:15:48:
dd:2b:0f:a1:4f:0c:1c:93:28:43:bc:69:10:e7:5d:
45:17:00:10:3a:ca:82:82:6b:13:0e:8e:ee:e4:b9:
a7:74:59:1d:41:69:a8:ac:45:c1:64:32:50:f5:6d:
98:8d:87:ac:9d:36:14:17:77:8e:e8:90:0a:26:b9:
65:3a:08:7b:6d:1e:08:e9:99:87:af:5d:f9:e0:50:
f5:1c:10:7e:b0:57:50:e6:44:99:be:7b:85:ca:c3:
33:51:ac:6b:62:3a:5d:06:03:87:c6:d4:42:6d:45:
77:57:05:63:94:92:5d:87:10:b6:b5:81:3c:69:f1:
48:dc:f7:d6:e7:3a:32:55:38:c7:ab:07:50:5f:23:
28:6d:08:b5:f4:bc:65:a4:48:0c:8b:03:3a:a8:c8:
cd:4f:0e:61:b4:67:21:82:3e:c1:af:d0:e2:ce:fc:
5a:dc:d9:d9:58:70:d2:08:1b:77:01:5f:22:89:67:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:DF:06:77:66:75:D5:15:E4:59:F7:60:6C:C3:43:A6:8B:02:F2
X509v3 Authority Key Identifier:
keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:9f:0e:73:a4:6f:52:29:34:cd:19:f4:ae:5f:5e:20:04:ef:
47:02:d5:fa:ea:22:f9:41:96:70:50:b6:1e:49:13:e2:ef:15:
32:2b:32:85:60:7d:3d:6d:6b:b5:59:0b:b8:97:5c:0d:6d:84:
1a:a8:e9:62:08:19:24:a4:30:c4:7b:3d:44:cc:ea:1a:a3:cb:
72:97:c5:5b:9a:91:ad:ea:fa:01:75:99:93:81:57:09:67:ce:
2c:8f:d4:03:82:bd:fd:3c:14:34:5e:68:02:cd:88:da:e3:f7:
6c:2e:36:da:00:dc:0d:72:49:1f:5d:48:7b:d2:ff:b9:a5:51:
df:61:c5:40:11:09:00:18:1e:50:08:2e:84:81:d1:6a:d0:b5:
f9:65:99:d6:25:51:fa:0a:80:5e:0f:1a:a6:7d:04:bc:fd:0c:
43:b7:0b:a9:fc:56:52:a1:05:1c:9e:59:2b:ab:a6:57:8e:20:
a3:64:87:ab:a8:c6:0e:6d:3e:93:ff:98:be:f9:a5:ff:45:1d:
0f:fe:89:80:83:b9:82:e9:b2:ab:a5:84:ad:95:3a:22:6b:d4:
c7:e3:13:44:5e:53:1a:d3:89:a9:4f:ac:88:c0:6b:9a:73:d0:
0b:ad:0c:f5:48:48:25:00:11:92:c9:ff:a9:ce:9a:2f:e4:e5:
6d:8a:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:04 2026 by rpki-client