
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json)
Hash identifier: DwmI/ASwEWkL0A2lnBRId5mUxpVoek8GfI8YyjYCIA0=
Subject key identifier: 0A:F4:2B:1C:3A:A1:64:2B:83:58:C6:14:24:63:2D:4C:BA:05:2B:66
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
Manifest number: 59
Signing time: Sun 01 Mar 2026 09:33:35 +0000
Manifest this update: Sun 01 Mar 2026 09:33:35 +0000
Manifest next update: Sun 08 Mar 2026 09:33:35 +0000
Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: 1dv5wQTZSKfkS7rNMEWnXWTM79vf7/+w+VOhwQWiW6k=)
2: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: V/ROTYiAWlfDNKJDyzimGDSU/zV095uMCoZBm78i66s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Validity
Not Before: Mar 1 09:33:35 2026 GMT
Not After : Mar 8 09:33:35 2026 GMT
Subject: CN=69a407ef-267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:ff:21:12:e4:64:16:85:fb:1f:0b:27:4a:
fd:e2:37:a2:3c:e0:f1:ef:e9:dd:d7:cc:71:5d:fc:
73:59:1b:f3:d7:c5:03:fb:b6:04:e7:91:5f:f8:30:
6b:bc:e4:4f:ee:84:ef:e7:dd:04:98:64:60:40:62:
bd:47:62:8f:23:09:84:b2:a3:0d:8f:3b:0e:c5:8c:
b9:d5:71:2c:92:39:1b:a5:98:53:ae:5e:ff:d6:06:
fe:92:2b:9c:d7:d2:8f:e1:6d:b5:03:76:cd:76:ce:
61:a8:9c:c8:82:99:1a:17:ab:bb:5f:a0:f5:0b:c0:
bd:ee:ca:53:f3:1a:ed:95:f6:ad:dc:a1:51:08:1d:
82:8a:e6:76:5c:7d:3c:e4:23:d6:5b:d0:ad:4f:be:
98:da:c1:e6:2e:3b:9d:02:41:3e:23:35:1b:e0:a4:
d7:94:1d:79:cd:9d:37:09:ca:09:c8:ef:70:11:d1:
f5:60:22:c6:6b:37:fa:bf:21:eb:d1:33:da:a7:7a:
71:0a:ed:c7:26:fe:d3:7a:df:27:1f:d6:71:7b:04:
8d:2d:fa:8e:81:60:16:3b:ca:10:ec:bd:7c:e0:1e:
37:6c:75:79:16:96:2e:2c:41:c7:cd:b3:64:3c:fb:
e5:46:0e:17:ef:ff:e2:f6:a7:98:7d:e8:6b:87:8f:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:2B:1C:3A:A1:64:2B:83:58:C6:14:24:63:2D:4C:BA:05:2B:66
X509v3 Authority Key Identifier:
keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:72:c9:50:74:ff:5c:7b:33:28:6d:77:59:b1:67:80:e6:
c5:b7:c6:6c:cd:70:bb:1c:11:8e:8a:13:9d:91:f8:29:8d:7f:
e2:1c:b0:2e:80:5f:58:29:56:41:55:f7:6f:81:a4:95:fd:66:
4e:35:91:6e:ee:23:ee:41:bb:7d:de:61:40:b8:18:b3:96:32:
07:4d:f0:6d:77:ee:10:39:87:e0:82:ff:f9:c6:58:ba:ba:59:
a6:da:da:9b:81:fa:a1:29:64:ac:96:01:fc:f9:9d:8b:2d:74:
ab:8d:c8:98:d3:7a:5e:79:f6:77:fa:2a:3e:b8:5a:f6:06:c7:
a1:25:71:4f:07:6e:81:97:9e:ed:a1:7f:5c:7e:3d:e3:fe:c5:
0f:14:d4:ed:ae:b1:bb:b2:0f:56:0b:fb:e5:3e:00:36:b5:23:
42:4e:c4:96:e6:71:be:5d:69:aa:37:59:85:c9:c2:65:55:4b:
8a:88:4a:04:62:f9:ac:43:f7:3b:91:c6:e1:53:46:7a:f0:d4:
58:e3:f7:d2:c5:03:d5:ff:48:cc:d6:5d:f1:13:38:d4:15:e4:
50:81:ef:dd:95:1a:9a:c1:ec:1d:a4:bc:a6:70:d2:fd:4a:bf:
0b:a5:99:86:80:01:91:9b:82:f6:79:74:db:c8:71:b0:9b:68:
f9:bf:a6:48
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NTcyNzExMC8GA1UEBRMoREU2Q0RBNjlBQjFBQzg5QUU3NUY3NjVDRTc3MjczRTEx
QjdGRDY3RTAeFw0yNjAzMDEwOTMzMzVaFw0yNjAzMDgwOTMzMzVaMBgxFjAUBgNV
BAMTDTY5YTQwN2VmLTI2N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgEf8hEuRkFoX7HwsnSv3iN6I84PHv6d3XzHFd/HNZG/PXxQP7tgTnkV/4MGu8
5E/uhO/n3QSYZGBAYr1HYo8jCYSyow2POw7FjLnVcSySORulmFOuXv/WBv6SK5zX
0o/hbbUDds12zmGonMiCmRoXq7tfoPULwL3uylPzGu2V9q3coVEIHYKK5nZcfTzk
I9Zb0K1PvpjaweYuO50CQT4jNRvgpNeUHXnNnTcJygnI73AR0fVgIsZrN/q/IevR
M9qnenEK7ccm/tN63ycf1nF7BI0t+o6BYBY7yhDsvXzgHjdsdXkWli4sQcfNs2Q8
++VGDhfv/+L2p5h96GuHjzjvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCvQrHDqh
ZCuDWMYUJGMtTLoFK2YwHwYDVR0jBBgwFoAU3mzaaasayJrnX3Zc53Jz4Rt/1n4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzI3LzI1NDMyNDRDOTIw
NzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFu
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM216YWFhc2F5SnJuWDNaYzUzSno0UnRfMW40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1
NzI3LzI1NDMyNDRDOTIwNzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpy
blgzWmM1M0p6NFJ0XzFuNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBp2XLJUHT/XHszKG13WbFngObFt8ZszXC7HBGOihOdkfgpjX/iHLAugF9YKVZB
VfdvgaSV/WZONZFu7iPuQbt93mFAuBizljIHTfBtd+4QOYfggv/5xli6ulmm2tqb
gfqhKWSslgH8+Z2LLXSrjciY03peefZ3+io+uFr2BsehJXFPB26Bl57toX9cfj3j
/sUPFNTtrrG7sg9WC/vlPgA2tSNCTsSW5nG+XWmqN1mFycJlVUuKiEoEYvmsQ/c7
kcbhU0Z68NRY4/fSxQPV/0jM1l3xEzjUFeRQge/dlRqawewdpLymcNL9Sr8LpZmG
gAGRm4L2eXTbyHGwm2j5v6ZI
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:50 2026 by rpki-client