
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json)
Hash identifier: udCINMJK7prBUe7d/YTfYHEsXMEGfeCaxNyg5Qoztxk=
Subject key identifier: D9:20:DD:DC:A4:B7:53:F7:76:23:23:CD:80:C5:B3:BA:42:4F:7D:EA
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
Manifest number: 07B9
Signing time: Mon 02 Mar 2026 00:48:06 +0000
Manifest this update: Mon 02 Mar 2026 00:48:03 +0000
Manifest next update: Mon 09 Mar 2026 00:48:03 +0000
Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: vbIKE3ZxBeCc8Ja5AImvzRzB2w3N6gbGobkn9cJxEtU=)
2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: Nqf4hrafumWk1QomT3Eyu5REn5mnaQ8v2Ft+DiTAP7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Validity
Not Before: Mar 2 00:48:03 2026 GMT
Not After : Mar 9 00:48:03 2026 GMT
Subject: CN=69a4de45-226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:4a:8c:48:6b:5d:cf:2d:19:f5:42:95:fd:
96:d2:42:2b:a7:85:04:e0:45:a9:59:9f:4f:e4:2e:
1c:a2:3f:65:ca:1e:be:14:e4:4d:d2:87:9e:30:6e:
e6:1e:f0:e5:2b:82:24:ab:c6:16:12:9f:05:d8:9a:
90:13:01:cf:52:e1:c6:fc:f5:42:10:6b:fe:7b:08:
ed:3f:3a:eb:dc:54:88:8a:01:86:7a:d7:a4:d2:49:
1d:c8:34:53:04:72:d7:72:fc:17:5b:9b:04:f0:4f:
23:57:b6:87:99:e0:60:0d:8a:cd:7b:d5:6e:dd:fe:
66:6a:64:f9:75:32:ef:e3:cd:d2:21:8b:14:64:45:
53:7e:0a:30:65:5e:37:8d:0e:ec:0e:c3:65:ea:6d:
d7:74:64:43:38:da:fc:5b:7c:44:ab:7c:94:0c:c4:
58:68:cb:17:05:34:0d:46:ff:08:28:04:aa:90:dc:
94:f7:0b:21:7d:a2:b9:55:5a:a2:b0:76:79:96:6a:
f1:dc:fe:19:4d:92:04:f5:4b:59:b5:39:21:5f:78:
51:b5:55:52:a6:a1:d9:13:d0:4f:70:2b:e6:f3:80:
e5:18:00:40:98:1f:cd:10:61:c8:87:40:fb:53:4e:
95:44:07:32:e5:f9:2b:ca:6c:3c:43:c0:72:8c:8b:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:DD:DC:A4:B7:53:F7:76:23:23:CD:80:C5:B3:BA:42:4F:7D:EA
X509v3 Authority Key Identifier:
keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e9:ad:00:c3:a6:79:46:5c:4d:c0:6d:97:8f:70:ec:18:91:
57:3e:99:ec:e4:be:de:15:23:eb:46:bc:fc:9a:62:d5:6f:3e:
6c:ea:7b:fb:92:da:a2:09:2a:fc:18:b6:8c:b2:99:01:db:c3:
e0:8a:e2:58:3d:14:77:8d:ff:12:b5:b9:f1:94:a1:a3:47:6d:
83:38:db:2f:c5:12:b9:2c:85:9b:97:6e:82:bb:9e:ca:c0:98:
94:be:99:ff:4c:7c:0e:c0:55:5f:07:98:11:6c:1c:db:1a:31:
00:12:ca:ed:6f:2d:f0:c9:a5:d8:41:0c:70:d5:ef:d2:7c:bc:
e7:f2:d1:60:dd:84:13:f9:db:cf:ef:83:e5:b0:d4:7b:9a:f4:
7b:39:61:85:ef:62:f3:a1:ce:15:4d:b9:7e:b4:4a:d9:58:cf:
de:95:c1:0c:09:29:d4:19:42:77:29:b1:ce:42:da:d3:9d:83:
a8:3d:96:60:9a:65:2c:65:08:3a:23:c2:bc:5d:9c:b9:9a:80:
de:33:b0:97:79:03:23:73:ed:c0:f9:36:c9:8c:67:11:a3:04:
6e:3d:e5:7b:4d:ad:6c:b2:fa:c4:91:66:2d:1b:5a:bd:2c:4d:
48:15:45:3b:ab:96:e3:0b:31:9e:df:4e:59:76:9d:34:4b:74:
27:12:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:00:05 2026 by rpki-client