
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json)
Hash identifier: 0cVl4Cz9ew+dCZc0MF26HlJ+k3P0t8/lZ+qnxMZjPOk=
Subject key identifier: 41:1A:95:20:3C:CF:DA:B4:DA:55:26:AE:6F:D9:73:1A:C2:F2:51:12
Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 09:29:40 +0000
Manifest this update: Sun 01 Mar 2026 09:29:39 +0000
Manifest next update: Sun 08 Mar 2026 09:29:39 +0000
Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: GBey+TrZxsuS0BYl7qMN5GUi8PsAkh0EfhZaozU2DsI=)
2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: H7bTNR9e6JUVDLggIpGg5EM1qrYQVGxo8ckcLbi2lxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Validity
Not Before: Mar 1 09:29:39 2026 GMT
Not After : Mar 8 09:29:39 2026 GMT
Subject: CN=69a40704-97af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:38:f5:d4:b7:93:a7:f4:26:1b:83:ab:88:
9e:50:71:2a:aa:d3:e8:0d:c9:0a:b3:0b:1f:e1:08:
40:c3:a0:dc:fc:86:c1:2f:8e:ca:7f:66:f8:87:4f:
44:da:b7:58:97:9e:7d:00:55:bf:a3:9a:5b:96:e7:
bd:bc:10:c1:b4:aa:d9:02:91:da:1c:fe:30:8b:bf:
ee:92:f2:74:bc:fa:ec:80:68:7e:f2:6a:57:7b:f3:
33:4e:3a:6b:94:33:f4:e3:ba:e8:90:29:91:ce:a3:
5d:a7:6f:a1:d4:57:4a:f5:f1:4d:71:d4:99:c9:ab:
03:a9:4a:a7:b6:d4:88:27:be:5f:5f:8f:4c:36:bb:
34:9e:c7:e9:df:63:3c:81:d6:7f:d9:56:90:84:61:
ba:48:a2:bf:26:2e:95:4a:b8:b2:6b:b4:df:5a:cc:
2f:6f:e2:9b:1b:1d:97:01:87:d8:c8:9d:de:4c:91:
6a:58:cb:f0:ab:3d:20:ab:75:00:50:a7:87:ee:b0:
4a:40:28:01:98:ef:76:f1:af:4c:e2:a8:67:d5:78:
94:8a:9e:2e:bd:9f:5f:84:81:56:e7:4c:dc:8a:47:
d3:19:22:8f:c6:57:9d:36:30:74:60:4d:17:8b:34:
f6:03:55:e2:cb:69:98:7c:3a:5c:5a:c0:09:82:86:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:95:20:3C:CF:DA:B4:DA:55:26:AE:6F:D9:73:1A:C2:F2:51:12
X509v3 Authority Key Identifier:
keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:12:40:99:2c:c2:d6:81:6b:56:9c:1e:66:f9:ff:de:16:
10:65:02:bc:09:9b:00:08:4f:c1:af:39:40:bf:f0:ba:78:c5:
ff:16:f8:3b:00:31:7e:68:88:dc:1a:e4:2e:64:97:4e:74:ed:
0c:be:1f:19:27:e4:4a:3e:39:da:fe:d8:f8:2f:48:d8:bb:e5:
28:d9:ef:fe:e1:b9:0c:7e:d3:8b:b5:9f:16:d4:7a:d6:9d:87:
0c:bc:81:5e:4e:c8:e7:55:79:e6:6e:b5:50:b5:ec:6a:88:f7:
81:a7:29:8f:6c:d7:07:ea:26:01:57:35:37:9d:a4:3b:31:a2:
cb:1b:83:29:34:fb:64:36:65:37:2c:82:1e:7d:cc:dd:73:b6:
27:c8:25:70:d8:ee:84:92:1d:e8:93:07:eb:87:6b:02:ee:47:
fa:68:1c:11:65:7e:3f:b3:34:84:88:2c:ba:78:4e:bc:2f:fb:
4d:c9:9a:78:a3:e1:e3:33:1c:c9:c1:90:91:a9:ce:de:12:76:
bb:2d:5c:64:6c:3e:a5:9e:c6:a6:80:ab:bb:ca:73:47:b3:a8:
e2:db:c4:4e:e8:f3:2f:80:1b:53:18:57:d8:3f:2f:58:41:4b:
fd:92:a6:4a:b0:f9:c3:bb:66:21:8f:f4:f3:53:32:7d:71:63:
10:8a:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:48 2026 by rpki-client