
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier: GgJcF9GoXKuy1rPd/K1oljVWelG+dtZy8y3N0X7Pyjs=
Subject key identifier: F1:A2:F7:27:D0:68:01:C7:C1:BF:30:C3:17:5B:E5:35:45:BF:DB:3E
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number: 60
Signing time: Sun 19 Apr 2026 07:35:42 +0000
Manifest this update: Sun 19 Apr 2026 07:35:41 +0000
Manifest next update: Sun 26 Apr 2026 07:35:41 +0000
Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: xAC17mnCEjthBhB2Nl+sJmrUf+iG+LVXoE+UA0ctmw4=)
2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Validity
Not Before: Apr 19 07:35:41 2026 GMT
Not After : Apr 26 07:35:41 2026 GMT
Subject: CN=69e485ce-dfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:a8:5a:1a:67:a4:eb:f6:d7:b7:27:10:b7:
98:7b:5b:63:60:e4:b3:97:0b:d1:ec:2f:1f:30:ed:
c9:6a:5c:dc:22:08:a7:f6:24:0b:ea:37:84:d0:ab:
40:fe:30:a7:d1:d1:29:06:e3:0f:5a:89:85:5d:eb:
90:71:19:19:6c:80:06:2d:e2:56:33:af:36:ba:fd:
8c:b0:21:65:31:bd:b2:96:11:00:04:33:b8:53:7f:
3c:05:90:04:f2:2f:ac:4a:38:b7:51:fb:44:9e:09:
73:e4:85:c5:30:9b:59:88:80:5a:c9:82:a2:83:91:
3a:20:6b:a4:15:8a:46:75:96:80:e1:6a:da:be:91:
97:76:4c:0f:b7:53:d0:0e:68:54:4c:62:52:cd:5b:
45:d4:e3:0e:a1:98:d7:8d:60:0e:a0:90:51:bb:4e:
70:e3:e5:da:3f:32:1c:87:60:9b:d7:52:32:d5:0b:
b9:0c:97:88:39:9e:55:ef:5c:7c:6a:a3:bd:63:16:
13:f6:d7:21:a6:7e:a6:26:cc:b8:2c:9a:ed:50:58:
d9:21:d6:31:32:81:5f:4c:97:f5:b5:c6:b3:1a:b4:
84:83:db:05:a7:54:46:f4:47:c0:c9:59:3b:da:00:
9b:23:7c:de:43:9e:32:a4:5c:5b:a8:ba:64:c0:ac:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:F7:27:D0:68:01:C7:C1:BF:30:C3:17:5B:E5:35:45:BF:DB:3E
X509v3 Authority Key Identifier:
keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:97:c5:20:ee:bb:3e:e6:bd:75:c7:3d:bc:2c:20:22:62:ee:
7f:e8:93:f7:75:a1:5d:46:21:50:e5:dc:9d:31:c4:6d:66:78:
63:d4:c5:c6:79:24:bf:64:b7:b4:bf:30:bd:99:5e:38:89:a5:
ca:fa:fe:55:02:f0:29:10:44:67:e3:58:29:a8:d5:be:f5:c3:
e9:d6:3e:6c:fa:3b:12:a9:8c:fe:36:38:2d:71:a0:ac:73:54:
40:19:0b:20:52:af:5a:78:fb:4f:38:ea:86:b5:09:0a:9b:af:
5f:44:99:51:6c:7b:74:c8:d3:a6:aa:5c:82:3b:f5:12:61:e1:
19:36:65:92:11:f7:82:76:48:af:b9:52:ac:e2:26:f3:2c:d6:
35:ea:df:dd:cd:ba:56:2f:60:86:2d:71:a6:6e:72:f1:26:0a:
b9:e2:ec:55:a3:27:fb:83:5c:13:5e:32:c6:19:59:15:7e:02:
04:f1:55:87:6d:91:a5:e6:63:fe:7d:0b:d5:b0:ec:d3:a1:0c:
e4:df:f0:b8:03:a3:16:87:8d:4e:fa:9b:38:3f:b3:81:d5:e1:
71:7e:71:f4:f3:8f:05:62:a9:38:6f:cb:43:93:e3:f0:c4:c4:
99:4a:06:70:ce:29:42:21:bb:05:e7:f5:a7:13:fc:d3:c6:d6:
1c:cd:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:18:51 2026 by rpki-client