
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File: v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier: HYCRhPZRplFrMQR+foVQIiDAAy44rpXGB6rpO6MhNoU=
Subject key identifier: 26:B5:50:91:91:5A:D6:FD:AE:94:99:17:2E:28:FD:9F:0C:1E:A2:E9
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number: E1
Signing time: Mon 02 Mar 2026 02:36:16 +0000
Manifest this update: Mon 02 Mar 2026 02:36:14 +0000
Manifest next update: Mon 09 Mar 2026 02:36:14 +0000
Files and hashes: 1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: 97SaJeSTvdfZtXyGKjPwi0++MEllVgJfyXQ5Nugi1f4=)
2: 2A7B4C14C51511F0B6CAF70BC4F9AE02.roa (hash: 7ocVSkJLMfumreyRimFvvrUkd5e8I9F7QO2kr8uE2Oc=)
3: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (hash: jyVb2J10ghDTNiboflhNHqzohuklyhcVSq+ScQxlKA8=)
4: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: tH5QdrM5BI7YZdCrU5OOkkE/5lDxC/6rAyyrjtobnT8=)
5: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: ZmtqXPmveCIw89AweUHmN7kqo0fmi3wDzva2kCjXnFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Mar 2 02:36:14 2026 GMT
Not After : Mar 9 02:36:14 2026 GMT
Subject: CN=69a4f79f-52c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:b0:d5:1c:3b:0b:b4:cb:75:19:a4:41:61:
0c:a7:90:91:4b:c4:15:37:d3:7e:21:2f:d2:e9:82:
1f:9e:01:11:f2:32:7d:1c:ff:1a:77:72:c1:fb:9b:
c4:a5:1a:78:80:75:42:7e:eb:5c:cb:3d:0b:ac:06:
f9:7f:6c:20:dd:d7:95:6c:ff:6d:ef:57:a1:98:f6:
f9:8a:ba:a0:a1:ee:52:30:3f:e4:a5:05:7a:2e:59:
cd:86:bb:04:45:32:bb:de:90:b7:da:e3:9e:b7:67:
58:b8:f7:f1:f5:64:e6:e7:de:63:4c:c0:eb:00:3c:
fd:86:72:5f:74:b4:61:50:d2:70:ac:32:10:9f:b3:
06:09:b2:65:a7:7d:cb:3f:15:ef:51:f8:32:7a:d1:
35:f6:8b:45:8a:dc:98:32:3d:96:a3:86:5b:5d:82:
62:37:d9:20:70:c8:79:e0:13:b0:e4:06:9b:a1:61:
5a:84:b6:46:e4:d6:39:38:35:f9:03:41:6e:19:a7:
7d:f1:87:45:e8:72:ce:a7:f0:c8:66:ef:c1:e1:c7:
0c:47:1c:04:d7:3c:d4:09:fd:ed:c8:ef:9b:fc:1a:
64:4a:03:56:73:78:8c:8a:40:00:6a:eb:60:a9:7a:
d5:1a:97:ac:af:09:4e:9e:60:e7:4a:cf:ac:f9:56:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:50:91:91:5A:D6:FD:AE:94:99:17:2E:28:FD:9F:0C:1E:A2:E9
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:78:f9:08:7b:a5:4e:67:52:a5:6f:e0:9f:a1:9b:39:8a:d1:
03:41:77:03:b9:93:70:f3:e1:cc:7c:47:9b:16:9e:d1:fa:59:
5a:cb:b9:88:93:c3:8c:4a:5d:d3:6c:11:c9:35:18:0a:29:f3:
0f:bc:86:c4:6e:94:c8:c4:a9:ee:c6:62:e1:89:b9:e7:51:2b:
e9:2c:44:75:6b:e9:db:c8:53:b8:98:93:3b:57:ed:c2:fc:c8:
33:49:b5:20:de:ed:f0:1b:8c:41:9b:95:33:cf:b2:dc:72:82:
4b:c0:d1:0e:10:ad:d4:c9:34:28:0b:b7:e7:57:21:c6:9c:5e:
25:ce:51:91:de:8c:91:8a:ba:f8:f1:5e:e1:2c:f4:ec:4f:d6:
c7:2a:2c:10:8c:3e:9b:c7:19:ed:35:3d:15:35:e2:7c:c7:1b:
77:3e:81:1e:1d:77:f8:b9:ba:3c:19:aa:88:df:e3:02:47:0f:
b5:a6:d6:5b:1b:15:88:81:5a:d6:16:18:43:a7:48:4e:6b:a3:
0f:c2:90:74:22:e2:7e:5d:07:68:e7:a6:36:f2:4d:6a:3f:9a:
9e:34:8e:e3:f1:85:81:c8:f2:90:85:b9:00:2d:17:23:af:52:
ef:64:11:a9:05:0b:ae:7e:f4:a9:93:65:d3:75:d0:b8:94:61:
73:42:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:07 2026 by rpki-client