
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json)
Hash identifier: +Impx1TxSSlazdr8RmiVpYa6ToQ3em+5QqX8luYrnNE=
Subject key identifier: 50:C5:4A:0C:C2:51:1D:4F:96:FA:CA:49:00:B9:AE:DB:91:07:0B:86
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial: 0CE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
Manifest number: 0CDA
Signing time: Sat 28 Feb 2026 18:26:11 +0000
Manifest this update: Sat 28 Feb 2026 18:26:11 +0000
Manifest next update: Sat 07 Mar 2026 18:26:11 +0000
Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: t7ngldtBvE5/awPPqWUrwHaUmAqJHBGSn15iACXcCgw=)
2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: Es8XS7g0+bPB2VUMzuh8jLLqheaUliLQZn9wcmlkbao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Validity
Not Before: Feb 28 18:26:11 2026 GMT
Not After : Mar 7 18:26:11 2026 GMT
Subject: CN=69a33343-ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:b1:43:8e:d8:20:ab:7e:eb:9a:b6:1a:10:
da:de:ec:35:18:a1:36:97:53:25:77:b9:d7:3d:a6:
41:73:e8:c4:ea:0a:86:6f:08:4c:3e:c6:12:d7:73:
29:f6:4c:5b:1d:77:3a:e4:41:02:31:70:7a:0f:f3:
71:d6:d7:59:41:ca:41:ba:51:90:8a:bb:4e:c9:e4:
9e:b1:6b:49:05:a0:09:32:e4:46:a5:68:75:22:f0:
e6:28:bf:41:b8:0b:5f:f7:d7:af:27:02:41:23:5c:
f2:92:09:5b:9f:c5:b5:07:77:be:68:24:ae:7a:15:
37:de:b8:fa:f2:ac:f6:99:23:01:f0:a6:d1:a1:bb:
c9:3d:64:f2:57:1b:1f:15:4d:32:6c:d1:69:eb:70:
36:2a:23:1c:d5:cd:25:44:dc:f3:c8:9c:f2:2a:03:
da:86:4d:8e:b4:58:1e:8c:1c:94:96:a7:fc:1d:a7:
87:a3:c9:2b:4f:5b:5c:82:03:54:da:01:14:8a:d9:
66:f7:eb:72:b0:fd:ef:00:c0:fd:e6:7b:12:9d:28:
58:c9:fb:24:1c:cf:c8:e5:08:3a:71:da:8d:df:b6:
bf:53:60:1d:ea:c3:c3:35:e9:aa:61:a4:a3:d7:26:
5a:9b:d7:88:70:1a:61:4e:bf:bc:fb:34:77:b2:df:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:4A:0C:C2:51:1D:4F:96:FA:CA:49:00:B9:AE:DB:91:07:0B:86
X509v3 Authority Key Identifier:
keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f4:34:5e:42:df:e0:b5:95:a3:01:2b:79:00:0a:fb:12:ce:
77:72:66:e1:c8:61:35:d3:89:b4:24:b9:0b:20:3d:a6:2b:81:
2c:31:aa:7a:c7:03:7d:31:df:a6:99:f2:06:30:2e:ce:b0:17:
41:cb:ee:a8:ed:7a:2c:ee:e9:0e:4e:7a:43:24:62:a1:2e:65:
31:f4:0e:ee:a5:9c:b2:0c:9d:db:5d:19:19:9c:83:eb:0e:1a:
b7:d0:a4:1f:b8:a3:21:0d:23:ef:d3:a3:00:43:ba:e0:4a:39:
d5:82:d1:df:be:4b:9a:cd:d5:54:59:ae:9d:c8:9f:6a:5e:d3:
2a:58:af:30:81:32:6a:db:03:68:0e:3c:7b:dc:39:49:0b:52:
ce:13:de:0c:2d:1c:b6:ca:2e:00:bd:6a:38:24:a3:e5:82:94:
df:dc:db:40:66:45:42:b1:8d:35:b2:d2:5b:3d:2e:1b:92:0b:
f2:ed:0f:00:e4:01:16:6b:19:82:d5:3c:8a:c5:62:e1:af:ec:
30:7f:8b:e5:fc:db:d5:4e:02:22:5c:6b:70:a2:38:39:88:81:
7d:1d:1a:fe:8a:48:99:d5:31:46:d5:e8:8e:ad:16:d8:2f:66:
f3:cb:85:99:68:07:77:01:7c:81:a8:98:d9:44:11:16:51:ae:
80:ef:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:53 2026 by rpki-client