
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json)
Hash identifier: V4TMCKW5gGum+Q+msLZLNl5MAs3rqE6lbIozjfLb2PI=
Subject key identifier: 20:D8:97:AA:68:2C:56:D2:22:8E:24:1D:7B:2E:40:5B:5B:50:EB:D0
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial: 0D47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
Manifest number: 0D35
Signing time: Mon 02 Mar 2026 00:34:37 +0000
Manifest this update: Mon 02 Mar 2026 00:34:35 +0000
Manifest next update: Mon 09 Mar 2026 00:34:35 +0000
Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: oATT6A/mW6t4aROrIFmbdgFecc4EEK0W2+DUAS+Xgwc=)
2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: 62d4jzUjfsj/dKFMhMN/kf/dBUMWoPHad4ewLC0GCPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Validity
Not Before: Mar 2 00:34:35 2026 GMT
Not After : Mar 9 00:34:35 2026 GMT
Subject: CN=69a4db1c-3cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:9b:6a:cd:16:15:b0:3a:3a:f6:bc:0a:37:
fe:56:46:65:1f:26:6c:ee:50:dc:9b:2c:82:5a:98:
b9:dd:10:e5:2c:cb:25:6d:39:18:ce:f4:09:54:bf:
80:36:fb:58:be:c2:5d:82:db:77:e8:27:fd:d7:63:
52:7a:c2:ce:25:39:82:95:fe:93:ca:62:56:82:c6:
0b:a6:56:7a:b9:3f:99:3a:ca:7a:1b:08:21:77:5f:
45:0e:c5:96:e9:b2:1e:dc:94:e9:53:26:3c:7b:71:
6d:2b:6b:73:b5:45:55:ce:29:b8:18:46:8a:d4:25:
f5:9b:4f:ff:4e:cf:0c:22:2e:0b:cd:8c:0e:0d:a8:
94:10:1a:a9:02:f8:9c:73:54:ff:da:00:75:43:24:
b3:82:e0:63:63:c3:2b:ac:df:49:80:c5:0f:01:d0:
01:50:c8:b6:19:4f:5b:9b:22:8c:9d:60:87:3e:1c:
c4:c7:f4:13:a2:3a:e1:ed:ec:9e:fc:2c:a8:71:39:
12:74:ad:0e:cc:8a:43:34:88:a0:da:5e:a2:d9:78:
ba:f7:4d:3f:d3:55:0e:f0:df:b4:47:06:79:08:3c:
cb:cd:1c:17:65:ff:de:7c:dc:e4:62:f4:41:1f:60:
dd:f3:87:35:5b:2a:a1:41:ca:43:31:d1:7d:12:e5:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:97:AA:68:2C:56:D2:22:8E:24:1D:7B:2E:40:5B:5B:50:EB:D0
X509v3 Authority Key Identifier:
keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:3a:4b:b3:85:26:c9:2f:b9:b8:80:00:b2:21:f2:50:a0:6e:
75:f6:c7:96:3e:7f:3a:d7:76:b4:b7:bf:a8:a6:e7:e4:92:77:
a8:d7:79:3d:5f:3f:bd:8c:87:e2:f0:ac:f2:ea:73:79:a8:e4:
6c:23:8b:76:1a:0a:a4:34:f8:ab:68:2b:f5:e2:b7:76:7f:95:
5c:7d:d2:7d:a4:da:d7:91:14:c7:3c:dd:68:f2:f6:a5:3a:af:
bc:da:43:d0:78:e8:2c:dd:34:c9:95:27:80:4c:9d:39:f7:b2:
19:18:8a:83:e6:6b:93:7a:01:ab:87:f5:b9:ad:ca:ca:03:68:
e9:e4:22:3c:c3:96:28:af:ba:cf:28:85:ad:3d:71:79:6e:af:
e6:a5:6d:88:cc:53:6f:fd:35:64:54:f3:6d:80:2e:20:b6:5d:
a1:cb:10:40:bc:17:32:73:04:c0:ac:2c:43:7f:6e:9a:43:8d:
ad:23:93:f9:2c:f5:e3:15:7f:4d:c3:39:e3:68:d4:c0:14:ab:
32:0f:29:ea:ac:fb:40:a7:19:a1:c8:d5:56:fd:17:68:06:71:
a6:8d:11:f8:90:95:7b:96:72:9c:10:70:6f:8c:53:40:78:e5:
d9:13:92:94:29:f1:60:21:78:ce:fd:6e:aa:a3:f0:98:5f:64:
0d:a6:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:44 2026 by rpki-client