
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier: ZZTnRih5n3b7t3fPlXOk93fPUorrN7GH68c3bSC1I+o=
Subject key identifier: 7A:B7:0B:D5:2E:44:73:5F:D5:A5:28:A9:F5:27:BB:41:20:D1:19:7B
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number: 52
Signing time: Sun 01 Mar 2026 09:39:37 +0000
Manifest this update: Sun 01 Mar 2026 09:39:37 +0000
Manifest next update: Sun 08 Mar 2026 09:39:37 +0000
Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: BHWl0ZjWuE5SvRnEWtWGUdizT2ndkY8iHROU/NKeEJU=)
2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: Mar 1 09:39:37 2026 GMT
Not After : Mar 8 09:39:37 2026 GMT
Subject: CN=69a40959-8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:6a:11:c4:db:92:8d:d2:9a:08:dd:66:52:
6e:4c:95:bc:6e:9f:05:e6:ca:c4:fd:4d:83:c8:c5:
b1:8e:cc:d4:be:dc:eb:5d:9f:b4:e6:2d:a2:8c:7b:
03:b9:9f:62:be:19:35:8c:6b:83:48:76:68:75:e3:
61:b8:1d:b8:e7:59:af:6f:34:c3:8f:6c:20:0a:54:
2c:78:3b:c8:f8:60:3f:d3:4a:4c:bb:aa:a0:ba:e6:
9f:af:fe:53:f5:56:da:65:1a:95:aa:a0:48:63:6b:
49:c6:72:a7:4a:e1:1a:68:b6:cd:6c:6c:59:6e:99:
88:75:c8:27:f6:f2:f0:44:6d:c8:7d:68:50:25:3e:
40:a5:3f:91:5c:08:a7:c1:8f:27:2f:c1:8a:00:6e:
6e:25:9e:e0:18:81:d1:3e:e5:ce:ed:8a:62:ba:48:
1a:2b:b9:99:52:c3:84:70:b4:08:88:1f:5a:0b:2c:
9c:75:95:cc:d5:96:16:5a:06:f1:5c:55:dd:0f:c2:
9d:56:f9:f3:12:c6:d4:7d:c3:77:4d:14:64:be:4a:
c6:2e:5f:c3:3b:f5:fe:59:b4:a3:c8:d7:77:dd:60:
40:8d:dd:c4:20:ec:77:db:26:12:12:88:44:31:4b:
cf:ce:33:d4:64:47:4e:dc:e8:b5:bf:1e:f9:95:c0:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:0B:D5:2E:44:73:5F:D5:A5:28:A9:F5:27:BB:41:20:D1:19:7B
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:fa:16:7f:2d:f6:c5:cb:d3:b1:2e:b8:c6:4a:b7:ef:f8:
22:43:82:5c:31:76:ac:37:5f:aa:4f:09:0d:40:0a:94:16:36:
8b:0b:9e:5a:d6:59:55:8b:fb:d5:5e:cf:13:ca:33:de:b4:1b:
40:26:cc:8a:a6:24:f7:f2:6b:03:26:c7:e8:c7:ad:10:90:6e:
5e:ee:e7:9e:82:1d:9d:e7:bf:ac:4a:15:9c:1e:00:89:fb:e5:
7c:d9:11:09:00:88:ca:91:cf:80:32:f0:07:11:9b:15:bd:d6:
fc:91:60:1c:30:ce:e4:95:74:d5:66:d6:5e:83:4a:5a:f0:49:
b1:d7:d8:77:be:0c:a9:7e:a6:f1:da:b4:3a:1a:80:36:9b:f6:
b9:21:b3:67:8b:52:0a:1b:a4:76:71:b0:ad:30:0c:08:fc:1d:
72:f2:44:9f:03:a3:24:fd:7a:a1:3c:7c:32:c2:1f:cf:ae:a8:
a8:30:96:7d:da:44:65:39:15:b7:e2:00:03:88:c1:8a:86:e4:
d8:dd:d3:bb:e2:eb:d9:ad:a9:22:4f:b6:fd:a3:35:1f:cb:ee:
52:f6:b9:aa:24:6a:d3:1e:e1:71:a4:07:83:8f:bf:6c:20:55:
5a:29:09:1c:fc:f1:00:0e:a0:7f:45:c9:36:89:66:83:41:91:
89:cd:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:47 2026 by rpki-client