
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: XkQe+AuStSjEMY+26MHnvsFX+f4mi/BSF9dXwa6lxkw=
Subject key identifier: FB:20:97:56:F4:99:24:43:CD:AF:7E:0D:2E:AD:D2:51:5D:80:A3:60
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: C9
Signing time: Mon 02 Mar 2026 00:27:18 +0000
Manifest this update: Mon 02 Mar 2026 00:27:17 +0000
Manifest next update: Mon 09 Mar 2026 00:27:17 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: Vsvm/pJ0MJtvGw/Lv+Zr2skQO+P+fweqAKwcWhQmmPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: Mar 2 00:27:17 2026 GMT
Not After : Mar 9 00:27:17 2026 GMT
Subject: CN=69a4d965-1534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:fd:87:d9:9b:80:46:4f:eb:47:d5:14:b6:
8a:cf:85:f9:c5:02:09:da:8b:2d:6d:e4:03:31:4a:
0b:2e:70:2f:6e:a7:a7:81:ee:10:f3:16:15:c8:1c:
8f:15:16:f8:cc:19:e0:bb:2a:b1:ce:d9:07:8d:04:
ad:d6:3b:78:3a:9a:d3:79:e9:e2:98:d2:90:ab:95:
0b:df:9f:8c:44:3e:42:2d:13:25:d6:d7:50:46:19:
ce:5f:43:db:b5:fc:5c:36:bc:87:56:03:a5:d1:20:
55:a7:1d:a2:96:a3:b6:c7:c5:b4:1a:d6:53:18:12:
54:d2:f4:1f:c9:d9:26:da:0f:00:42:d2:76:93:be:
60:83:a1:30:7d:c2:ea:75:c8:dd:09:13:b1:d2:1a:
54:49:66:3a:9a:08:7f:5a:f7:d3:19:51:6c:46:16:
44:b9:bb:ea:e1:11:a6:b3:7c:9f:de:2a:fe:99:85:
b9:6f:e9:0b:b9:56:d4:2b:50:be:68:95:3f:4d:f8:
2b:8a:7d:d2:64:6c:af:2e:09:ed:2b:35:9c:3b:93:
d6:5d:85:70:2e:d3:6e:1a:1b:e8:ae:2c:6a:69:64:
d6:15:91:76:78:4c:52:12:43:97:0a:af:26:94:42:
0e:b0:1b:21:5f:7b:3c:a5:21:b2:12:29:3c:ae:19:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:97:56:F4:99:24:43:CD:AF:7E:0D:2E:AD:D2:51:5D:80:A3:60
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:fc:07:90:44:34:bf:81:cc:97:78:fe:98:8a:6e:6e:e2:27:
76:11:01:45:9b:09:21:8a:46:94:ab:ca:6e:d8:0a:fd:75:86:
33:13:2c:90:7c:92:2f:d7:b0:4c:6a:28:f6:1a:33:16:9b:c6:
79:9f:c4:a3:34:5b:84:cf:b0:4e:ac:78:b1:55:80:72:ba:7d:
1f:2a:5a:99:02:d9:18:87:ed:99:e2:a3:72:2e:24:c4:db:ef:
5c:b0:f0:47:5d:7c:86:d0:4e:c3:fe:67:96:ff:4c:80:94:6c:
d3:54:fd:1a:c8:22:ac:76:95:9a:80:5d:4f:bc:a6:1d:89:2f:
b9:4d:78:52:a2:9c:49:26:50:28:57:2b:bc:5e:65:41:67:63:
24:b0:12:b9:dc:25:49:b7:d9:85:7e:86:cb:70:93:b0:b9:b1:
79:49:07:25:1f:9a:c2:b3:fb:20:68:1e:c4:6d:25:2d:78:2f:
22:3a:98:d6:7f:02:67:c6:78:cf:6b:69:9b:69:ce:77:8c:43:
85:f5:8f:db:7b:8d:9d:d3:6d:5e:73:6b:db:80:f0:ab:91:06:
3a:9f:5b:da:78:e9:1e:86:70:7a:7f:78:20:7f:6f:86:ac:11:
88:42:17:46:0d:12:ce:31:4a:c8:53:d3:64:d9:17:d6:40:a2:
5f:21:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:23 2026 by rpki-client