
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier: Ja54vgm0afH3WO2ydoc5owM9e79hVZPdtUwsigmsy7c=
Subject key identifier: AA:74:6F:67:D1:98:03:06:AB:A6:E4:AA:3F:D8:F9:FB:70:34:EB:E4
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial: 1443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number: 141A
Signing time: Sat 28 Feb 2026 17:00:02 +0000
Manifest this update: Sat 28 Feb 2026 17:00:01 +0000
Manifest next update: Sat 07 Mar 2026 17:00:01 +0000
Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: ZL1DVJ1UfK8JL1RlufOgChHXB2z0Z/GxHNRrJbh/HI0=)
2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: aWpyluRmBbFOKLiw+qC27KTJm1uY55qHIyXwRzZimsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5187 (0x1443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Validity
Not Before: Feb 28 17:00:01 2026 GMT
Not After : Mar 7 17:00:01 2026 GMT
Subject: CN=69a31f11-86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:46:2b:9a:a1:29:55:91:35:24:cc:79:c8:
71:19:ea:50:85:91:da:63:0c:4c:4c:14:52:4d:dd:
26:d0:69:11:89:dc:27:94:e3:55:60:72:ac:ea:b5:
dc:0a:fb:4e:28:d9:fd:a0:8d:8c:8e:d9:d6:12:97:
32:17:87:fd:92:38:98:a4:d0:fe:5f:ad:43:62:4b:
e2:37:b8:d5:28:6e:f3:f6:32:63:73:8c:b9:9b:e1:
af:a2:a7:35:1a:45:18:70:6e:04:3e:cd:4d:28:ff:
e3:70:6c:58:22:ad:e7:a5:80:f7:a8:ae:9a:df:d9:
8b:07:e6:38:5f:d3:7a:e1:77:d5:c3:d5:8b:b2:9a:
59:00:bb:57:d2:62:ad:64:34:23:b6:4b:ad:c0:65:
02:04:4f:40:c2:8b:aa:1d:8c:cc:28:11:7f:21:9a:
7c:19:c7:56:b5:69:18:a1:0c:43:56:1b:1e:29:90:
eb:19:40:02:5c:97:69:ee:86:91:1f:7c:f2:be:f1:
14:e6:2c:b0:8c:d0:c1:7e:66:3c:17:5c:39:82:85:
3a:ac:4d:18:5f:37:70:c2:9e:6e:e1:2d:2f:80:52:
28:c5:4e:e2:21:bd:bf:34:b4:0b:72:ad:dc:d8:4e:
d4:6e:b9:8f:2a:e9:08:7f:ab:78:e4:ff:bb:0d:83:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:6F:67:D1:98:03:06:AB:A6:E4:AA:3F:D8:F9:FB:70:34:EB:E4
X509v3 Authority Key Identifier:
keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:b1:f9:ec:8a:f4:57:d9:cf:91:a3:c1:a8:f2:65:c6:fe:
be:c4:a4:25:f9:13:78:3b:d7:40:9d:38:4b:b3:af:03:27:fd:
65:f6:6a:cc:2a:02:0c:38:75:b7:3a:78:8d:e0:5f:b6:d4:0a:
32:35:d5:91:9d:16:2c:ff:e5:62:08:0f:72:92:c0:0d:2c:03:
84:8c:48:bd:22:95:d7:71:8d:5b:eb:92:d7:ea:8b:6e:15:91:
8c:51:9d:ea:b1:6a:b1:f0:62:f6:f2:60:3d:9d:b8:bb:2c:a2:
14:dc:aa:87:84:c5:cd:2d:cb:18:c1:c0:7b:b0:eb:65:90:98:
30:22:72:df:72:23:03:7b:e3:82:d8:ef:ee:b1:7a:2d:ad:21:
49:ed:2d:26:07:f3:0e:82:9b:5f:3d:e5:c2:64:0b:e4:46:9f:
33:44:3d:76:d3:28:90:b6:ec:47:5e:fb:5f:44:8e:24:bc:ed:
69:f0:41:2a:06:a3:8f:4f:35:c3:e6:ac:e0:f4:d3:20:f1:18:
8e:7b:4b:41:a2:50:72:3d:4c:b2:82:39:84:d7:80:63:f4:bc:
f4:6b:ba:ed:63:2d:eb:73:72:c8:5c:c9:15:d5:62:55:9c:33:
eb:39:e2:b3:f5:a0:5d:60:c6:6f:fb:78:b1:cb:ad:f6:10:f5:
1a:67:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:22 2026 by rpki-client