
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier: 7GQPrAYuksw27d4O6fh+K+NS6JsIviji7VllT1Z8ToA=
Subject key identifier: 56:40:26:93:3F:3A:FE:0B:A6:65:C3:47:40:3E:EA:C3:73:04:4C:25
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number: 0243
Signing time: Mon 02 Mar 2026 01:12:04 +0000
Manifest this update: Mon 02 Mar 2026 01:12:02 +0000
Manifest next update: Mon 09 Mar 2026 01:12:02 +0000
Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: 9Hqq0hHIc7k+k61irHFlAi4cjFEfufCa7l7FDsymvDU=)
2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Mar 2 01:12:02 2026 GMT
Not After : Mar 9 01:12:02 2026 GMT
Subject: CN=69a4e3e3-15b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:ac:ca:87:e5:3d:2d:9b:aa:39:79:ba:69:
2e:d3:64:54:3c:9f:d5:d0:3d:40:42:4b:76:91:59:
b5:fd:33:71:37:29:58:fc:1b:c2:c1:cb:62:14:03:
17:59:4d:48:f2:59:8c:2e:5a:9d:03:18:b8:fe:77:
c0:7a:a9:d8:9c:1d:8b:cd:21:7b:9f:4e:0f:c7:ae:
92:d0:71:84:00:f8:1f:5d:c3:f3:47:96:e9:71:d6:
42:3a:dd:6e:27:cc:12:91:dc:0c:69:d1:24:c6:c9:
1d:a8:ad:f0:31:07:fb:52:33:82:ab:9f:79:2c:76:
f5:38:25:9c:13:5e:f8:fa:b2:1a:d2:98:3f:e8:67:
57:77:15:6c:36:a9:31:02:7c:e7:71:4a:cf:24:3c:
f7:9e:1c:c2:c5:31:7d:c3:56:9d:9b:ff:32:0d:23:
51:55:ce:da:77:24:55:30:f7:ea:89:db:d2:9a:2c:
fe:aa:2d:80:36:bc:29:ac:1b:7d:77:2a:82:75:13:
52:dc:c5:7c:dd:7d:fa:bc:14:2e:72:9f:fb:96:2f:
82:17:14:07:35:01:8e:a1:96:16:b0:0f:ae:b9:ce:
27:65:f8:1a:0a:da:03:47:19:ce:9a:fc:58:2d:d4:
13:2d:13:99:f6:ed:3e:a6:2e:78:4d:05:1f:1e:2a:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:26:93:3F:3A:FE:0B:A6:65:C3:47:40:3E:EA:C3:73:04:4C:25
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:30:4e:bf:ad:bf:1c:02:c1:a8:ca:53:80:1d:ec:52:18:
4e:10:af:4b:06:f3:48:a7:9e:0d:7c:a9:43:0d:81:9b:4a:59:
49:e3:ae:6d:16:08:dd:f1:d7:79:4e:ff:3f:93:1e:40:80:1d:
24:34:15:dc:62:78:3e:39:0f:57:21:3a:df:84:5a:d6:71:10:
63:5c:a9:6f:63:d2:e6:d7:d2:80:50:1b:71:56:e9:7a:5a:90:
5f:e7:67:76:1c:14:67:97:7f:4e:c0:20:31:72:e5:23:ff:5b:
43:4c:b4:b5:f8:da:14:39:23:80:f2:70:36:3f:e8:d7:75:58:
48:09:58:2e:b9:ee:c8:5d:32:0b:7e:44:2f:a3:7e:64:4c:74:
b9:e2:11:6e:5d:b2:01:62:da:bf:5c:72:5f:8c:59:5f:94:bc:
bb:ad:3c:4a:f9:21:3b:fa:da:0f:45:b4:c0:62:5a:93:c8:ee:
9e:b2:36:6a:3c:3b:e9:73:fd:15:f6:ea:08:92:b5:1b:9c:25:
1a:c5:89:23:81:54:03:e5:2c:80:be:dc:05:83:ca:27:49:59:
f5:72:3a:2a:98:d3:18:7a:31:b3:38:39:96:c4:a1:28:4c:b7:
e1:e0:4f:0a:f1:b1:05:61:13:59:bf:67:66:ed:b6:b7:9d:d1:
25:4e:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:34 2026 by rpki-client