
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: FRHKsRVvD9XpbNoa75EqrEmUxaDikGbt35HM7ZbAp5A=
Subject key identifier: 96:D7:5B:9E:03:E0:31:AD:BD:A7:CD:0F:C2:74:6A:8E:84:E6:27:3F
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 186B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 23:53:51 +0000
Manifest this update: Sun 01 Mar 2026 23:53:50 +0000
Manifest next update: Sun 08 Mar 2026 23:53:50 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: iC5ZFRNhO9HHvSQdZf3mvJDoyu+t/98NLKeSlSXK4G4=)
2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=)
3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6251 (0x186b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Mar 1 23:53:50 2026 GMT
Not After : Mar 8 23:53:50 2026 GMT
Subject: CN=69a4d18f-a834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:cb:c6:8f:e2:ea:ab:02:93:85:6e:ec:ad:
4c:6b:07:4e:cd:a5:f2:0d:36:65:cf:c9:3e:5c:29:
65:86:b5:4b:00:9f:5a:ad:b0:2c:d3:fd:ef:55:3c:
0b:91:ee:ba:f9:21:e8:f6:dd:fe:c3:47:43:ad:3d:
7b:7e:09:31:15:87:df:56:de:26:37:c4:14:53:9f:
f6:c7:38:41:ca:c3:d1:90:8e:30:0f:d4:0b:80:83:
d5:b4:60:69:a9:2a:f2:09:92:25:4d:3e:e3:f7:50:
c2:b0:a7:51:fb:b5:f8:fd:dd:88:8d:53:e5:97:7d:
89:bf:10:24:46:23:c4:78:7c:6d:47:3d:39:cf:c2:
c2:61:cc:da:91:6c:4e:36:3f:22:19:aa:b6:09:f0:
36:7e:76:16:d1:6f:aa:9e:83:bd:07:78:c4:d4:eb:
e7:0f:9e:5d:be:0a:93:04:af:7e:ab:1d:a4:6d:39:
2d:e7:d4:30:d5:94:e2:ff:f0:c5:55:75:fd:c1:95:
5f:88:a3:3f:52:56:23:a3:aa:83:d2:f1:21:bb:43:
49:ff:4c:72:39:61:2c:3b:51:96:3d:eb:51:ba:85:
5a:e4:d2:a5:d5:44:e3:74:8a:38:b2:c6:36:bc:00:
03:2c:04:2f:be:d4:8a:3f:bd:07:5e:ed:cf:ad:85:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:5B:9E:03:E0:31:AD:BD:A7:CD:0F:C2:74:6A:8E:84:E6:27:3F
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:03:5d:fd:03:cb:ec:8a:1e:91:0e:4d:26:06:9c:38:4c:
d4:e5:8e:30:78:ab:96:f4:10:2d:1d:31:cc:2e:71:e7:22:2f:
f1:6f:92:81:f3:cf:51:3a:2d:10:4a:cf:e1:a3:8e:ed:d4:21:
33:e0:06:16:50:7c:39:8e:ba:d1:66:fb:9e:28:97:25:c6:19:
5d:ec:0f:bc:2a:72:2e:61:76:29:9b:e8:aa:3d:f2:90:8f:ed:
1a:2b:79:49:38:4e:57:b4:7f:b9:70:cc:8d:df:5d:a6:00:ac:
ac:47:29:39:a0:0f:9f:8c:e3:c4:b7:42:b4:f9:6d:69:4d:6f:
b9:6d:6d:6c:b1:37:27:fd:ce:0b:f5:5d:56:95:f4:36:9b:2a:
b3:6a:5c:d8:fc:5b:f1:61:12:88:3f:4b:2d:ef:0f:ae:87:6e:
6b:5f:d0:b7:a7:5d:90:a5:5b:c1:65:8c:83:e1:f3:96:60:74:
e3:74:16:55:56:1f:36:18:59:f0:e9:63:76:fc:9a:55:eb:2d:
f0:54:b5:f9:5d:ff:ed:60:5b:64:da:0b:f4:4d:a8:55:e6:4f:
e4:8c:d4:ac:f8:72:9f:8a:12:d9:cd:c6:9a:aa:af:1c:3f:7e:
6f:40:69:85:8c:f5:60:af:13:bb:19:d8:5c:89:f4:56:90:bb:
75:e6:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:22 2026 by rpki-client