
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier: u/fxupJpJRx0uhue1DNcSgabiASwwoxKOxb8OBe1RP0=
Subject key identifier: 0E:05:A3:D3:02:56:29:A8:62:F0:AA:88:D2:D3:0D:A8:49:46:7E:F9
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number: 0102
Signing time: Sun 01 Mar 2026 07:15:02 +0000
Manifest this update: Sun 01 Mar 2026 07:15:01 +0000
Manifest next update: Sun 08 Mar 2026 07:15:01 +0000
Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: 0WV6ojKLfjvUdmJWdpcG6MaYwYsMoePW0g7XPujXHso=)
2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: 3MkuT1/23NVs421qauJYsqrzBUKeSt8MV3gjlXwFUu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Validity
Not Before: Mar 1 07:15:01 2026 GMT
Not After : Mar 8 07:15:01 2026 GMT
Subject: CN=69a3e776-d4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:0c:64:67:fc:24:a7:5d:04:77:f3:83:9b:
68:ed:59:9e:15:f8:71:7c:a8:0d:c4:bc:cb:91:7a:
e6:14:f9:e2:3a:2f:4e:a4:af:77:5f:25:c3:5d:99:
ea:a1:64:92:96:c8:1c:7b:45:4b:35:fe:99:ab:c1:
4b:e6:db:d3:f8:50:a4:2d:f5:4b:77:a8:8d:da:4a:
cf:70:af:13:8b:fa:34:3f:1f:cc:af:28:72:2d:db:
22:cf:bd:8a:e4:83:ef:89:47:b1:f7:b6:b4:ce:77:
77:63:ad:46:4b:8f:c9:ce:cb:be:a4:b4:2a:ee:df:
de:c0:91:d7:20:75:1d:a9:d3:66:fa:3e:1d:a1:02:
b8:73:7d:28:1e:92:07:f5:f0:66:66:f9:49:bb:50:
d5:c7:ad:b5:f2:4b:d8:b6:13:0b:5c:cd:6f:b7:5a:
c7:fa:c3:3a:06:38:29:84:91:d4:fe:16:77:5c:54:
b5:be:3a:2d:77:bd:a2:72:50:24:14:aa:9c:98:f2:
a7:7c:57:bb:7a:c5:75:03:21:9d:f1:2a:c7:d7:03:
38:7c:0a:cb:27:b2:9f:93:be:cb:79:e2:4b:6f:2b:
49:21:75:aa:6c:f1:78:ae:04:80:68:e0:6f:02:09:
65:81:00:ea:ed:25:49:d3:83:71:71:6d:56:1e:69:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:A3:D3:02:56:29:A8:62:F0:AA:88:D2:D3:0D:A8:49:46:7E:F9
X509v3 Authority Key Identifier:
keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a9:b7:83:b4:4e:45:4d:90:c2:b8:a2:56:6c:4a:b0:3d:1b:
e5:1e:ed:2a:d1:af:7a:dc:01:5a:35:c0:2c:7f:b3:2b:53:a3:
26:57:99:55:4e:0a:23:51:b2:61:a7:a0:5a:b5:f9:22:d6:75:
c8:1c:ed:46:4c:b8:1d:80:c1:a5:3c:e0:cb:31:d1:d4:a0:c1:
c3:75:66:a0:18:a3:9b:bc:3e:2b:09:67:11:13:4a:73:a3:44:
01:b4:84:d9:b0:72:95:18:12:e3:c6:ca:6a:25:3b:2d:b5:a1:
11:66:1b:90:09:c8:74:54:58:4f:45:df:16:aa:04:0f:fd:d6:
64:ce:fb:a2:1a:15:0e:94:45:63:2d:2f:36:1b:cc:a7:83:cf:
6e:0a:ba:3d:79:b3:7d:f4:50:9a:03:12:cf:0b:69:20:a9:f9:
61:03:19:f5:d0:af:79:85:cc:6e:37:fb:67:3e:cd:17:b8:57:
67:eb:83:c0:eb:34:37:85:c3:d7:40:ed:0f:0e:6e:02:de:30:
c0:07:5d:55:67:e8:c5:b9:0d:40:fa:07:7d:de:33:e4:9b:12:
16:87:cf:cc:54:88:6a:92:10:30:1d:93:92:d2:13:4f:39:ec:
50:01:bc:e5:8b:88:96:36:a4:e3:3a:7d:a4:a0:e5:64:28:5e:
1c:11:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:16 2026 by rpki-client