
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: FqxrAw58Ke03M9ABQRFOUOnqI1eXkSmki8JY+tm5s7U=
Subject key identifier: E8:48:12:19:5A:A3:0E:59:E0:43:C9:66:B6:2E:42:02:AD:D8:8C:DA
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: EB
Signing time: Sun 01 Mar 2026 07:31:45 +0000
Manifest this update: Sun 01 Mar 2026 07:31:44 +0000
Manifest next update: Sun 08 Mar 2026 07:31:44 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: AA4fuP+woTpsmQGpcvsllJyXdibRy++u7eLnn+gm09A=)
2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: JGdoimcsZId56ABxtYNO3O8F9yLyNcE47QHhWM1CwzM=)
3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 8YAiDz51IhiZ3/LyDkdEcZ6UuqFMuj+zIvbwZUX+Mu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Mar 1 07:31:44 2026 GMT
Not After : Mar 8 07:31:44 2026 GMT
Subject: CN=69a3eb60-77cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:f5:e8:8e:eb:74:4d:d3:cf:ee:2f:b8:79:
1f:14:d5:55:98:7e:71:a7:b6:69:d3:66:53:4c:a2:
d1:38:9a:e1:4d:86:d3:fd:e2:d4:38:00:06:ac:11:
7c:1f:7d:12:33:50:19:05:47:5a:27:c7:6f:9d:85:
6c:13:8b:a2:aa:01:7e:7a:a3:0b:56:ad:7e:2a:3d:
77:e7:28:2c:d1:fb:f6:83:2f:9c:25:53:36:2e:d6:
d6:5e:13:38:b2:bd:2e:63:8c:cd:63:b1:e4:df:f7:
c3:29:2f:b7:df:5b:5e:21:ba:c6:3a:ba:6b:4a:d2:
fb:d0:a8:91:30:fa:22:32:50:ee:2c:84:61:2b:fa:
d7:24:8c:b6:95:d5:6a:c8:66:6a:96:fd:d9:b2:11:
bb:98:34:59:d6:ea:00:da:35:3f:f3:bf:49:ae:f2:
f8:41:4b:60:1f:3f:27:26:67:b6:99:f1:5b:14:6e:
e6:ed:d1:76:37:c1:b3:71:ab:58:0a:6a:51:31:8f:
ed:ce:74:79:fb:6a:50:b1:5a:88:0e:8e:c2:3f:42:
69:b5:78:2c:cb:c7:53:17:bb:33:42:60:73:88:a7:
e9:6b:6e:05:05:75:73:83:d4:87:46:cf:d6:01:7f:
ed:3e:ca:d4:2f:c8:cc:9a:12:31:06:b9:8e:3d:6d:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:12:19:5A:A3:0E:59:E0:43:C9:66:B6:2E:42:02:AD:D8:8C:DA
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:b5:63:0c:64:3c:88:15:c3:d2:dd:b0:1a:3d:b6:b5:06:
8c:2b:12:6c:50:c4:85:b9:9b:62:6a:d0:11:d5:cc:d0:2d:f3:
7e:02:e9:09:1e:f4:7a:58:50:e1:38:4c:8f:bd:f3:39:63:31:
dd:f7:78:aa:7e:10:5b:80:71:eb:31:df:fb:49:ed:bd:ab:2b:
d3:b3:52:f2:d7:09:dc:e3:20:39:6c:de:74:6c:b9:57:f3:cc:
9a:d8:7c:05:b4:ac:85:8e:90:ca:fc:3e:17:61:4a:dc:4d:ad:
d9:5c:3d:8e:a6:12:52:de:c1:d0:cd:aa:14:bd:25:56:cf:30:
35:20:c7:30:58:bd:37:d4:94:8f:e5:f0:83:f0:7e:37:e3:ed:
16:06:6a:5f:c9:7f:80:04:94:4f:d9:cf:f9:a1:c6:62:1b:77:
8b:0b:ec:de:59:06:d4:b5:94:bd:2f:48:a8:3a:a0:7d:93:1f:
65:c3:5d:62:6f:10:dd:7f:1d:aa:98:d6:29:a2:cd:f0:3e:f4:
e2:38:84:89:4e:09:b2:61:93:cc:cb:ec:57:20:af:87:22:90:
89:8f:cf:77:25:06:78:bd:49:65:4c:4f:5a:20:bc:8a:16:bd:
e7:8c:41:f3:c5:28:3d:24:c3:13:28:1d:17:ce:43:4f:be:9e:
1a:a9:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:48 2026 by rpki-client