
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json)
Hash identifier: QoyIbrczKP2IAq486c6BLu0P4Ekv8sC2p4xKjivF55w=
Subject key identifier: 7A:12:37:2D:CE:FA:A4:96:B2:D7:EC:B1:0C:6E:33:57:4C:76:3D:03
Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57
Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
Manifest number: 054B
Signing time: Sat 28 Feb 2026 23:59:41 +0000
Manifest this update: Sat 28 Feb 2026 23:59:41 +0000
Manifest next update: Sat 07 Mar 2026 23:59:41 +0000
Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: D6hPMD7YLwTb42hDAr93skvoDE1ptUMGHM1SyB0xX4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl
rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
Validity
Not Before: Feb 28 23:59:41 2026 GMT
Not After : Mar 7 23:59:41 2026 GMT
Subject: CN=69a3816d-6914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8f:05:e2:b8:0f:27:ad:0a:5b:1b:3a:68:19:
87:b6:9b:de:47:9c:e4:59:2f:2c:60:e5:b1:4d:1f:
83:2c:2a:18:ad:ca:2a:20:06:60:8f:2c:8b:a1:2f:
5d:63:0d:46:2c:df:a6:50:29:f2:36:32:70:0b:96:
d5:e6:78:12:d9:6a:68:54:69:f8:5d:d3:fa:35:cc:
de:e3:be:76:51:73:ba:0d:75:28:84:cf:ef:e9:96:
5b:b1:7c:6b:1e:3a:4c:01:e2:08:d0:40:d7:36:67:
63:7f:98:04:71:77:66:4d:f3:41:9f:75:a1:20:9e:
db:73:08:31:15:ab:7f:07:1a:f3:64:84:af:13:29:
5b:c1:9d:8d:67:a6:25:1a:8d:8e:fb:0e:64:6e:78:
09:9f:8e:e6:99:88:cf:41:74:b6:a1:88:e1:a1:69:
6c:aa:fc:a9:44:5b:2d:dd:b8:53:00:be:19:ac:c4:
03:9d:90:bd:31:d4:92:e7:2a:37:40:d9:3f:11:f4:
66:f3:de:b5:79:ad:0d:7e:b5:03:44:01:75:04:25:
98:11:2f:f5:48:be:33:03:dd:39:7d:e9:77:fd:39:
c9:00:4b:67:ea:9a:17:fc:f3:53:1f:6f:62:33:ec:
d3:87:c0:06:44:04:e4:f2:9d:5f:06:be:06:d6:e1:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:37:2D:CE:FA:A4:96:B2:D7:EC:B1:0C:6E:33:57:4C:76:3D:03
X509v3 Authority Key Identifier:
keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:80:65:ed:d7:7b:19:d5:0b:f8:80:62:03:40:1e:3d:c4:
3b:c0:76:c1:46:84:92:01:61:56:69:35:3e:ec:3b:37:e7:04:
3e:bc:4a:4b:28:1a:5b:47:b2:61:c8:7d:f1:14:e2:42:52:19:
8e:b5:f2:1a:25:d9:4e:c1:37:1c:2f:85:7a:17:ee:ae:66:4e:
63:b2:5e:0a:5d:66:ff:bc:0a:25:da:e1:53:0a:d0:1b:59:8f:
57:ee:4e:9b:fe:cb:ef:6a:47:5d:7d:26:73:e4:03:ec:52:bc:
7b:d1:4c:5c:a9:fc:2d:f2:0c:97:8f:7b:d2:2f:69:15:ca:bb:
2b:e0:a5:00:fe:5c:20:b4:89:d6:90:b3:ae:ef:28:4a:26:01:
ef:cb:88:0c:14:0b:82:a9:9c:d0:44:23:3a:0e:70:5a:d1:2a:
78:a5:cc:32:78:c0:f7:d8:ca:84:05:bf:2a:22:e4:85:52:6a:
24:83:95:ff:ff:14:b8:cd:11:07:ac:24:0a:6e:37:45:e9:3e:
f3:c9:99:ec:d9:22:8e:bc:ea:a1:ab:fb:90:b0:ab:b3:67:ef:
15:2d:3c:c9:68:61:98:b6:8e:c7:87:e7:26:6e:2d:5c:bc:d7:
4d:a1:14:ac:be:4e:e7:95:50:3e:76:82:88:06:a4:4e:8c:a7:
b6:b2:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:39:00 2026 by rpki-client