
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier: bRBm3ErxT7h6i3GrSQNbqpK65j1GxBfp54kiuGxtpog=
Subject key identifier: E1:7F:2D:26:63:FE:16:67:7A:1B:52:DB:4B:F3:02:C3:F1:03:68:B9
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 0389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number: 0385
Signing time: Sun 01 Mar 2026 01:38:48 +0000
Manifest this update: Sun 01 Mar 2026 01:38:47 +0000
Manifest next update: Sun 08 Mar 2026 01:38:47 +0000
Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: lKQIMhWfnBYfl5Hzy6r8lDU/fh7h+R3ssMIuf6r5pP8=)
2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: Mar 1 01:38:47 2026 GMT
Not After : Mar 8 01:38:47 2026 GMT
Subject: CN=69a398a8-bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:84:1b:b6:c6:c9:ce:18:46:8d:31:01:cc:13:
67:ce:63:65:23:5b:8b:50:a0:aa:85:9d:69:05:8b:
f3:6c:04:16:0a:98:36:86:c6:73:48:f6:f9:6b:64:
61:5b:d7:3b:ce:2a:c2:2c:db:df:4d:23:31:9d:86:
da:31:3d:78:9f:ac:c2:3e:aa:1f:e3:60:a3:d4:4b:
c5:33:e9:ee:39:d6:0d:ee:dc:07:33:d2:f1:9d:ec:
94:41:1a:96:b3:19:fa:f9:52:ad:96:a4:d2:13:67:
c5:dc:ee:58:b6:df:18:fb:d0:c4:4b:50:3d:58:83:
c4:76:c9:98:d9:87:6b:76:a0:fd:4f:28:38:1d:ba:
66:cd:62:56:e8:11:a6:2f:b1:ef:f1:82:55:3a:45:
65:36:d1:9d:ab:82:72:a5:1c:4c:b0:a9:6a:89:b9:
18:a0:da:99:8d:7b:d0:b3:4e:01:e9:89:cb:0d:27:
0e:b1:46:4f:b6:f3:80:ee:50:59:99:79:c1:61:33:
35:34:12:59:78:b1:80:4b:d3:1d:3d:93:c0:9d:d5:
2e:82:35:10:b0:70:29:f9:41:b6:23:5d:43:8f:71:
b9:86:e7:3a:1b:02:1c:8e:e2:64:4e:ea:67:ec:59:
1f:f0:a9:df:98:9f:2f:4e:69:17:86:51:2d:6e:13:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7F:2D:26:63:FE:16:67:7A:1B:52:DB:4B:F3:02:C3:F1:03:68:B9
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:ff:ce:86:c6:25:36:94:35:4a:75:59:6a:be:d0:ef:8e:
ff:30:d1:19:7d:f1:7b:00:c8:cd:d8:70:a2:f7:25:6f:5a:d2:
44:74:57:60:07:2a:5e:bc:3d:85:81:bb:15:0c:ab:d5:fe:43:
e0:b2:1e:f2:a6:3f:3f:af:1f:38:92:7f:a3:18:09:cb:20:d7:
51:41:97:d3:ec:97:64:da:65:16:b5:f3:0a:9b:f4:4e:8e:9c:
ed:ee:b8:21:ca:72:17:ed:db:f1:bb:55:f5:cc:a8:86:29:e1:
02:e3:5c:10:8b:5b:29:72:9e:50:0d:80:39:ea:9d:05:2b:ca:
5c:b4:01:ed:e5:27:ec:10:80:a5:e8:b5:57:01:c7:19:1b:7e:
08:d2:52:75:c1:af:cf:ca:21:26:ea:8e:68:21:1d:6d:d2:7f:
25:2b:34:bf:bd:a6:94:0f:27:e9:4c:53:ed:64:24:fe:3e:68:
b1:70:7b:a0:f6:fd:38:dd:67:9f:ab:b4:d9:1a:bc:ab:8b:14:
2d:ca:31:40:6c:09:08:3c:83:5f:eb:0e:1a:d5:2c:f9:a9:d0:
d9:54:6f:5d:5a:04:e7:a2:b6:aa:e4:9e:5b:52:ef:f7:7d:7d:
59:22:fe:0d:c2:3d:95:e9:5a:88:7c:52:b9:86:55:62:4e:d8:
a8:1c:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:05 2026 by rpki-client