
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: lfMk3cjONlqJmCdjMYaya/dLqOC4/FTA1o1JofXpKFo=
Subject key identifier: 37:81:11:95:3D:1E:DC:A1:AE:FA:85:ED:60:CA:1A:8C:AA:66:88:B8
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 020F
Signing time: Sun 01 Mar 2026 03:43:10 +0000
Manifest this update: Sun 01 Mar 2026 03:43:09 +0000
Manifest next update: Sun 08 Mar 2026 03:43:09 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: 1Mk7gibn9iW7KrGS8ZVHiHHk3xbwCB01yr8SywnsHIE=)
2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: hZntz8CTC2IDFjPrqH2q8vJ36fFwuKQe8spX3e1QD6s=)
3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: 8DpcCvW6V4VWRniH8ZHSVZPuSJos4uvoqbMrXU3BPyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: Mar 1 03:43:09 2026 GMT
Not After : Mar 8 03:43:09 2026 GMT
Subject: CN=69a3b5ce-cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:e2:5c:c2:77:6c:5a:c4:d5:e0:e2:85:13:
75:51:c9:86:8a:b7:69:ea:56:4a:57:1c:ac:02:eb:
d4:1e:a7:d4:51:a1:5d:be:bd:c5:aa:aa:6e:9f:9a:
d7:10:11:59:9b:2c:be:34:78:6a:e1:33:52:de:f5:
21:d6:5a:ce:da:d0:71:46:68:7b:9c:f1:40:60:df:
26:63:2b:87:cc:74:96:08:c4:c1:bb:52:f0:6b:79:
98:1c:45:81:d5:4a:3a:64:29:7c:71:d3:84:3b:92:
1a:c2:69:35:fb:d0:3a:74:bf:48:ef:9a:eb:17:8b:
f9:08:e5:a4:a7:28:58:75:ca:81:a7:4f:6f:62:b8:
c5:17:7c:67:28:dc:4b:86:7f:e8:94:bc:b5:8c:1c:
ae:c2:1d:2d:ca:57:a9:d5:3d:b3:66:69:93:9f:89:
ee:b4:32:e6:53:14:41:34:2e:14:b7:68:cd:66:28:
d9:44:ed:d0:67:d3:a3:19:64:cb:eb:91:3c:d4:51:
b8:21:94:7f:45:3a:18:30:06:ea:46:2f:98:3d:55:
a7:0e:22:b0:e8:c4:2f:65:20:bb:8e:84:0d:6c:6e:
bd:72:52:6f:e8:04:fc:d6:83:96:a0:68:61:04:d4:
fe:8b:8a:c2:66:c4:86:90:05:32:21:e6:a2:2c:a8:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:11:95:3D:1E:DC:A1:AE:FA:85:ED:60:CA:1A:8C:AA:66:88:B8
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:50:32:87:c2:70:d2:84:53:93:8a:0c:75:31:85:9f:c6:72:
89:b4:01:0f:6a:c7:e6:3b:51:e3:1f:d7:22:fd:40:d1:d8:c6:
f1:55:91:dd:35:e6:91:57:d1:a8:76:ce:74:0d:16:ff:7f:2f:
98:a6:f5:43:33:26:44:5c:0f:81:78:c8:4e:a2:d6:89:15:99:
e9:da:7d:2c:34:7d:e3:62:d1:a7:a8:fd:34:41:89:20:48:fb:
f3:a3:a0:10:23:4a:04:8d:d4:97:8c:a6:a6:7b:43:9d:f2:b4:
a2:3a:9f:e3:28:55:8b:6a:cf:78:38:0a:bb:47:82:e4:3e:22:
b8:2e:ad:8c:4b:f4:9f:42:61:59:d3:9d:8c:ca:38:df:e4:83:
63:a8:85:0f:8f:b5:77:ae:9f:d6:d6:7f:03:54:2f:cd:94:0b:
7d:15:a7:e1:fa:9c:7d:e3:9e:39:8c:08:03:1d:f7:bd:43:92:
02:0f:83:02:fe:80:0a:92:90:0f:97:90:69:52:93:b8:a7:05:
51:01:d9:8f:4d:fb:8e:a4:55:ac:0f:ae:d5:44:45:23:1d:e1:
87:50:56:71:2c:62:34:a9:ca:83:57:60:15:fd:94:a9:92:e3:
05:89:7f:0e:0f:e8:88:7b:ca:5d:e3:33:9e:2a:e7:f5:8f:ff:
47:e2:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:47 2026 by rpki-client