
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: mFudLHiWp8589b3uqQxmQ/oDe7UlE6l0zD64awq3lf4=
Subject key identifier: 33:A3:FC:3B:35:39:BB:97:6C:6B:BC:AF:CC:25:78:4C:E6:09:C2:4C
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 0792
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 2294
Signing time: Sun 01 Mar 2026 23:48:11 +0000
Manifest this update: Sun 01 Mar 2026 23:48:08 +0000
Manifest next update: Sun 08 Mar 2026 23:48:08 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: 6+5eze8UxCsKFf2qBCoFle1HDmNMiU+4oR4VOHzsacA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Mar 1 23:48:08 2026 GMT
Not After : Mar 8 23:48:08 2026 GMT
Subject: CN=69a4d03b-9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:10:d8:46:66:5e:c3:07:45:85:66:c8:a9:
02:af:d3:87:b1:05:7e:4c:2e:b5:a2:a1:36:0b:4b:
3a:6a:26:dc:89:69:08:5b:86:ff:48:17:48:99:08:
d9:08:65:a3:38:77:8a:08:92:fa:a9:17:04:17:05:
e0:cd:53:c8:fc:a1:ae:de:5d:a9:7e:06:0f:32:c7:
ce:41:ac:1b:12:34:5e:ce:fb:3e:0b:26:f5:ad:2d:
53:d7:64:8c:e7:d0:39:75:9b:82:85:6d:87:9c:a6:
5c:d4:fc:30:d5:a1:b6:e9:e4:f8:4a:80:53:1d:5e:
27:ec:8c:47:64:74:46:a3:26:3f:80:72:a7:3f:0a:
c6:fa:ad:12:ec:8a:3d:a7:6e:9b:c1:47:5a:50:bc:
fc:ea:fa:81:91:0b:26:8b:76:50:1c:07:4d:e6:33:
fa:6a:3e:f9:cd:fe:1b:c6:8c:41:e5:09:f1:8d:26:
c5:15:63:cd:16:cf:7f:98:05:3f:0a:f6:76:2b:4c:
76:54:8d:94:e1:67:6c:75:31:7e:69:54:21:80:6c:
0b:79:28:47:02:e0:f6:b9:34:63:31:74:44:40:aa:
6c:79:b1:01:80:8b:84:22:77:54:a6:12:ad:2e:87:
5f:c1:4f:cb:b8:4c:aa:5a:7e:bc:53:a9:6f:f9:3a:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:FC:3B:35:39:BB:97:6C:6B:BC:AF:CC:25:78:4C:E6:09:C2:4C
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:68:75:96:a5:f1:a8:22:c8:21:fa:7e:fb:8b:10:53:49:
5c:1a:8f:c4:09:a3:78:1f:f0:4c:7f:32:69:7c:4c:29:81:ea:
c0:7e:b2:31:17:d0:c2:7f:7c:2a:31:a5:8c:02:cd:7a:1b:3a:
30:61:14:fe:da:35:4d:fa:88:3a:a9:c3:90:75:a2:1b:38:f0:
77:c4:33:df:7f:6c:70:11:17:07:ab:01:a8:fe:0a:d9:18:f3:
52:8f:1b:84:e1:b2:af:3c:e8:c0:8c:47:63:e1:c2:85:f8:85:
d3:d7:86:27:f4:02:e9:91:c6:86:81:8f:65:d0:76:59:18:47:
e0:dc:b2:7c:b6:96:b5:eb:00:9f:76:3d:43:97:fd:15:04:d8:
79:b4:37:66:65:d6:28:a1:75:58:f5:c4:bf:16:97:e9:c8:63:
8d:b3:04:2b:6c:2b:25:03:07:af:90:4a:20:83:1d:60:06:8c:
9b:8c:ac:f2:66:74:bd:87:36:c7:d6:ca:3f:8a:a8:60:e0:37:
bd:eb:65:5f:ad:2a:e8:89:d4:d9:9a:4e:e6:9d:da:cd:1b:06:
26:44:bb:fb:f2:88:8b:7e:3d:14:0a:2a:48:a8:38:82:cc:9e:
75:b4:6c:3e:34:b6:40:b3:05:57:2a:4a:cf:f6:84:25:de:d1:
6a:5e:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:24 2026 by rpki-client