
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: FTSgy2/Tr+vRwWhBJ8Q434ydo6qOJHY67iTQen429WU=
Subject key identifier: 9A:B0:2B:7E:09:D1:23:9B:E5:5F:A9:52:45:25:1C:0A:84:47:25:09
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: DB
Signing time: Sun 05 Apr 2026 06:00:18 +0000
Manifest this update: Sun 05 Apr 2026 06:00:18 +0000
Manifest next update: Sun 12 Apr 2026 06:00:18 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: Vyomx7RPI0zVnHl+QnK5Ajj5r62jLOlYIvE/mDy1Np0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: Apr 5 06:00:18 2026 GMT
Not After : Apr 12 06:00:18 2026 GMT
Subject: CN=69d1fa72-b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:fc:0d:c5:f6:a5:d3:eb:cc:af:7a:c1:aa:
aa:cf:b7:b4:03:b0:7e:c8:dd:4f:11:b7:4d:20:49:
17:06:3d:ed:e3:ec:5c:af:80:23:f2:f6:a7:12:8c:
b4:6b:93:6d:79:46:07:f8:85:82:11:2f:80:e1:a2:
c0:06:6f:da:16:ec:38:59:43:56:a9:0d:d9:73:59:
d8:9a:e5:6d:72:2c:52:4b:f5:b9:f3:aa:0b:6c:91:
49:b5:0b:4c:43:fc:43:21:f4:c2:ea:86:4b:82:58:
76:97:3d:fa:5e:fb:fa:f7:7b:9b:82:d5:5c:8b:cf:
0f:5e:7e:92:9c:c9:cd:9e:21:0b:10:36:86:83:90:
ec:28:13:b8:87:b3:57:b1:01:d0:aa:d1:ed:4e:4d:
89:de:33:b5:77:46:6a:10:90:66:80:1b:0e:17:dc:
30:b1:bd:38:44:69:d9:b3:8f:66:f4:4c:2e:f7:a3:
b2:e0:cc:4a:05:e0:06:ab:67:59:8a:14:67:f6:4c:
9f:62:80:f7:8e:0f:aa:70:e2:8b:3a:94:7f:2d:ec:
96:20:94:05:75:27:18:28:7a:e2:44:cd:5f:3c:7e:
7d:65:f7:d1:06:c8:cf:e3:54:89:1f:7f:7c:47:ef:
73:64:92:1f:38:e4:a0:38:92:50:b0:23:73:51:17:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:2B:7E:09:D1:23:9B:E5:5F:A9:52:45:25:1C:0A:84:47:25:09
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:8d:56:df:58:f9:b1:04:15:55:d3:c1:6c:fa:6b:25:dc:
8f:d8:27:80:24:85:56:5e:33:e3:74:21:2d:bd:40:a3:91:38:
67:70:6a:7e:09:52:5b:5e:41:fe:6a:31:45:74:1f:8a:84:16:
88:91:e6:e3:eb:58:76:a2:7e:a2:0a:09:9f:5a:6b:cd:dc:5b:
d6:16:f0:87:6c:1d:21:e1:ed:b2:7b:31:f8:d3:3b:e1:f4:99:
72:34:7c:2e:6c:9f:0d:38:ad:6b:17:34:80:58:64:08:bc:d4:
a2:4a:b3:1f:f2:a4:cb:db:be:53:48:80:25:f5:05:b6:54:74:
c6:40:41:e6:91:b1:55:a4:76:db:90:6d:f4:3d:22:43:85:3b:
be:9e:e2:7d:c4:a1:3d:5c:dc:d3:20:c7:35:5b:5e:b6:b8:e6:
c0:3d:2c:48:d0:9e:5f:40:ba:0b:61:e1:b8:dd:c0:fa:c4:d3:
a0:b6:2f:ca:df:b1:f7:a0:aa:be:92:fa:1b:36:d4:5a:0f:7e:
80:15:09:a2:dc:38:ca:7d:01:d8:dc:ea:81:89:9b:ab:8a:c1:
73:98:0b:c7:96:db:7c:52:bc:71:ef:f6:8f:c5:f4:f2:ff:45:
2d:6a:26:dc:f5:cc:92:fa:9d:14:34:c9:a8:01:13:f7:20:a5:
d2:54:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:24 2026 by rpki-client