
$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json)
Hash identifier: Ow9v/2CQLUoLqeUQ+JAd2YHVZzSw3+A7Q5tIFJ4TVNU=
Subject key identifier: 5B:05:81:BA:5B:4B:AF:2C:A2:B8:D8:26:E1:64:02:41:D7:B5:7F:EA
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
Manifest number: 0232
Signing time: Tue 03 Mar 2026 02:22:09 +0000
Manifest this update: Tue 03 Mar 2026 02:22:08 +0000
Manifest next update: Tue 10 Mar 2026 02:22:08 +0000
Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: 3aQSUlzrWoC3ofu6LZZThjicLdM+M+3qeHJtnXnfSbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Validity
Not Before: Mar 3 02:22:08 2026 GMT
Not After : Mar 10 02:22:08 2026 GMT
Subject: CN=69a645d0-3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:58:f3:7f:7e:03:4a:3a:fc:2d:9d:f2:92:
63:95:74:27:7b:fc:5c:fb:6f:0c:6b:61:b3:e7:40:
3b:e7:7c:d6:cc:ec:5f:55:8c:47:43:26:6b:c1:c3:
a9:f2:cf:48:1e:74:c6:7c:07:9c:6c:36:54:65:df:
7a:64:8c:5a:51:d6:14:0d:6d:32:8b:14:d9:c7:8c:
f0:c1:27:80:a7:e9:74:0f:28:b2:2c:b9:05:fb:6e:
02:be:8e:b6:97:ac:5c:4a:f9:2c:2d:61:f7:6e:f8:
fa:93:78:e6:6c:88:90:67:13:40:36:9a:72:96:79:
03:59:bb:54:90:d0:ee:83:38:6d:1f:f9:43:a0:65:
3f:20:68:85:5d:7e:77:d3:00:08:6c:d0:92:da:c4:
a6:da:15:1d:17:63:ca:9b:fb:34:fc:34:5e:76:c9:
e4:80:78:e4:2b:bd:d2:82:3d:9e:be:96:44:1f:3a:
5b:0f:0a:de:17:3f:ad:8a:c4:fa:de:05:b9:99:0d:
18:78:7d:ae:be:4b:f0:c7:a1:3e:af:40:91:19:5f:
a2:eb:f0:9f:18:0c:83:55:f1:53:d4:50:b4:31:2f:
e4:93:3a:59:ef:98:62:c6:45:56:2d:a2:16:75:9b:
9f:6f:5e:8c:33:53:f5:88:70:5e:ec:22:7a:f0:bd:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:81:BA:5B:4B:AF:2C:A2:B8:D8:26:E1:64:02:41:D7:B5:7F:EA
X509v3 Authority Key Identifier:
keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:20:07:7a:83:ba:e5:05:6e:a4:12:52:f4:da:48:91:d7:
e7:5b:51:2f:e8:4d:00:42:f3:c6:95:25:d0:6d:91:56:4b:2f:
81:4c:2d:25:94:e7:02:0b:cf:2e:f2:0f:91:c1:2b:a2:20:e0:
cf:8b:e9:cd:c5:f7:16:7e:48:8f:3d:36:2f:e5:76:cf:ec:3f:
81:38:84:98:e5:05:9f:5b:99:39:57:84:7b:ce:e6:22:73:48:
e8:b1:dd:61:3d:74:58:e0:06:ad:99:e3:04:b8:37:97:61:77:
0c:59:c6:d8:20:11:a6:39:2e:97:76:42:db:68:6a:ef:ed:5c:
c7:ab:3b:0d:d6:8c:2e:6f:be:0e:71:89:3a:8e:5f:d4:91:57:
d0:e8:cb:f9:44:c2:82:d1:83:72:4d:8c:b3:9b:93:6d:6c:fc:
34:cf:d2:d0:26:02:25:63:bf:b0:a5:2c:fa:5c:8e:4b:f2:82:
1c:56:44:66:2d:90:66:c4:a8:6d:18:48:22:c7:58:80:5c:3f:
d5:19:1c:79:05:93:c5:b0:33:ce:1e:0f:42:85:41:e6:f0:53:
be:91:5b:67:7f:c1:e2:be:50:cb:2e:d7:60:07:49:90:ac:cd:
96:bb:1a:56:02:44:66:a1:b3:b3:21:7b:b6:ad:e0:24:4d:cf:
be:6f:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:18:45 2026 by rpki-client