
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: zC2ItBli1NG7HOkblqxX2uYulGFjxwDE8eTgUewd8As=
Subject key identifier: 22:F4:38:39:AD:67:79:9F:E1:21:0A:16:32:CF:F2:2B:CB:2F:FC:2A
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 093D
Signing time: Sat 28 Mar 2026 20:03:44 +0000
Manifest this update: Sat 28 Mar 2026 20:03:44 +0000
Manifest next update: Sat 04 Apr 2026 20:03:44 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: Rz2rxqbNPh+9tQVIQQDSa54MP9eOna5+HgeW7jnaaOo=)
2: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
3: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 20:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Mar 28 20:03:44 2026 GMT
Not After : Apr 4 20:03:44 2026 GMT
Subject: CN=69c83420-fb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:92:83:f3:a0:45:06:af:38:62:6e:28:1d:
a0:b1:7d:bc:ac:55:a4:3f:73:60:2b:50:58:7b:0f:
b4:df:b8:f7:a0:52:fa:9c:76:b3:f2:59:3e:e0:34:
3b:c6:61:c5:4d:4f:8a:f0:5c:7c:36:db:58:21:de:
3e:f0:73:fc:56:3b:5a:1a:41:a3:ff:fc:44:c8:b3:
cb:88:8c:ae:07:4e:73:dc:91:ae:f4:77:bc:ba:fa:
f7:de:e4:aa:d9:a8:ed:ae:3d:0a:47:53:d4:95:34:
68:fd:21:f7:a2:68:11:a5:84:7e:34:a4:43:b3:cd:
83:e2:bb:47:bc:66:0b:1a:1e:a5:8f:b5:f2:a7:2a:
e7:5b:d1:a9:a9:43:ba:67:b7:be:95:0a:e0:86:ed:
69:61:27:81:95:b9:c9:45:01:e2:c6:de:b9:c8:ce:
bb:82:ad:7a:01:27:78:8c:34:0f:ac:3b:81:9b:a9:
d6:78:3c:d2:e7:8c:a6:75:b9:5b:99:99:be:ad:d2:
39:f9:ee:47:77:a0:dd:05:a8:8f:ec:05:2e:3a:cf:
36:8c:d5:2f:d4:a8:71:5c:37:b8:47:32:66:89:08:
c2:0d:32:5b:94:ae:18:f7:da:3a:c4:78:35:90:81:
a9:c2:7b:d3:8a:78:6a:e6:d0:6c:78:e7:eb:bc:69:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F4:38:39:AD:67:79:9F:E1:21:0A:16:32:CF:F2:2B:CB:2F:FC:2A
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:49:d2:6e:d6:5e:24:bc:4b:91:cc:f7:3b:57:4a:95:1d:
15:26:71:1b:70:d3:d6:71:2e:bb:06:0b:83:27:cf:e1:6d:bc:
76:ca:96:9b:75:12:62:db:f4:5e:cb:2d:2b:46:40:47:35:31:
26:ad:c5:25:5e:72:1f:95:80:60:8f:9c:e0:3b:4d:ff:6c:ee:
e1:0d:dd:20:c1:e0:fe:8e:7a:bb:da:89:a5:f3:06:53:8e:40:
64:e4:ee:1c:53:70:13:aa:c1:57:87:83:92:6b:ba:c8:16:3a:
a2:85:76:48:13:af:23:35:d0:b7:83:f0:37:8a:6f:69:01:eb:
7a:29:a8:d5:7a:1b:0c:48:e5:5e:17:ae:85:6e:6d:7b:5e:72:
55:cc:fc:59:a9:35:8c:5b:a0:73:f8:e1:32:15:ec:17:ef:5d:
0a:95:ce:8b:22:22:e3:e5:58:9b:6b:43:9b:84:55:cf:27:9b:
da:48:83:6d:e7:81:23:ef:b8:12:cf:00:59:a9:b5:f5:31:ad:
dd:ae:a6:3a:c9:43:b1:96:bc:38:21:73:1f:7d:da:9c:24:50:
08:4d:3e:26:ed:b1:f7:81:11:de:ac:01:9c:2d:a6:99:c4:0f:
ea:2e:64:ba:02:06:64:9e:6a:a7:f5:66:8f:12:1d:61:5c:21:
e1:70:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:03 2026 by rpki-client