
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier: Fc6W7qzTpjuZ9dLZj/9csIJXUF+QIBauSLpQ8KtsYmI=
Subject key identifier: 3D:01:73:03:97:A1:B3:6D:42:02:6F:67:6A:CC:12:99:2E:DA:FC:4F
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number: 5F
Signing time: Fri 17 Apr 2026 07:43:09 +0000
Manifest this update: Fri 17 Apr 2026 07:43:09 +0000
Manifest next update: Fri 24 Apr 2026 07:43:09 +0000
Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: 1vBax7dD/OCn22QPJY4dBxhnzt73PUQjbsCbw3ZsPbc=)
2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Validity
Not Before: Apr 17 07:43:09 2026 GMT
Not After : Apr 24 07:43:09 2026 GMT
Subject: CN=69e1e48d-a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:5c:db:98:1a:f6:e1:9b:af:89:66:64:6e:
af:95:3c:e3:9b:ad:4e:3f:a1:13:ea:84:76:4a:e6:
9d:bf:0c:54:4d:91:0c:19:2d:61:d4:65:2d:73:55:
2b:86:31:85:ae:41:44:54:a6:79:d3:b1:22:b9:4f:
a0:fd:fe:6b:73:e9:ba:82:29:2e:d1:72:2a:1c:2d:
2a:15:cd:b2:84:81:d4:df:51:e2:0b:d1:f2:8d:85:
33:30:ed:e2:ab:8e:fe:2e:69:4f:9f:e8:80:39:c2:
69:5e:a0:8b:75:d4:fa:d1:99:0c:ae:38:99:a6:50:
ac:ec:de:40:1f:a5:55:e4:ae:8a:6d:00:7d:db:19:
4b:11:66:a7:3f:26:6c:54:67:11:da:b7:a9:7a:7e:
46:44:e1:9a:b9:6e:bb:c5:fc:df:3c:80:be:6d:87:
a9:03:3c:4f:76:28:47:e7:f0:2b:77:f5:a5:27:c6:
c5:03:59:6f:22:3d:06:c1:7e:cc:83:f3:7d:68:b1:
20:cb:14:5d:fe:9c:1e:c4:7e:c3:76:af:68:30:3a:
48:41:e6:00:a9:d6:9a:b5:df:76:5f:04:6d:85:82:
19:8e:da:7f:cd:09:92:7b:a2:36:65:68:5f:8a:ec:
49:69:a5:5e:e5:8d:3b:09:a3:d9:1c:dd:bd:a9:46:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:73:03:97:A1:B3:6D:42:02:6F:67:6A:CC:12:99:2E:DA:FC:4F
X509v3 Authority Key Identifier:
keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3c:29:cb:e9:91:56:06:1c:3a:9c:84:bd:28:44:3d:c6:87:
0f:15:32:9e:b7:c7:a3:0c:14:f5:6e:6f:fe:67:a5:de:a6:94:
1f:37:46:5a:ab:07:6b:6c:9d:70:64:58:b1:33:7a:fb:31:27:
fa:20:dc:28:61:f9:1b:b1:b5:31:95:43:64:05:cc:2d:4b:af:
14:7e:1c:21:d8:59:ae:a1:07:2a:1a:7e:02:91:e0:ed:55:47:
5a:94:0a:ee:07:a4:c7:55:3c:32:96:5f:5e:65:9f:f6:58:60:
a5:d6:2c:e8:e7:79:34:25:cb:db:94:90:4d:32:12:40:5f:b8:
d8:99:18:4c:ad:16:a9:9e:c4:95:90:b9:46:7a:16:3a:16:df:
55:2d:f0:07:62:8d:d2:aa:cf:c8:f6:18:d4:01:da:0c:28:7b:
a2:ba:5a:8b:f7:27:70:55:86:b0:c8:45:40:4c:53:6a:00:7c:
e9:59:12:0b:da:80:47:cf:54:0a:d3:63:79:c9:70:9a:ef:fb:
d1:4c:d2:ad:1e:90:43:2f:7a:41:38:63:57:c8:4f:91:db:84:
aa:87:b9:97:4a:7b:22:c7:9a:54:32:b6:c2:4a:90:d0:e2:91:
1d:fd:70:21:fd:ee:f5:6d:df:e7:54:ec:c3:17:6f:b6:7a:6f:
bc:2f:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:00 2026 by rpki-client