
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier: kRNIRvbXIgFSh5jv/CqWyElzFpoqTYx6SN42lLZwjCA=
Subject key identifier: 6B:9E:21:8F:10:05:8E:D4:71:11:24:24:9E:91:73:0D:99:57:99:08
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number: 01CC
Signing time: Fri 13 Mar 2026 02:50:49 +0000
Manifest this update: Fri 13 Mar 2026 02:50:48 +0000
Manifest next update: Fri 20 Mar 2026 02:50:48 +0000
Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: NhxSnKh2UXgRKKJ1fYK+1hhKDFSrmzFpNrGz4OC7CHo=)
2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Mar 13 02:50:48 2026 GMT
Not After : Mar 20 02:50:48 2026 GMT
Subject: CN=69b37b89-586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:b1:3a:df:67:40:60:1e:5f:49:38:ef:21:
81:b0:cf:4e:aa:81:e7:07:c5:a2:48:7a:e1:ad:56:
4d:0a:50:5a:97:1d:4d:a2:c4:d4:3d:27:ef:d1:3a:
b3:3a:c8:30:4d:5f:fd:ae:ad:af:b7:41:dc:dc:56:
64:89:af:37:b9:90:62:0c:2f:a1:76:2a:0c:1a:89:
16:bf:1e:91:d2:41:66:69:80:a2:18:5e:8b:68:c4:
20:ec:4c:73:fc:72:2a:45:a1:8e:5f:8c:d7:b2:54:
9b:80:c0:c6:d2:76:3c:95:71:fe:c7:c2:15:18:43:
14:2d:64:19:c7:4d:34:76:ca:e0:27:cf:5c:a2:9d:
bc:61:76:9a:ed:d8:15:f9:f5:94:8a:fa:92:21:45:
59:05:7c:b4:4d:e0:c9:b7:ef:3b:7a:18:cd:83:1a:
36:d0:1c:77:1c:ee:76:5a:e7:e5:f3:cd:56:68:74:
fa:96:8f:da:ee:21:05:aa:0a:27:44:a8:2d:28:41:
5b:85:22:6a:be:24:a0:3d:76:e4:eb:78:04:cb:c2:
96:c5:94:64:4c:40:80:cb:fd:51:22:e0:59:f1:3c:
72:d8:59:dd:84:7d:0d:b2:c5:32:2c:d8:54:39:10:
5d:cc:fa:fa:04:56:03:64:b3:a8:13:7c:66:5b:80:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9E:21:8F:10:05:8E:D4:71:11:24:24:9E:91:73:0D:99:57:99:08
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:64:b2:ce:ac:a4:ba:cd:98:cf:d2:e3:dc:71:80:5b:fc:
6f:77:12:1a:ce:41:ad:7e:b3:13:7d:00:f3:4f:f7:ab:0d:46:
fa:78:9a:18:88:67:60:0b:31:e5:62:9e:74:c8:7e:5f:f0:44:
d5:33:93:f5:e8:36:60:d8:33:70:8e:e5:6e:7c:df:4c:52:31:
ef:29:24:78:3a:75:c4:b8:ef:9f:3f:1c:98:67:a8:0c:fa:15:
45:28:b4:f9:8b:f9:a1:33:3a:83:f5:f1:eb:d7:5a:5e:d8:93:
e3:5a:02:47:79:e7:b4:47:56:03:24:d1:22:8c:fc:02:31:e4:
46:ab:7b:f7:f8:a5:a5:d2:c5:3e:04:fa:e3:2a:f8:59:b4:e4:
b3:5f:fd:53:64:67:65:ff:f3:db:1c:0f:54:ee:23:86:ea:e2:
1f:d7:d7:3c:a2:32:6d:6d:82:aa:93:2a:e2:31:da:d0:29:b2:
a4:52:94:0a:06:5d:47:56:40:d7:06:71:7e:09:e7:83:3b:2f:
c6:69:28:94:f6:6f:64:53:19:dc:f7:ed:ac:64:77:55:eb:26:
af:0f:f4:fc:5f:25:4b:4d:b7:02:85:f3:85:55:3a:0b:a9:71:
5c:7c:0e:c3:67:d2:d2:e6:e6:73:52:79:75:eb:f5:80:ba:7f:
30:1b:7a:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2
QjMyOEFBOUIwHhcNMjYwMzEzMDI1MDQ4WhcNMjYwMzIwMDI1MDQ4WjAYMRYwFAYD
VQQDEw02OWIzN2I4OS01ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vOxOt9nQGAeX0k47yGBsM9OqoHnB8WiSHrhrVZNClBalx1NosTUPSfv0Tqz
OsgwTV/9rq2vt0Hc3FZkia83uZBiDC+hdioMGokWvx6R0kFmaYCiGF6LaMQg7Exz
/HIqRaGOX4zXslSbgMDG0nY8lXH+x8IVGEMULWQZx000dsrgJ89cop28YXaa7dgV
+fWUivqSIUVZBXy0TeDJt+87ehjNgxo20Bx3HO52Wufl881WaHT6lo/a7iEFqgon
RKgtKEFbhSJqviSgPXbk63gEy8KWxZRkTECAy/1RIuBZ8Txy2FndhH0NssUyLNhU
ORBdzPr6BFYDZLOoE3xmW4CF9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGueIY8Q
BY7UcREkJJ6Rcw2ZV5kIMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4
QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot
QWNlOGxRaUxfUjVyTW9xcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADqFkss6spLrNmM/S49xxgFv8b3cSGs5BrX6zE30A80/3qw1G+niaGIhnYAsx
5WKedMh+X/BE1TOT9eg2YNgzcI7lbnzfTFIx7ykkeDp1xLjvnz8cmGeoDPoVRSi0
+Yv5oTM6g/Xx69daXtiT41oCR3nntEdWAyTRIoz8AjHkRqt79/ilpdLFPgT64yr4
WbTks1/9U2RnZf/z2xwPVO4jhuriH9fXPKIybW2CqpMq4jHa0CmypFKUCgZdR1ZA
1wZxfgnngzsvxmkolPZvZFMZ3PftrGR3Vesmrw/0/F8lS023AoXzhVU6C6lxXHwO
w2fS0ubmc1J5dev1gLp/MBt69g==
-----END CERTIFICATE-----
Generated at Sat Mar 14 18:00:38 2026 by rpki-client