
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: PYLhRVx1hU0Ac3az4ul0VWK2yspDu9f9vEKIbOpba2A=
Subject key identifier: DF:5E:A0:CC:FE:5A:0C:2B:CF:3A:F7:C0:B0:FB:F8:15:CB:63:58:4E
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: EE
Signing time: Tue 03 Mar 2026 05:59:18 +0000
Manifest this update: Tue 03 Mar 2026 05:59:17 +0000
Manifest next update: Tue 10 Mar 2026 05:59:17 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: N2yfv6W0PLjgh7BPcBsqUD1VFmhBcukDOPyS5xBOE8g=)
2: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
3: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Mar 3 05:59:17 2026 GMT
Not After : Mar 10 05:59:17 2026 GMT
Subject: CN=69a678b5-6408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:27:b6:2e:2d:90:61:57:35:9a:17:eb:fd:
96:df:ac:97:85:e8:11:da:88:6a:01:b1:a9:99:c4:
da:3a:20:f2:ab:f7:ee:f4:5e:5c:7e:09:ab:75:a0:
6b:1d:c2:fc:46:3f:09:01:bb:ae:d0:6e:d2:af:14:
15:fe:03:6c:b4:92:f3:4f:d6:49:d2:45:f4:1b:f4:
3f:92:6b:5a:56:8a:38:9d:ba:5b:7c:36:3b:27:6b:
d4:f9:bb:16:53:5e:23:51:61:ff:ef:ab:b4:fc:7d:
89:44:94:25:78:39:18:38:d5:a9:43:2c:53:d7:a0:
e7:15:cc:2a:59:2e:aa:c0:4d:27:27:e3:56:18:fa:
38:95:b5:db:cf:91:b8:72:17:4b:8d:95:d4:71:3c:
d5:7e:a1:19:0e:3e:a2:5e:43:cb:cf:df:ad:28:44:
e8:1a:0c:22:b7:13:0b:09:2e:ea:09:75:62:7f:77:
8d:f2:04:1b:00:c9:80:e5:b3:79:62:8c:a8:d0:89:
67:f9:43:4f:42:a7:9d:e4:48:94:7e:c5:3c:9f:55:
ec:e9:80:51:fd:66:16:bb:91:dc:d0:f0:40:02:9e:
a5:a7:7c:84:2d:1c:72:15:76:47:9b:ac:b4:35:d1:
f5:d2:62:b0:b7:4b:c1:1e:f1:a3:b6:95:a3:f3:06:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:A0:CC:FE:5A:0C:2B:CF:3A:F7:C0:B0:FB:F8:15:CB:63:58:4E
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:a9:15:7a:9d:0d:67:46:01:53:b4:5b:d8:95:0d:5f:d8:
80:a4:75:28:e8:5b:65:bd:f1:cb:dc:7e:c0:9f:85:48:eb:02:
bb:82:00:f0:8a:f2:0c:9a:f8:0d:96:81:2f:10:9e:4e:52:90:
b2:06:ec:34:52:e4:90:bb:8d:7a:2b:0a:6b:1e:b4:5e:78:e5:
04:01:36:1d:b5:d0:10:5f:c9:ae:33:67:10:e4:c7:c1:f7:27:
e4:b7:3c:f8:65:d6:2e:15:94:dc:f2:2c:47:2d:5c:6a:8a:e3:
48:2b:11:0e:09:58:c1:9c:f8:9a:9d:71:95:28:b9:f3:9e:07:
a9:fb:36:82:ee:69:6a:08:2c:a7:18:25:c7:2e:13:bc:c5:a7:
72:62:13:f9:f1:57:f4:98:0f:80:96:e0:db:71:9e:2b:22:2e:
7d:bc:8e:c2:44:b2:ae:4f:ac:56:59:d0:9d:32:0b:d4:79:66:
47:9e:e2:a5:06:31:a2:1c:66:65:2d:19:c4:67:7d:20:b2:84:
27:09:30:91:92:2d:ad:20:ce:c5:08:fc:e3:e5:e9:0e:9e:0e:
ca:a7:09:c5:1f:27:82:0c:de:4c:f9:e1:77:4d:b8:2e:4a:8f:
1b:2f:c1:e0:86:fe:d7:30:2b:2c:1c:0d:58:34:fb:44:ab:f3:
a8:50:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:41 2026 by rpki-client