
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier: PasE8o569Oubk3LH/QmOhhO7ePxep4cxSGv88TSiv50=
Subject key identifier: D6:FA:39:4B:8C:1B:CA:1A:4B:07:AE:EA:49:69:F4:DA:74:D3:4A:E4
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number: CE
Signing time: Tue 03 Mar 2026 06:25:24 +0000
Manifest this update: Tue 03 Mar 2026 06:25:23 +0000
Manifest next update: Tue 10 Mar 2026 06:25:23 +0000
Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: 0DSiHcUWXRxM3zFJhnl38IKyeHdolejMtN0Jo7taT3A=)
2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: 3IMdOWYwn0QRatQtIN9l/kAsu/mvGyf3twx0ihOcENg=)
3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: V7/B/hXcDUfsoTzRVsl+7hDC77MO0UpaCW80iN20gSI=)
4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: NTfczm2IJBm0RlPoqeeC++IwTWVO6ga62KI4p0CUufw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Mar 3 06:25:23 2026 GMT
Not After : Mar 10 06:25:23 2026 GMT
Subject: CN=69a67ed4-5485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:1d:91:45:c1:0c:f0:ba:5c:de:db:e2:35:
7d:af:61:2d:54:70:64:75:83:d7:41:ed:99:8e:ed:
9e:45:5b:1a:6a:3a:fa:9a:5c:a6:8d:53:a9:8b:8e:
39:f6:2f:dd:a4:ea:03:ed:50:7d:33:88:ec:51:62:
7d:fa:17:d9:b0:ad:3b:53:b2:61:05:78:14:c8:da:
bd:35:26:d2:b7:79:bf:76:a5:8a:7e:33:03:24:69:
76:41:fa:35:5c:3a:60:d4:2a:12:82:e8:1a:aa:6c:
3a:1b:11:ec:4e:66:fd:8a:bb:d7:23:2e:2b:ad:8b:
5a:fa:d3:cf:8b:41:d9:62:b7:ff:92:3a:0f:35:c3:
01:36:e2:5a:ad:c0:da:b4:53:5c:b0:1a:c1:25:b2:
18:63:0b:39:de:f6:bc:b4:73:27:f9:ed:9f:dd:3d:
90:d3:a8:53:d3:8e:99:0d:a5:db:a0:9a:97:6b:de:
6e:8c:11:af:97:0c:06:f9:ae:4f:00:3e:7b:3d:75:
f8:dc:58:a4:10:35:6d:75:26:34:ce:3f:16:cf:cc:
52:df:33:a1:5c:ba:c8:69:d2:ef:44:c4:3b:8a:3a:
11:fd:b8:08:62:7b:c8:f6:c6:29:89:77:af:ae:3e:
98:c7:63:75:f1:f7:07:ed:de:98:37:f9:24:19:33:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:39:4B:8C:1B:CA:1A:4B:07:AE:EA:49:69:F4:DA:74:D3:4A:E4
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:01:59:a9:9c:f5:95:b6:8a:ae:48:97:2f:66:7d:91:ab:
5e:29:c4:5a:d0:65:d3:f9:81:37:e1:24:20:d2:70:ee:f9:61:
4a:f0:06:9d:af:ee:3a:19:42:c5:b4:04:d2:81:a9:2f:4d:64:
e4:e1:cc:64:0e:32:de:a9:0b:6c:b9:fd:96:cf:14:c8:fb:bf:
69:ba:75:6a:d8:8e:94:d0:9b:27:eb:c8:6d:dd:7a:fb:11:55:
4b:9a:a2:84:59:c3:cf:da:79:77:72:83:a0:c4:ba:2a:fb:d0:
21:22:66:d5:f5:24:17:86:c9:e0:6a:d8:e8:a0:36:7e:71:ed:
1b:98:6d:f0:97:ca:b5:c6:54:46:ac:97:6d:f6:90:c1:79:4d:
4e:fa:47:87:73:d9:b3:6d:d3:f6:ce:36:12:65:61:67:d4:84:
a2:7f:5a:84:1a:f5:6b:84:e2:a9:3b:4c:dc:bc:66:6b:06:10:
a8:5b:0d:5a:df:58:dc:e8:54:3d:d8:92:9a:32:bd:c6:e3:9d:
e3:72:a5:ed:79:6f:d6:6d:aa:a4:78:1f:23:3c:d7:b6:6b:ea:
35:d4:1e:8a:be:61:18:dd:a4:ad:2f:07:32:f0:84:45:67:3e:
43:96:a2:c0:46:69:03:68:01:7f:a1:ef:fb:7a:98:df:fb:bb:
5e:98:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:31 2026 by rpki-client