
$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json)
Hash identifier: nCNG4mZd41MxeZslwFcXMcLXiaZkBmL55VERPFDBXkk=
Subject key identifier: 31:AB:0D:7F:D0:4B:C0:C0:4D:67:2D:F0:B4:80:4A:7F:4E:51:FA:CA
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
Manifest number: 0170
Signing time: Fri 27 Mar 2026 04:17:22 +0000
Manifest this update: Fri 27 Mar 2026 04:17:21 +0000
Manifest next update: Fri 03 Apr 2026 04:17:21 +0000
Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: NOMPvH//GZijzNg/6ynOMqoPSzU0cl98EyShXoLJIKA=)
2: 8C3FF9AEC8A811F08595E263C4F9AE02.roa (hash: UYZqoEn++8gl1hKcZfmhEiehtTGcYgyzRAHx/yML910=)
3: 0009532CC8A811F0BA23CF62C4F9AE02.roa (hash: Ifd00EOvpFVraLSaS+uwp7hd0qhp96PD39COnivMtFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Validity
Not Before: Mar 27 04:17:21 2026 GMT
Not After : Apr 3 04:17:21 2026 GMT
Subject: CN=69c604d1-b3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:00:01:61:bc:57:4f:b3:ee:c0:a5:9a:f5:
65:12:27:3c:10:68:5e:6f:2a:64:fc:98:55:9e:e5:
c4:7b:e3:ac:76:43:94:bb:fc:f8:1f:e0:ab:c5:95:
48:92:b8:42:47:d9:6d:43:bb:8e:17:4f:dc:8c:bd:
e7:82:f4:82:fb:2c:33:47:22:12:09:1a:e1:eb:02:
1c:1f:7e:a2:e9:18:e5:e8:91:43:f2:19:7c:93:4c:
bf:ab:b0:7f:1a:f2:15:e7:71:31:bb:63:07:40:88:
b5:ce:62:68:b8:f2:d0:7d:3e:04:aa:47:3f:1b:3f:
7b:7a:c2:77:97:46:b6:5b:13:66:a6:24:5a:bc:cc:
ae:a8:c5:fa:6f:95:c1:2a:1e:3b:b1:c8:a4:9e:80:
3d:e7:fb:a1:41:a0:ca:df:12:b9:4e:7c:3a:9d:b6:
80:0c:76:97:84:86:e1:54:96:5d:a3:83:e3:94:93:
94:1d:25:2f:81:39:81:82:ed:c7:6a:ce:ea:e1:44:
19:c5:14:01:9a:91:2a:24:2f:90:b2:52:6f:53:91:
a3:74:89:b7:ed:34:54:7a:53:88:de:ba:26:c3:d8:
63:e1:ea:54:a5:cc:36:96:7e:78:6e:b2:2e:9f:78:
a2:14:fd:5e:c8:40:a5:8c:e5:fe:77:eb:6d:b1:a0:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:0D:7F:D0:4B:C0:C0:4D:67:2D:F0:B4:80:4A:7F:4E:51:FA:CA
X509v3 Authority Key Identifier:
keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a9:27:af:44:cc:ec:4d:35:a0:37:c0:ab:2a:e5:2d:35:ca:
86:c6:f8:4b:e6:5c:29:bc:72:62:0b:e1:05:fe:d4:2a:c1:45:
40:47:ba:42:91:8d:59:20:b7:72:5e:5b:db:e9:09:dc:3b:24:
5e:7f:fc:6b:40:32:0d:cf:46:b4:72:93:f2:ec:16:ce:f6:a1:
ea:da:65:75:47:60:41:82:36:32:94:8a:4c:aa:c1:d2:09:8e:
f9:7f:d7:37:36:cf:56:22:56:eb:77:ad:57:74:40:fd:9b:2b:
50:aa:f3:ff:e9:ad:9a:ef:ec:59:6a:2c:82:1b:e3:af:06:4c:
3c:d3:b5:84:a0:7e:28:04:1e:46:1c:79:d3:71:42:2d:33:a4:
eb:35:38:ba:50:7c:73:e7:54:71:f4:37:a1:3a:7f:29:10:ec:
70:bb:6c:64:8e:de:2f:b3:a2:66:8d:7f:fa:9a:2c:6b:14:34:
e6:e3:bc:12:39:ff:11:e1:ec:da:c4:a4:c2:47:47:4e:03:99:
db:31:90:67:db:96:f3:18:53:0f:dd:df:e1:de:79:cd:de:83:
7a:09:a1:f6:07:ae:1d:8f:d6:72:4d:1e:14:fc:99:e1:96:e7:
4d:5a:ba:04:bb:90:84:74:e6:dd:40:da:68:95:80:07:99:d8:
56:d1:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:00:29 2026 by rpki-client