
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: DBMbZ+zjhOz6EYnTZWgh9Lpi64QMh82kZC/Qq8KWQOo=
Subject key identifier: C3:45:15:C9:D3:F1:FA:9E:E3:98:19:0C:A0:D6:59:6A:6D:B0:4A:86
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 094D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 093C
Signing time: Thu 26 Mar 2026 20:03:20 +0000
Manifest this update: Thu 26 Mar 2026 20:03:19 +0000
Manifest next update: Thu 02 Apr 2026 20:03:19 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: xXA0l6ztLgmH/g+ACCva7dmwTDUcfL2MCoUB00vqQr8=)
2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Mar 26 20:03:19 2026 GMT
Not After : Apr 2 20:03:19 2026 GMT
Subject: CN=69c59108-9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:d0:96:74:2d:e9:f8:7d:13:0b:29:59:46:
4b:27:63:bc:17:97:a7:c6:54:ea:e4:2d:19:ef:87:
88:c2:8a:2f:ce:c1:02:dc:f9:33:77:2e:3c:06:11:
8e:10:46:d3:4b:b9:e4:b8:73:7c:67:20:4f:a5:13:
a1:76:42:78:5a:71:3f:87:e6:7f:d3:77:f3:f1:7d:
8c:53:ed:42:44:9c:b2:8d:80:4b:74:35:3e:62:7d:
2b:03:7f:b3:4a:13:14:83:a7:85:8a:96:b5:f7:73:
cd:16:fa:8e:f5:db:aa:87:9f:48:5a:08:ca:47:18:
0c:44:0b:e6:89:44:e5:d9:39:57:25:3d:cf:48:f4:
2f:ac:e0:6b:7b:a4:a2:0d:62:40:07:bd:a4:97:18:
fc:91:21:9c:a6:a2:10:cb:de:ab:13:18:bf:6c:82:
b0:0a:5c:7e:e5:da:e6:18:d3:79:fb:63:df:db:ba:
86:2b:48:b9:ce:81:35:3b:db:f5:6b:66:28:bd:46:
4e:6e:e3:ca:1c:a2:a6:72:94:f7:78:69:60:06:ef:
c6:6e:d0:d7:94:7a:f6:77:f2:2e:af:8b:c1:b9:0f:
51:e5:47:bb:de:f2:9d:21:3b:7b:4e:0e:f6:c3:35:
e2:f4:89:88:18:8b:b8:95:0c:bb:64:5a:37:ca:70:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:15:C9:D3:F1:FA:9E:E3:98:19:0C:A0:D6:59:6A:6D:B0:4A:86
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:e9:fb:6d:fe:fd:2b:d7:47:ae:54:f9:36:3e:08:97:26:
fe:af:8e:09:03:bc:18:fb:0d:88:ff:0e:20:92:27:e6:fb:7e:
62:f5:2e:5f:6d:ca:91:42:c2:fb:7f:6e:5d:a9:8e:16:99:97:
07:e2:1e:27:3e:4a:6c:92:d7:b2:18:d8:b3:5a:09:17:4b:79:
86:87:fc:16:8d:7c:7a:dc:39:3a:5a:d3:19:d7:73:b1:22:55:
ef:e4:13:80:f7:53:4e:cf:70:b3:b9:56:b5:cb:77:a1:a6:9f:
b2:1e:cc:fa:42:f3:27:29:03:6e:c0:97:79:f0:f8:ff:d3:74:
9a:6b:95:13:4c:8b:75:43:12:7d:b7:4f:25:8d:eb:74:39:7c:
e7:51:85:05:22:fe:4b:db:e6:ec:46:bd:08:02:a1:c2:01:c2:
11:7a:21:b6:b0:5c:9f:ae:40:67:c0:82:85:d0:ac:86:b9:30:
43:4e:8e:44:2f:fc:cd:97:a8:52:b4:c7:bf:df:8f:4d:fb:0f:
d1:c5:cb:dd:d1:94:a9:ce:47:14:c3:54:cb:ca:fb:33:30:bf:
1d:32:be:d2:58:90:c3:24:dd:17:35:b6:8b:d0:6f:73:ae:9b:
18:2e:e0:03:1a:90:e3:5d:6f:30:90:5d:05:ae:ef:d6:8d:b2:
b7:16:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:08 2026 by rpki-client