
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json)
Hash identifier: uMy3rtYBAwrN8hRpYb8UK4muT2NFS/IvtJy/OP7Crlg=
Subject key identifier: 85:98:61:18:DF:DF:42:4F:1C:7C:D2:49:9F:71:36:A5:80:EA:DC:55
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
Manifest number: 87
Signing time: Wed 25 Mar 2026 06:48:49 +0000
Manifest this update: Wed 25 Mar 2026 06:48:49 +0000
Manifest next update: Wed 01 Apr 2026 06:48:49 +0000
Files and hashes: 1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: DFFegW39KMZIbx6wtlT1sLe6f+DOPWjMR2CLwTyRO5o=)
2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: xddKCKrciYMQOQDWh0L/UeoRnxPJH7k8BoUpUOdsrCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Validity
Not Before: Mar 25 06:48:49 2026 GMT
Not After : Apr 1 06:48:49 2026 GMT
Subject: CN=69c38551-a686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:87:77:d4:60:39:17:e8:78:00:19:ed:ae:
ef:d0:92:f0:09:e3:77:fb:29:5f:50:eb:de:91:d4:
07:23:9d:ca:65:6c:a3:d6:48:70:0b:39:f5:0b:96:
4e:4f:ef:ab:55:e4:fd:fa:05:68:f2:95:fc:5d:82:
d2:7e:94:7a:5b:97:5e:44:0f:db:90:47:a3:37:ce:
81:f4:14:09:71:71:9d:30:d6:2a:d1:e0:d7:ae:8a:
12:80:c8:b1:45:62:a8:cd:2b:6f:55:a0:94:a9:06:
6b:35:26:83:8e:9e:f4:01:06:71:7d:7b:ba:05:39:
c4:5a:7c:a6:85:94:b0:57:59:8f:97:8e:53:84:de:
cf:68:5c:c2:f2:03:08:30:c8:25:69:ba:ae:f6:5c:
87:d8:18:44:8b:16:c4:ce:5b:4c:c7:ac:66:bd:89:
b0:0e:19:8f:f8:69:d9:a9:1f:8d:9c:a5:05:ff:29:
6e:db:c1:77:54:4f:4f:54:fa:ef:b4:2b:45:05:8e:
4f:ad:de:cf:56:b1:2d:85:5c:3d:ae:64:71:86:9c:
bc:e3:18:24:d6:0a:09:50:8f:99:d4:f7:68:fb:9e:
eb:58:0c:60:b5:5e:d5:88:a8:a5:ce:92:00:52:76:
3c:e6:03:62:63:68:14:c1:fa:ac:ac:aa:5d:4d:f7:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:61:18:DF:DF:42:4F:1C:7C:D2:49:9F:71:36:A5:80:EA:DC:55
X509v3 Authority Key Identifier:
keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:1e:8d:da:0e:55:7b:bc:5e:b1:20:c5:e2:45:13:23:97:d1:
c7:04:f5:fa:a5:02:03:55:ba:01:e5:d5:f9:55:59:05:9d:a0:
4c:a7:b7:23:fa:9a:ba:42:3d:36:ff:84:f5:98:73:93:e3:a8:
9d:f9:e0:96:78:55:b0:35:21:9b:98:48:45:84:dc:49:bf:62:
ce:f2:54:7f:c4:c4:37:76:34:5a:3e:bc:1f:0c:fe:a5:0a:4b:
a3:63:fd:3b:fd:a0:ed:51:02:b0:a2:02:ef:4c:cd:52:bd:db:
5f:eb:bb:b2:d3:aa:1d:43:99:48:0a:f7:9c:03:ec:1b:12:f2:
c3:e4:07:78:c3:48:f4:c0:91:62:8a:ea:7d:74:77:09:d7:89:
3e:67:72:65:50:cc:ad:95:18:84:f9:c7:42:c4:a6:8d:5c:b5:
2f:4a:63:57:3a:05:91:09:b0:bd:e1:78:66:19:89:f2:1b:32:
23:b2:31:23:04:44:75:70:2b:74:59:2b:d8:53:30:80:ea:ce:
af:c8:b1:8a:8f:d4:f6:47:e7:12:0d:bd:de:49:b9:68:c8:95:
fd:a2:b8:48:5b:44:5b:8f:b8:57:32:c9:78:c0:5f:91:b3:30:
dc:09:7b:ba:c2:23:fa:12:5d:d6:cf:36:2c:cc:26:38:0f:c3:
70:51:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:33 2026 by rpki-client