
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier: THNBzAlGFLSxQ6U3BfRCkJd4vNClTdkjE6E0i73aLpo=
Subject key identifier: D5:FB:06:BE:5A:89:B1:7B:EB:B3:EE:D3:79:DE:D1:77:85:DC:42:6B
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number: 0914
Signing time: Tue 24 Mar 2026 20:03:03 +0000
Manifest this update: Tue 24 Mar 2026 20:03:02 +0000
Manifest next update: Tue 31 Mar 2026 20:03:02 +0000
Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: zY+MKoVDEtMFRILsd8mYRVO5tVL//1VfQC8oJPr2s/U=)
2: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: 5lrGY5B8z3gxKejTsTAvtgEu2yogYsNGkQLwshDVoN8=)
3: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: xrP+j01URqzb818JxrzZQg9E+zkHFQ6z2nDfJjk/xvY=)
4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: vh+mgfVuse3OG+5JOUAqNPfjrPXWt/l1W1BYVqMifYc=)
5: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: UE8SAxckfyeRkUiosJW8F4rRi0Cjj19RMe2v1jw5K4s=)
6: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: 4CYZfi3J5mrMgJw71DrWmWBko5u4w80OqCluI06fPlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Validity
Not Before: Mar 24 20:03:02 2026 GMT
Not After : Mar 31 20:03:02 2026 GMT
Subject: CN=69c2edf7-a960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:e7:27:17:35:f9:32:bc:4f:fa:e1:08:a7:
ba:eb:04:0d:17:2b:cf:9d:7d:8c:0a:c9:65:3c:35:
4f:8b:44:0e:e0:6c:8a:82:0c:bb:3a:24:80:dd:28:
10:e7:28:a8:99:b5:fc:46:78:32:a8:f7:e2:17:bd:
5f:95:63:f5:5f:a5:15:47:ab:65:0d:c3:06:aa:62:
82:4d:16:f2:a4:9e:68:0f:c9:57:c9:58:d8:61:2a:
c6:bf:20:a1:12:69:fe:5d:72:29:a8:a5:c2:f3:51:
8f:4c:4f:86:90:25:30:4e:e0:01:1d:65:ef:31:d6:
98:22:ae:14:63:d5:12:77:d7:9c:9a:a1:c6:7b:e6:
c2:ca:0a:10:4a:52:41:19:69:94:cf:11:71:b3:05:
bd:ad:c4:c6:18:21:86:0c:c1:c9:78:c5:c0:e8:79:
ab:ab:cd:34:6a:33:69:2a:bd:c7:e1:4b:6b:87:8e:
5f:2c:59:80:90:c1:9f:b8:44:80:ff:aa:a5:4c:b1:
32:2e:6b:7d:e4:10:ae:52:e1:9c:2c:45:d6:9b:d1:
bf:6a:27:78:b6:4c:59:45:9f:4b:53:19:2e:98:eb:
0e:8c:92:f0:bc:ea:99:9a:90:b6:4c:34:21:40:23:
4b:ae:d2:50:10:c1:f6:c6:3b:5c:d0:2d:5b:ec:b0:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:06:BE:5A:89:B1:7B:EB:B3:EE:D3:79:DE:D1:77:85:DC:42:6B
X509v3 Authority Key Identifier:
keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:42:af:1b:e7:ed:cc:c7:73:61:1e:5d:b8:ba:b0:75:a6:
b6:9b:fe:14:de:99:fe:fa:e4:dc:a5:65:dd:62:1d:4f:4d:35:
5a:e8:5d:fa:16:bf:e4:4a:4c:4e:03:46:5c:e8:da:dc:7d:34:
7b:6a:b2:bd:b3:cc:87:bb:bb:af:c7:8b:92:04:bc:c8:b2:e5:
83:da:43:f5:9b:4f:6f:13:a6:8e:df:80:3c:e8:ed:26:d1:8d:
87:8c:61:92:c7:34:a2:d9:29:9e:bb:26:bf:f1:57:97:84:26:
8f:70:2a:fe:ad:07:cf:be:48:7f:5b:2f:12:24:f9:19:df:85:
78:76:fd:05:89:77:21:0b:7b:78:c3:9a:20:a8:8d:3f:98:4f:
94:e6:8b:7e:ab:db:37:eb:c5:10:2a:bd:17:2f:21:e1:6a:9c:
18:a6:e2:4c:77:b1:83:d1:ea:a6:54:9f:93:ae:9d:00:ac:73:
97:54:11:f2:c3:4a:44:7e:8b:38:c7:7b:15:29:69:7c:c6:65:
e0:49:a2:76:3a:17:7e:b4:07:cb:3f:77:38:80:0b:c9:66:25:
22:e3:fa:d2:42:08:df:90:11:65:be:89:be:28:df:34:3d:5e:
cf:82:17:ce:fb:4d:04:cc:a3:da:41:ba:67:ca:1d:d3:f5:7a:
04:23:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:18 2026 by rpki-client