
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier: GXMcLmpt4Zw9Prcs8C8rM4fno/7+hrQQcwD6p25G+aY=
Subject key identifier: 71:9D:04:AF:7E:E0:27:97:5E:DA:E8:80:9A:E1:DC:0D:F7:9F:9B:D5
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number: 58
Signing time: Wed 25 Mar 2026 07:21:27 +0000
Manifest this update: Wed 25 Mar 2026 07:21:27 +0000
Manifest next update: Wed 01 Apr 2026 07:21:27 +0000
Files and hashes: 1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: qYVf2+lCjl+ZnQaKI/y4IZXwQyyCP37f6JUbhI7YtGg=)
2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Validity
Not Before: Mar 25 07:21:27 2026 GMT
Not After : Apr 1 07:21:27 2026 GMT
Subject: CN=69c38cf7-fa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:d1:57:16:47:f3:82:8b:b0:1a:74:12:77:
65:b6:48:30:53:a8:f1:9f:bb:30:e0:2b:9b:ed:93:
ad:70:c1:a5:07:28:cf:e4:84:c9:64:6f:ce:90:f7:
84:bd:fa:c4:ac:34:50:f6:57:0f:32:55:8f:dc:a8:
d5:6b:ea:a7:46:ea:62:8e:fc:a9:d4:a7:6d:81:f4:
79:b7:90:5d:56:0c:40:c1:85:00:52:95:7d:92:19:
1e:81:4f:02:2c:5b:e9:6a:5b:ae:83:d1:c8:16:64:
f4:ee:f4:c8:d5:f3:f3:2b:b9:7b:e5:17:fb:3d:e6:
c2:17:8d:fd:01:15:3e:c8:77:1e:bd:8b:8d:aa:19:
bc:6c:05:f2:eb:62:0f:7f:75:b1:ac:cc:49:4f:e5:
b9:bd:a4:da:53:5d:72:8d:d5:da:43:b5:4e:d1:b1:
30:47:5a:e3:09:15:72:60:43:d8:f1:eb:f8:19:25:
28:5d:76:83:dc:9d:df:50:85:40:af:33:b0:af:9e:
82:0c:0f:d9:b1:e4:c4:85:24:fb:bb:1a:3e:94:99:
fe:f2:92:03:52:92:b9:a3:a9:7f:4f:64:4b:64:90:
3b:a8:ee:21:81:1d:4b:9f:0b:28:4e:f9:55:c9:02:
06:a2:b5:b3:86:28:ee:60:59:c7:50:a7:01:13:4b:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:04:AF:7E:E0:27:97:5E:DA:E8:80:9A:E1:DC:0D:F7:9F:9B:D5
X509v3 Authority Key Identifier:
keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:72:27:b6:52:e4:79:d3:6c:20:f5:f3:51:8a:8f:ca:0a:62:
f5:55:69:ae:86:44:a6:da:d5:bc:e0:b4:c1:d9:62:44:9b:43:
4c:53:1c:a4:c7:d5:51:f6:29:db:3e:2a:d2:2b:40:2f:4d:db:
30:1f:b6:0d:ae:07:72:67:b7:26:bd:cb:7a:a7:f8:43:df:a0:
27:2e:fd:16:57:98:27:5e:17:08:c3:55:48:2c:75:0e:13:aa:
e9:ec:21:09:2c:5b:07:ce:92:9b:33:ae:90:3a:9f:27:e5:54:
77:fe:7f:04:ca:e9:f5:65:11:c2:d2:57:e6:f7:86:eb:04:dc:
47:0b:19:b3:92:a9:d4:3a:c9:d2:3f:d7:58:e8:a3:49:0b:eb:
43:a3:5f:38:9f:0e:ce:6f:f3:f7:e0:4b:ea:f3:d3:69:c3:82:
91:54:b5:d7:9b:83:f8:52:71:a0:8c:bd:97:6f:ab:83:cb:63:
3b:e3:34:a0:d7:bc:c8:55:5b:23:0f:8c:c5:dd:cf:4f:01:1f:
da:be:16:49:c0:17:3d:14:41:28:48:9c:2c:b9:ab:20:c2:49:
35:ea:d1:d6:c2:72:ac:ac:ce:a0:1a:96:e0:0b:59:40:3f:70:
73:29:c5:af:ab:4e:2a:40:10:16:2b:01:d1:a1:27:50:17:e1:
c1:85:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:13 2026 by rpki-client