
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json)
Hash identifier: ryNrceYu5g6RrzhobJbWOj3ULukzK/MNVLc8Z5Dg9XE=
Subject key identifier: 5D:FA:0C:4D:31:B8:57:60:7E:73:44:AE:97:73:9A:26:16:5F:6A:17
Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E
Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E
Certificate serial: 05A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
Manifest number: 059D
Signing time: Tue 24 Mar 2026 22:53:40 +0000
Manifest this update: Tue 24 Mar 2026 22:53:39 +0000
Manifest next update: Tue 31 Mar 2026 22:53:39 +0000
Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: O7/TsCPa0vf5f7c4Fgv4cIMZiM93VHP23FwYhSxBjrQ=)
2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: jn/vllQFJ5XLkWrLvgI/5TwZWD2l1+MF/RPG5p6TwR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl
rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E
Validity
Not Before: Mar 24 22:53:39 2026 GMT
Not After : Mar 31 22:53:39 2026 GMT
Subject: CN=69c315f3-955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:37:9a:72:4a:99:12:f1:1a:34:bb:d2:58:
9a:41:90:af:52:36:7d:0d:a3:b0:c5:10:f5:ec:6d:
16:23:79:89:4b:2d:64:08:99:43:51:4a:60:37:bb:
61:05:22:6c:e0:ab:63:f5:99:20:36:b9:04:ce:83:
2c:ae:13:ee:de:88:ed:65:b8:a5:1a:1c:a5:37:50:
8e:95:d2:94:9f:d0:67:8c:73:22:fd:be:bf:84:23:
d8:48:2d:47:44:95:5c:83:1d:88:a4:76:2a:0d:90:
16:d1:ad:35:e2:35:f6:e5:8a:b3:d6:2b:bb:1d:55:
60:c4:88:de:80:79:47:2c:dd:52:7b:fc:d7:fb:53:
6b:a2:ee:fd:c3:7f:01:e0:4a:7d:53:e4:9e:8a:e1:
64:26:8b:67:44:e4:ff:28:12:00:3e:ef:0b:33:71:
7a:0b:fa:32:6e:a8:ec:a3:b5:83:45:cd:08:40:af:
52:9d:fa:42:8e:34:6e:ff:14:e1:2d:73:bb:20:d7:
b2:39:6f:3f:bc:62:a3:20:67:fc:bb:d1:9c:1d:49:
37:c8:05:78:1e:cc:9e:9d:d5:e1:00:21:bc:97:e9:
c1:9c:4e:f4:3f:a8:de:95:97:56:48:17:f4:c9:84:
85:a6:e8:74:f8:78:ce:74:ce:29:78:4e:a0:33:08:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:0C:4D:31:B8:57:60:7E:73:44:AE:97:73:9A:26:16:5F:6A:17
X509v3 Authority Key Identifier:
keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:16:ae:4c:23:18:41:81:9e:24:bd:7c:0d:84:46:20:6e:
b4:35:10:72:17:cb:a1:3a:e1:5a:98:89:a5:e3:7d:02:8b:81:
91:32:63:d5:a7:33:6c:a4:8d:b4:76:8e:15:3f:ab:be:95:9d:
e1:bb:16:54:fe:c4:12:bb:e7:43:37:fa:ef:8d:fd:5b:b4:1d:
36:d6:a1:0e:75:07:87:51:24:87:49:57:56:a0:fc:38:1d:43:
9b:58:c2:7c:63:22:b8:dc:25:fc:7e:7f:b7:e4:7e:3f:05:b4:
96:de:63:bd:ac:35:d4:22:aa:65:60:c7:b9:c2:01:5d:57:ec:
37:78:1c:37:c7:5c:a3:df:46:6e:64:5d:d8:f2:9f:36:87:5d:
5e:65:8c:df:2d:49:0c:80:83:3a:83:e4:1d:87:61:ac:16:f9:
0a:3a:ff:94:08:3a:e7:db:6e:10:8e:db:72:83:7c:f2:01:7f:
f1:d9:74:75:57:9a:ea:fc:b1:7e:69:d4:12:ec:74:5e:59:34:
40:54:6f:4c:ab:22:3f:dd:44:6e:e8:3f:09:65:df:9e:3c:27:
5b:83:50:08:0a:c3:0a:e5:50:3f:f1:9f:bf:4c:0b:12:bb:8f:
c2:37:d0:cf:eb:df:bc:85:7a:be:a4:a4:06:0a:a4:cb:e3:0e:
51:95:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:56 2026 by rpki-client