
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier: usRw0ZkgnUyK5dtZJOs1hGO1j1LGZCWeoLWa6kdNucw=
Subject key identifier: 2F:60:26:E1:3F:7B:4B:DE:7E:2E:1A:D1:24:82:9C:F6:00:CE:5D:79
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number: 0210
Signing time: Wed 25 Mar 2026 02:19:56 +0000
Manifest this update: Wed 25 Mar 2026 02:19:55 +0000
Manifest next update: Wed 01 Apr 2026 02:19:55 +0000
Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: +i1CtEa5+z5E3TBvrwOr6oRrh2oYF9GUZJvAVbfxCxg=)
2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: UjPClW0uFtHm8QVkzT1vV63CuJ+wSKL/8pPiNqjGxQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Validity
Not Before: Mar 25 02:19:55 2026 GMT
Not After : Apr 1 02:19:55 2026 GMT
Subject: CN=69c3464b-3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:c8:6c:a8:d4:54:06:0a:d3:07:10:7e:5e:
61:92:6d:68:83:e8:5c:a8:fa:bb:c5:ed:86:56:42:
f1:93:ac:da:98:10:62:1f:a1:29:7b:b4:44:63:bc:
68:80:29:a8:a3:da:8e:f7:2d:0b:fa:7e:5a:bc:38:
4f:91:a5:35:c8:fe:c8:8f:98:57:31:b7:68:9d:8b:
2d:fd:51:13:89:7f:f6:ea:29:99:a2:61:f4:80:43:
e7:8e:25:ee:b2:77:df:96:f1:34:bf:f6:23:f0:6a:
81:b0:6b:78:4b:2b:80:d6:d1:93:21:6e:d5:0a:e5:
f9:35:0d:21:d8:a5:aa:09:f5:64:d0:f7:ca:5e:4f:
b2:6a:40:c6:f7:a8:d1:16:f7:8c:07:4e:f2:c7:d2:
f6:df:ad:dc:75:7c:e9:6b:e4:18:b9:c6:54:d6:3d:
ef:f7:7e:cb:15:ee:49:8e:55:32:5a:6d:a4:dd:f1:
58:fc:9a:53:ab:b6:b3:03:b4:39:87:03:4a:c6:8c:
b2:37:8f:02:e3:f2:f1:50:b3:a7:0b:4f:ef:58:4f:
7e:cc:b7:59:d3:ed:dc:fe:90:d3:38:74:bd:07:ef:
73:f1:6c:33:ec:b5:78:ff:f3:13:e6:36:aa:18:89:
f0:f3:17:41:f6:b2:88:b9:3e:be:2c:08:f9:14:89:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:26:E1:3F:7B:4B:DE:7E:2E:1A:D1:24:82:9C:F6:00:CE:5D:79
X509v3 Authority Key Identifier:
keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bc:ee:52:0c:6d:1b:8c:86:cc:9a:f0:bc:0d:0d:00:e1:b3:
54:fc:5e:b7:4d:38:ca:12:f3:b5:2a:0d:ac:05:55:6e:87:9f:
fa:eb:bf:5a:ae:d1:b4:49:48:34:74:51:a8:0c:62:d8:fc:53:
1b:8a:64:41:c1:52:b4:43:36:9d:70:1d:dd:19:0e:13:c8:cd:
e4:ad:7d:73:a5:6b:84:44:2d:2e:33:b9:03:e0:ea:cf:a6:d7:
27:79:75:3f:72:5e:33:33:d8:29:3a:04:2c:53:9d:92:0c:fb:
b5:6b:62:70:05:90:db:89:ab:b4:3d:3b:a6:24:00:4d:20:1c:
7a:32:17:32:32:7a:f9:9c:a7:7b:f7:b8:63:97:83:90:87:56:
a3:0f:3c:0c:a9:ef:34:db:8d:c0:21:27:1d:99:93:e3:2f:51:
8a:c4:68:10:10:4e:34:a9:f0:7b:72:14:e2:9c:71:37:7f:6e:
5e:53:c9:1b:d7:3c:82:ab:cb:16:bc:d4:8d:f4:04:cf:a4:b1:
4d:71:a4:fc:01:12:b1:e5:53:45:85:06:6b:99:84:79:59:66:
9d:75:c7:bf:9c:e6:d3:ae:20:1e:43:53:e8:30:cf:5f:f1:9e:
e0:80:f5:43:97:68:d7:0a:f6:eb:0a:3b:5e:90:42:5b:4d:16:
b9:6e:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:54 2026 by rpki-client