
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: hHi3nVnUv6bZknGryOxFh3KyRyc2GH9u0VcAy4zc74Q=
Subject key identifier: 20:E4:54:9C:D3:B8:94:64:D6:AC:BC:FE:73:10:EA:4B:C9:64:92:C3
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 06F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 06E8
Signing time: Thu 26 Mar 2026 21:58:37 +0000
Manifest this update: Thu 26 Mar 2026 21:58:37 +0000
Manifest next update: Thu 02 Apr 2026 21:58:37 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: Prl3f4aVDpgp6pf5glCNuoIpDGWhRzvnm/5uz0vD3mA=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777 (0x6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: Mar 26 21:58:37 2026 GMT
Not After : Apr 2 21:58:37 2026 GMT
Subject: CN=69c5ac0d-1190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:ba:d5:51:4e:a8:b2:c6:3f:60:60:a0:b5:
19:87:41:2d:d0:b3:fb:16:0e:3c:51:fd:e7:8a:1a:
3e:a2:44:82:b0:36:e3:ff:ab:be:19:41:f3:f4:b4:
03:2b:1d:95:02:f0:e7:3c:d8:26:27:5a:9f:36:e9:
ec:d1:da:17:4c:10:a3:13:9a:3d:e7:74:f5:bf:e5:
ee:4e:80:8e:0a:56:5c:05:23:9f:b7:df:6c:37:de:
71:00:f2:b6:e7:7c:fa:97:c8:07:29:8e:a6:b5:1b:
a1:ca:af:02:34:26:a8:7f:bc:ab:74:3d:58:bf:57:
42:c9:6b:89:da:e4:8a:ac:fc:dc:58:53:c9:b0:4b:
7b:d0:d0:a0:8d:ae:8e:01:51:42:bf:15:21:aa:9f:
eb:ab:c6:07:1c:57:e7:aa:08:46:be:af:a7:66:23:
8d:bb:d0:a8:16:be:dd:88:05:a0:27:f4:da:34:85:
f4:e1:bc:a9:be:ff:a3:95:7d:5a:e0:16:31:46:57:
1e:f5:81:dd:8c:53:d9:31:89:f0:e3:9a:7b:05:6b:
f4:a1:c5:34:bb:bd:93:cf:eb:ae:48:03:bc:37:bb:
52:a2:47:88:f5:9d:25:04:ef:70:7d:8a:ba:52:09:
67:9e:a1:f9:30:92:31:7d:55:e8:e4:34:f7:0e:7a:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:54:9C:D3:B8:94:64:D6:AC:BC:FE:73:10:EA:4B:C9:64:92:C3
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:0f:07:ce:d0:48:c6:f8:15:ca:89:21:d3:cd:f5:fb:db:
f9:3e:da:73:6f:f4:b0:2c:ac:99:70:ad:77:3c:47:8e:8e:ce:
09:db:f9:3f:a5:38:a5:09:21:61:16:75:ff:c7:95:54:71:0f:
ab:6a:32:8c:b6:9f:45:4e:c9:50:71:a7:f9:dd:a4:08:67:b1:
48:3b:60:ad:a3:05:fe:e5:e6:a8:90:79:78:79:cb:53:81:a5:
af:c2:96:7a:74:31:f3:c7:dd:0a:49:c8:e4:20:8a:1b:cf:17:
10:d8:9e:73:c0:dc:b8:0a:32:21:20:62:a1:85:5c:e1:e5:f8:
72:be:fc:96:44:cc:01:77:75:1b:ca:a0:4f:11:da:15:44:d6:
f4:77:5e:42:c6:5b:92:68:75:b7:93:59:04:ca:28:28:10:c8:
f2:87:c5:30:7b:26:0b:ee:1a:42:2f:e5:a8:91:fd:10:f2:79:
7b:51:39:60:79:cb:97:e4:a0:6f:c1:01:06:eb:fb:b5:3e:ce:
92:73:ed:3f:de:e2:1c:b7:64:cf:9c:a7:d0:29:65:73:76:9a:
14:04:fa:71:be:7e:38:d1:9c:7c:01:6f:48:2d:ae:15:93:a3:
23:c3:ac:85:bc:ce:f6:43:2d:c8:2f:e0:35:ed:f2:f3:61:c4:
ae:0c:a9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:53 2026 by rpki-client