
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier: hRChBtz7P5ienWCWD3wNIytQwkUBEZcsBMQFOdNtZkA=
Subject key identifier: FF:DC:DE:0C:15:F0:00:C1:9E:BD:97:09:BC:6D:39:C3:E6:47:C4:91
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number: 0158
Signing time: Wed 25 Mar 2026 04:15:20 +0000
Manifest this update: Wed 25 Mar 2026 04:15:19 +0000
Manifest next update: Wed 01 Apr 2026 04:15:19 +0000
Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: FZuU1+FOAgi4xJGFX88OqHYQ5r6vGuYqtPCMqpTBjb0=)
2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: uaEjjX3xQXPDwGTVKpdhJdD/ZyTOwq1GfMDyFN6Pqjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Validity
Not Before: Mar 25 04:15:19 2026 GMT
Not After : Apr 1 04:15:19 2026 GMT
Subject: CN=69c36158-0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:f9:ac:64:ff:76:65:a7:b0:0d:7c:3c:f6:
77:23:c4:d2:ed:09:31:a6:e2:6a:72:7f:c3:e4:c6:
f4:86:8a:dd:61:e4:e7:79:0f:1a:89:fe:88:23:8c:
ce:69:e8:42:2e:78:8a:16:41:fa:fd:6a:fc:ac:57:
69:7c:55:90:06:4c:ab:53:62:e5:13:00:43:d0:22:
75:d0:91:a3:b9:d3:1a:3e:de:63:e3:b7:2a:6e:6d:
f9:f2:dd:82:48:38:4c:10:6f:7c:53:a4:bd:57:87:
b3:a1:11:22:f0:24:60:5c:3b:ba:ca:b5:ec:44:7c:
d9:22:e9:ad:09:6d:2e:ff:18:ff:b1:e5:44:b2:f6:
78:c3:e7:50:4e:d6:c9:81:6f:54:85:a4:ff:27:b9:
18:a5:33:77:80:55:ce:c9:10:e6:1e:e3:0c:69:64:
0f:9c:77:ab:aa:d5:8b:00:31:67:22:fa:e6:18:f8:
31:3a:50:9d:71:ab:d3:45:5c:29:d1:72:d6:c4:4a:
8f:96:9f:2e:f6:84:e3:19:0e:e7:bd:0b:06:90:61:
e3:f0:72:f3:bb:ba:d3:18:18:6f:34:1b:e1:8a:10:
0e:46:bf:99:43:b8:4a:87:19:04:0f:d8:33:be:f4:
42:7e:9b:b3:6f:e8:88:ea:08:e0:02:ae:fd:dc:36:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:DE:0C:15:F0:00:C1:9E:BD:97:09:BC:6D:39:C3:E6:47:C4:91
X509v3 Authority Key Identifier:
keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:54:22:6c:ec:f1:07:fe:fb:b1:b9:ba:d9:e5:7e:5f:84:f6:
90:09:41:e3:49:ed:38:d0:32:72:1e:a5:d6:59:34:ba:9a:a6:
53:a4:e4:06:5c:25:b0:75:05:da:eb:5e:3b:3c:61:18:a2:58:
fa:a5:26:83:8f:3b:64:b3:f1:31:46:49:d2:51:71:c7:d5:48:
ab:5f:8b:3f:7d:85:48:98:f2:91:6a:5c:d8:7a:8b:26:0a:6b:
ba:40:64:89:60:4c:dc:9d:d4:f5:bb:23:c0:cb:f5:12:d4:d0:
35:1f:8b:23:7e:fb:df:3b:a1:5d:c6:34:dc:2a:a2:68:6e:ac:
4c:ef:48:a4:cf:44:35:98:6e:f5:60:b6:c5:c5:27:c7:75:e8:
31:1e:52:22:9c:5f:d7:fd:74:72:d9:8a:0d:24:61:a9:3e:47:
84:29:3b:75:6b:c7:30:8c:a3:4c:ce:75:04:a7:6b:f2:f8:c6:
33:c7:97:c2:60:99:9e:09:b5:06:b4:63:51:98:e5:34:3b:5b:
05:66:35:59:67:46:71:26:51:fc:da:b4:ed:b8:e4:90:c8:f4:
14:53:79:e3:5a:94:37:a4:0c:74:c6:55:15:db:6e:b8:71:f2:
82:c7:c1:b0:f0:63:2e:e9:ec:3b:3b:8c:77:c8:51:2d:f8:c2:
c9:5e:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:02 2026 by rpki-client