
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: LEu1GDaP7l6tFgLeFmmrA3XJo5K6PDDc0o0JfnPnM9E=
Subject key identifier: 3B:20:8F:66:8B:1B:7A:EE:40:F5:9C:80:41:91:A2:D3:04:5C:11:C3
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 0237
Signing time: Wed 25 Mar 2026 02:40:36 +0000
Manifest this update: Wed 25 Mar 2026 02:40:36 +0000
Manifest next update: Wed 01 Apr 2026 02:40:36 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: mg05V/DB+MQV5qjs2Stmww/BvKc24KacyE9QIL/FA5A=)
2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Mar 25 02:40:36 2026 GMT
Not After : Apr 1 02:40:36 2026 GMT
Subject: CN=69c34b24-4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:72:f5:f0:bf:e5:27:47:41:1c:21:b0:e8:
ed:c3:d3:4c:69:06:24:0d:e4:36:5b:3b:d4:73:39:
68:21:43:11:76:69:76:de:ee:9c:a9:76:63:a2:92:
8d:18:84:40:d2:80:8f:78:98:44:e0:63:e6:a9:c3:
6d:4e:16:29:20:42:9f:b7:a6:13:1c:97:05:e7:b5:
0f:e0:b5:4c:57:b8:90:29:1a:ae:08:42:d6:8a:d6:
f7:76:62:bb:ef:24:60:af:cd:36:5a:79:7c:aa:e0:
01:0d:45:0a:34:97:fe:64:70:a2:f7:90:1c:45:53:
2e:21:43:84:2f:fa:29:7b:17:06:06:66:e8:32:a5:
b6:9c:db:28:9a:89:5e:29:39:b2:f3:ad:57:45:8e:
9f:2f:69:82:73:e7:9d:26:49:09:5a:9c:4f:5e:02:
d6:bb:d0:11:37:c7:3c:0b:37:91:ef:da:8c:5a:25:
50:3e:b7:9f:71:8f:d0:bf:59:c3:a7:bc:fa:1d:13:
58:b1:c1:59:05:0e:62:b7:3c:ea:6f:7a:5c:52:27:
44:4e:ce:16:0d:50:8a:b5:fa:c3:ae:c4:ca:1a:90:
ba:48:77:f8:cb:45:4c:9c:85:06:14:17:8f:f5:ce:
70:b9:d9:be:b8:73:d6:4f:e6:4d:6f:91:b3:57:ff:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:8F:66:8B:1B:7A:EE:40:F5:9C:80:41:91:A2:D3:04:5C:11:C3
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:96:f6:7b:b5:52:ac:eb:bc:16:53:89:bd:d4:da:82:16:
64:59:90:68:23:cd:62:30:03:bc:c9:0a:2d:43:2c:18:04:c4:
d9:b0:4e:f1:7d:79:6e:32:c4:51:fe:90:a2:a2:cf:10:72:ee:
20:8f:dc:b8:c1:d5:dd:62:c4:89:53:cd:5a:70:a5:64:8a:8c:
f8:07:15:3a:4f:1e:b2:d4:0d:16:76:b8:f6:42:b3:b5:31:c6:
bd:62:18:3e:8a:cb:98:67:f2:b5:ac:91:93:3d:fe:54:05:54:
1f:91:5a:d1:08:0b:fe:3c:6d:5e:53:ff:39:3e:f7:39:d0:67:
a8:a8:2b:56:f5:01:31:39:ef:80:4f:3c:eb:40:f0:cd:32:d4:
64:b4:d1:81:6d:b1:05:cb:db:65:d5:62:76:f6:e8:af:1a:43:
ef:50:02:76:03:1a:32:67:d3:7c:65:e7:8a:07:26:fc:64:b9:
13:dd:ff:d9:94:f7:00:8d:ea:39:74:c9:a7:21:77:93:11:92:
04:3f:fe:52:3d:c1:c7:b5:5b:7d:8b:48:ff:74:f2:43:62:6e:
c7:96:20:e0:34:52:b7:59:67:bc:df:ec:fd:cf:3a:04:49:d3:
ac:89:2c:2f:83:14:22:80:c0:d1:d6:10:ec:cb:14:a1:57:4c:
8e:6e:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:39 2026 by rpki-client