
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier: iT0tJDvs7/YuJ3eaLrTMvCkr1RD9W1SdqhFEHVls1UE=
Subject key identifier: 84:70:5F:5E:E2:FF:5C:01:BD:92:F6:F9:C0:1C:3F:58:5A:0D:95:35
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number: FC
Signing time: Wed 25 Mar 2026 05:29:55 +0000
Manifest this update: Wed 25 Mar 2026 05:29:55 +0000
Manifest next update: Wed 01 Apr 2026 05:29:55 +0000
Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: g1cEEZTN1ljaSWHqNUy2rSd17z3KpD4rkp/d++dKbj4=)
2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: WmeiamuyqIiXqThgaQ7WjBlL81T70JeikrMmaNzPLPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Validity
Not Before: Mar 25 05:29:55 2026 GMT
Not After : Apr 1 05:29:55 2026 GMT
Subject: CN=69c372d3-16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:40:89:3d:ad:7c:0b:52:97:ac:aa:db:61:
9d:6e:05:07:0c:2f:de:65:77:28:bd:79:28:72:6a:
0e:25:4c:e9:75:c0:67:c0:1b:e2:61:ae:fd:56:db:
97:9f:4a:1b:bf:6a:53:40:8b:a0:98:17:77:9a:08:
82:a9:d6:ec:c7:b6:e0:74:ae:1e:bd:c3:d0:b9:24:
07:53:37:19:86:c5:d2:46:ce:e2:16:fe:8c:a7:a9:
fc:bf:16:08:80:e3:8d:c4:4a:4e:86:33:b9:99:23:
c5:42:df:b9:63:b6:00:92:5f:30:bc:50:7b:f4:ac:
35:ad:d1:a9:4f:4a:96:55:40:45:24:66:70:d4:8e:
30:4b:f7:5c:6d:17:03:21:30:63:bf:29:df:fc:e3:
bf:96:97:c2:39:f7:ad:04:7a:d7:b6:74:0c:c1:90:
fe:72:72:e6:bf:eb:c3:c7:40:8c:db:fc:c8:ae:17:
f3:31:16:fe:1a:3e:2c:0c:ac:8f:8f:a8:f5:c0:c9:
4e:8d:9e:4c:54:d5:c9:36:3f:b3:e4:1f:6a:98:3e:
03:10:b7:75:8a:ce:ab:0a:6c:d4:8e:8f:df:15:3a:
54:ef:f1:d5:e4:a5:e9:30:db:ba:92:d9:53:3f:78:
4d:d9:f7:7a:d6:da:e5:ae:f6:78:a7:4c:e7:e3:a2:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:5F:5E:E2:FF:5C:01:BD:92:F6:F9:C0:1C:3F:58:5A:0D:95:35
X509v3 Authority Key Identifier:
keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:3b:ab:ac:ae:2c:d2:6b:e4:92:8c:25:4e:90:1b:06:7d:
39:df:79:64:57:9a:64:eb:1d:f6:4e:ae:be:36:27:75:9c:09:
4f:10:18:e5:fe:cb:2e:d5:cc:b4:67:be:fa:a1:cb:c6:90:82:
d1:48:66:93:79:74:1d:1f:e3:43:49:83:8b:ac:b3:38:a1:86:
01:4b:ec:33:2a:da:ae:f6:5b:4a:d0:32:57:f7:82:7c:3f:e8:
b5:22:2b:06:23:a6:d9:cb:8c:2f:64:e5:14:96:78:37:5e:f3:
60:a9:74:0d:73:b6:76:3b:3d:db:2c:c4:98:c1:79:58:ff:11:
3b:2f:8e:8d:e0:19:9f:03:cd:ed:39:fa:44:84:22:c6:be:c9:
c4:f6:c3:88:58:04:7f:81:85:4c:23:cf:6e:b0:8e:e6:2e:07:
82:ae:be:fb:ab:ed:11:bc:87:4e:11:db:df:f3:e8:24:81:99:
4c:72:24:32:f5:73:05:51:d5:a5:a1:33:13:70:03:86:a7:93:
a2:4b:7a:ab:f0:28:42:2b:65:09:d0:23:e3:7b:59:1b:60:ca:
cf:12:da:4c:78:34:54:9d:6e:d8:30:7f:74:d0:54:3a:49:4c:
e1:53:24:0f:ae:d7:40:8e:9f:9e:2a:20:7b:00:85:4a:03:9b:
0d:99:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:37 2026 by rpki-client