
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier: XI5A8rnCqxQb22lBWjlY3tEaFayoaYc8WVUzy6FR+m8=
Subject key identifier: C7:3C:35:CF:40:17:5C:B1:10:4A:E8:84:3F:2B:60:EF:2D:15:04:F0
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer: /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial: 06F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number: 06EB
Signing time: Tue 24 Mar 2026 21:49:52 +0000
Manifest this update: Tue 24 Mar 2026 21:49:51 +0000
Manifest next update: Tue 31 Mar 2026 21:49:51 +0000
Files and hashes: 1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: yMptf4Y/xRbxUvj+6D1GsuNm2Sh+EHyoTzlsaILbq2k=)
2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: ujU1B1KKk8uCOgjiGvdkkocmT0/xdPECzUqBQtEEibQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B0D, serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Validity
Not Before: Mar 24 21:49:51 2026 GMT
Not After : Mar 31 21:49:51 2026 GMT
Subject: CN=69c306ff-1b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:d4:77:9f:d0:09:82:a8:37:94:fe:6e:eb:
96:41:c5:58:ce:9a:c2:d1:bf:a8:3d:00:fe:56:e1:
14:c5:5e:66:7e:56:9d:a4:fd:2a:02:01:bd:b0:2d:
0a:14:7b:a5:1d:f5:18:73:e4:17:03:35:ca:ad:a9:
de:24:f8:42:30:aa:f8:ee:28:1a:c4:71:ff:d0:85:
0f:d4:8d:30:48:ff:17:cd:c7:8d:e7:ca:a1:d7:cf:
f8:e1:c3:5a:e9:b9:77:a5:6d:c4:6a:03:a5:ae:19:
d1:11:81:0d:9f:27:c2:7a:01:ae:62:7e:66:d0:f7:
3b:b7:55:e1:74:92:8b:2c:18:bd:4a:89:bd:27:a4:
c5:ed:6f:94:48:59:ff:ce:5c:cf:47:72:cf:aa:7f:
d2:cc:85:c5:49:98:0c:36:44:3c:72:ba:ce:ee:ba:
90:19:93:36:83:ea:37:91:7b:f5:48:24:11:94:69:
47:e8:55:b1:28:92:f2:7e:09:89:4e:5a:dc:6e:c6:
4e:54:aa:2c:36:3e:ed:23:78:0b:a8:3d:95:f8:e3:
ec:40:41:81:7f:bc:82:dd:eb:c4:f4:49:dc:09:69:
4c:45:aa:a0:e6:03:95:ff:05:ca:5f:25:b4:3c:07:
79:bd:ef:b8:a4:e6:13:28:e1:39:d9:8f:65:99:10:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:35:CF:40:17:5C:B1:10:4A:E8:84:3F:2B:60:EF:2D:15:04:F0
X509v3 Authority Key Identifier:
keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f9:f0:b3:a5:27:ef:1a:2c:1b:91:e5:e2:62:ec:35:5a:33:
e1:13:25:89:0c:2f:ab:c0:20:fe:77:a8:ae:a0:08:67:5c:11:
f8:90:f0:7b:46:ea:b8:cb:a8:81:cf:0c:0b:e9:c6:50:c0:85:
37:03:48:fd:fd:62:c2:3e:bb:dd:05:51:0b:a7:e9:5a:01:7a:
10:9c:5b:de:b2:8e:52:80:0d:6e:8e:10:97:40:34:5e:3d:01:
56:66:66:bc:a5:a1:92:0e:2e:10:2a:22:ed:97:b1:fb:b4:4b:
8b:5a:d0:58:ee:9a:72:04:50:19:10:42:09:16:5b:25:cb:2a:
7e:cb:c3:5d:da:23:ee:9d:c9:6d:7e:91:56:44:01:22:7a:02:
59:24:7b:7d:d8:01:f9:ad:85:e6:07:9d:66:71:77:54:63:84:
9e:7a:9f:d8:52:d3:46:4e:a0:d2:8d:1c:28:7b:76:b2:07:59:
02:97:36:91:e1:01:e4:ef:c8:b7:40:6a:b3:ea:0c:9f:14:92:
de:c7:8d:5e:49:fc:1d:bd:32:5b:6d:3b:d5:fa:a9:6f:29:1c:
75:fc:3e:8e:88:ab:5e:ed:04:3a:a9:37:2c:1d:6a:4e:71:11:
ef:2c:0b:0b:49:ec:86:85:83:0e:36:40:1a:6c:f6:e1:07:19:
16:43:b2:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCMEQxMTAvBgNVBAUTKEU0RDYyRDMxMjk3RjE3RTQ5QzQyRkE3QTdCNjYyMzYy
NEFEOTQxNzUwHhcNMjYwMzI0MjE0OTUxWhcNMjYwMzMxMjE0OTUxWjAYMRYwFAYD
VQQDEw02OWMzMDZmZi0xYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYzUd5/QCYKoN5T+buuWQcVYzprC0b+oPQD+VuEUxV5mfladpP0qAgG9sC0K
FHulHfUYc+QXAzXKraneJPhCMKr47igaxHH/0IUP1I0wSP8XzceN58qh18/44cNa
6bl3pW3EagOlrhnREYENnyfCegGuYn5m0Pc7t1XhdJKLLBi9Som9J6TF7W+USFn/
zlzPR3LPqn/SzIXFSZgMNkQ8crrO7rqQGZM2g+o3kXv1SCQRlGlH6FWxKJLyfgmJ
TlrcbsZOVKosNj7tI3gLqD2V+OPsQEGBf7yC3evE9EncCWlMRaqg5gOV/wXKXyW0
PAd5ve+4pOYTKOE52Y9lmRDNxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMc8Nc9A
F1yxEErohD8rYO8tFQTwMB8GA1UdIwQYMBaAFOTWLTEpfxfknEL6entmI2JK2UF1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC9BMjhFQ0JDMDhB
QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi81Tll0TVNsX0YtU2NRdnA2ZTJZallrclpR
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVOWXRNU2xfRi1TY1F2cDZlMllqWWtyWlFYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUIwRC9BMjhFQ0JDMDhBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi81Tll0TVNsX0Yt
U2NRdnA2ZTJZallrclpRWFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuvnws6Un7xosG5Hl4mLsNVoz4RMliQwvq8Ag/neorqAIZ1wR+JDwe0bquMuo
gc8MC+nGUMCFNwNI/f1iwj673QVRC6fpWgF6EJxb3rKOUoANbo4Ql0A0Xj0BVmZm
vKWhkg4uECoi7Zex+7RLi1rQWO6acgRQGRBCCRZbJcsqfsvDXdoj7p3JbX6RVkQB
InoCWSR7fdgB+a2F5gedZnF3VGOEnnqf2FLTRk6g0o0cKHt2sgdZApc2keEB5O/I
t0Bqs+oMnxSS3seNXkn8Hb0yW2071fqpbykcdfw+joirXu0EOqk3LB1qTnER7ywL
C0nshoWDDjZAGmz24QcZFkOypQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:34 2026 by rpki-client