
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json)
Hash identifier: q33qxlfEH3FCb9dXsCv3qoaW0CObUhzASlh473UdcRs=
Subject key identifier: 3E:00:2A:76:2D:86:CC:4C:EA:64:79:2D:4F:08:B3:C8:6B:00:EA:69
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
Manifest number: 09AC
Signing time: Thu 26 Mar 2026 19:50:54 +0000
Manifest this update: Thu 26 Mar 2026 19:50:54 +0000
Manifest next update: Thu 02 Apr 2026 19:50:54 +0000
Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: SeTKu+ng59tmEwo055AByp1jNb521cuehYHKIAq1LIU=)
2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: zK6lG6qBER/8ICDiEU5RYdbytR54/LmR0O7DOfT8VTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Validity
Not Before: Mar 26 19:50:54 2026 GMT
Not After : Apr 2 19:50:54 2026 GMT
Subject: CN=69c58e1e-81ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:a9:f1:0e:ee:bd:d1:eb:cd:d7:70:61:d9:
f1:29:ff:40:a4:47:7b:48:60:c7:3b:c8:a9:8d:5f:
7d:83:01:ba:6e:b5:b4:13:dc:42:7c:22:9b:74:d8:
4e:e5:50:44:c2:ed:60:f7:b4:d9:75:e7:b7:f3:ca:
84:ab:8c:e1:15:e6:ef:5a:1d:10:de:cd:fc:51:09:
e6:b2:e4:72:32:1c:04:72:8e:95:4e:79:ba:2e:12:
e9:76:af:c9:4c:d3:7f:e9:2d:a8:1d:1b:bc:9a:0e:
6f:07:32:8c:e4:d9:c0:a4:0b:60:a8:79:ed:b0:46:
0d:0a:dd:92:19:9e:6b:28:83:2f:a4:40:80:c2:3c:
8e:b5:3e:51:cf:a6:5d:f6:38:b9:d3:49:b8:fa:6e:
d2:56:17:b2:eb:94:d5:d8:a8:5a:69:90:7b:9a:37:
e4:6e:b4:d3:7d:8a:56:c5:9c:43:23:15:af:54:26:
ba:64:37:bd:d9:21:16:be:a6:8a:e9:f4:0d:d3:95:
be:85:92:d3:75:79:f3:ee:24:98:cb:2b:c9:2c:4e:
e8:6b:9f:0d:02:90:32:9c:44:1e:0f:f1:25:f2:71:
bf:80:dc:44:60:24:b5:c0:7a:f0:c6:ec:d6:de:98:
f7:29:76:5d:42:90:2b:41:08:db:aa:37:5c:5a:dd:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:2A:76:2D:86:CC:4C:EA:64:79:2D:4F:08:B3:C8:6B:00:EA:69
X509v3 Authority Key Identifier:
keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:eb:13:7b:88:d7:d6:e2:0e:eb:3e:1b:51:5b:3b:39:80:
f7:18:70:e6:57:a2:43:80:ac:fb:79:51:c3:35:8f:53:ac:1e:
00:13:6c:68:12:b9:28:d7:b6:e4:c3:49:8c:e3:6b:79:2d:de:
5e:16:20:85:2e:25:ce:3c:7a:5a:77:b0:23:14:c5:18:74:88:
4e:a5:02:b1:be:91:bb:82:1d:79:53:a3:86:72:b1:db:b5:5a:
d8:eb:9d:48:a9:00:a4:de:3c:d0:cb:45:3c:3d:70:c9:e0:9f:
15:24:5d:17:e3:01:0e:f9:c6:62:8f:e4:19:88:c9:e5:ae:20:
a9:91:c7:3e:4c:1a:83:03:94:be:4e:3e:a8:a1:75:7c:3a:45:
59:b3:19:6e:b2:e8:31:a7:83:63:bd:09:dd:9e:98:aa:84:7a:
d9:31:b8:17:f1:7e:ec:29:fa:74:b3:ba:17:29:b5:a7:b7:59:
10:10:ce:ae:4b:3b:3e:d5:c6:e9:21:ae:0a:83:d6:74:f2:52:
7d:5b:41:6b:51:b4:aa:b9:37:42:60:9c:79:76:6a:a1:36:f2:
be:84:bd:7b:21:31:5a:9f:95:74:e0:13:4b:d9:13:28:dd:2d:
70:f7:64:4c:a1:7e:6f:5f:99:37:81:ad:c2:5b:44:29:29:5d:
d5:ed:17:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE
QUIxMkMxRjQwHhcNMjYwMzI2MTk1MDU0WhcNMjYwNDAyMTk1MDU0WjAYMRYwFAYD
VQQDEw02OWM1OGUxZS04MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT+p8Q7uvdHrzddwYdnxKf9ApEd7SGDHO8ipjV99gwG6brW0E9xCfCKbdNhO
5VBEwu1g97TZdee388qEq4zhFebvWh0Q3s38UQnmsuRyMhwEco6VTnm6LhLpdq/J
TNN/6S2oHRu8mg5vBzKM5NnApAtgqHntsEYNCt2SGZ5rKIMvpECAwjyOtT5Rz6Zd
9ji500m4+m7SVhey65TV2KhaaZB7mjfkbrTTfYpWxZxDIxWvVCa6ZDe92SEWvqaK
6fQN05W+hZLTdXnz7iSYyyvJLE7oa58NApAynEQeD/El8nG/gNxEYCS1wHrwxuzW
3pj3KXZdQpArQQjbqjdcWt1urwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4AKnYt
hsxM6mR5LU8Is8hrAOppMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2
NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ
aktEQVNCMWkzZl9hc1N3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACiDrE3uI19biDus+G1FbOzmA9xhw5leiQ4Cs+3lRwzWPU6weABNsaBK5KNe2
5MNJjONreS3eXhYghS4lzjx6WnewIxTFGHSITqUCsb6Ru4IdeVOjhnKx27Va2Oud
SKkApN480MtFPD1wyeCfFSRdF+MBDvnGYo/kGYjJ5a4gqZHHPkwagwOUvk4+qKF1
fDpFWbMZbrLoMaeDY70J3Z6YqoR62TG4F/F+7Cn6dLO6Fym1p7dZEBDOrks7PtXG
6SGuCoPWdPJSfVtBa1G0qrk3QmCceXZqoTbyvoS9eyExWp+VdOATS9kTKN0tcPdk
TKF+b1+ZN4GtwltEKSld1e0XTg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:49 2026 by rpki-client