
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json)
Hash identifier: QsY9pqoHXleeVipedGRKrYLcJ5w1u9Dc98xL+KygvmA=
Subject key identifier: B3:30:B7:A0:4D:6E:41:D2:C1:B0:90:CA:31:8A:EF:59:D5:B8:57:B0
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
Manifest number: 0784
Signing time: Thu 26 Mar 2026 21:24:51 +0000
Manifest this update: Thu 26 Mar 2026 21:24:50 +0000
Manifest next update: Thu 02 Apr 2026 21:24:50 +0000
Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: MCflNDJ3Lz7IbhiwMD6DodRQd86cAHQFDhZb8eoFCKs=)
2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Validity
Not Before: Mar 26 21:24:50 2026 GMT
Not After : Apr 2 21:24:50 2026 GMT
Subject: CN=69c5a422-1277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:11:0b:7e:1c:67:b9:ba:b6:a4:d3:7b:2d:
67:f3:33:c1:13:ad:58:01:c3:da:95:97:fe:fe:6f:
74:9e:80:2b:2a:3b:23:a2:f5:6a:1b:b1:2c:1b:11:
00:3c:98:09:bf:64:de:27:10:a2:34:58:8b:4c:c3:
52:e3:5d:a9:40:17:83:e8:fc:40:1d:1b:92:b7:51:
86:4a:bd:d2:c6:f7:c6:04:00:41:76:0b:b9:e5:f9:
9d:2b:21:7f:69:dc:17:c5:e2:1e:6b:68:10:de:8f:
ab:7b:50:bf:96:cc:19:30:77:cb:5a:fe:b0:e9:e9:
3c:b9:43:e4:89:a4:92:e8:ee:01:3c:3f:fa:5c:bc:
98:f4:01:06:19:84:c6:9b:b4:f5:b4:fd:4e:56:f5:
b3:30:ff:b6:d8:6c:8a:06:a2:0c:1e:57:60:ef:04:
2c:c3:c2:40:75:70:d2:44:df:ee:95:d1:4d:f6:2c:
dd:e5:93:7b:36:5a:04:23:0d:01:90:5e:55:f9:51:
72:15:4d:0e:18:09:20:3b:6e:ae:a8:ff:62:8e:1f:
7d:28:25:34:9d:5a:66:03:71:74:6d:a9:ce:5f:7c:
13:51:c6:aa:a4:20:22:73:22:1e:53:40:17:0e:b2:
75:c3:46:7d:cf:1a:03:6d:33:13:de:fb:66:df:96:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:B7:A0:4D:6E:41:D2:C1:B0:90:CA:31:8A:EF:59:D5:B8:57:B0
X509v3 Authority Key Identifier:
keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:cb:ef:79:2a:29:9e:f9:f0:fa:03:b9:5c:b7:d0:67:08:
93:51:ac:35:4d:fc:ae:1f:1f:3a:21:da:a2:48:a1:f8:9a:c8:
a5:81:ba:ca:e3:d9:a8:71:01:c5:5d:e0:c2:5d:4b:42:95:e0:
bb:f7:7f:e6:0d:3b:35:f6:fa:6c:b5:b5:21:a8:72:9c:af:df:
46:a2:40:a8:ec:90:2a:80:9e:3e:bb:67:12:6a:28:fb:8b:cc:
d5:97:3c:1b:db:b0:1f:46:75:a5:fc:7a:d1:99:d3:e3:8e:87:
f3:ab:fa:e6:e3:88:2f:2b:b3:96:ad:f8:84:15:c1:9b:a9:80:
11:99:d6:a0:4e:33:11:37:1e:fe:a1:a3:9d:ee:32:5c:ee:72:
1c:0e:20:54:48:a3:37:8a:55:a9:26:75:ec:e7:4e:35:98:64:
76:8d:e6:ec:35:03:25:ab:19:ab:67:2a:28:19:e4:2b:13:84:
1a:ae:43:1f:3e:6d:4b:f3:3d:26:34:b8:23:5c:92:18:c3:fb:
ea:06:8f:47:fc:52:59:d7:0a:2a:38:73:98:82:5a:7b:49:9f:
6d:b5:2d:0c:e1:a4:16:0c:75:37:0d:81:9a:9b:4b:55:fc:a4:
7e:a7:63:fd:e4:a6:ea:72:c3:c9:74:84:ba:2d:23:85:58:d3:
ce:d6:54:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:40 2026 by rpki-client