
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier: 0e9ttK2QwZ4ntXV6aBhHnbjtmPpzzRj34d7r3uaBdjc=
Subject key identifier: 47:4E:99:47:FA:A9:CD:DB:DB:12:47:A0:CC:22:50:BF:29:E1:54:AE
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number: 014B
Signing time: Wed 25 Mar 2026 04:21:20 +0000
Manifest this update: Wed 25 Mar 2026 04:21:19 +0000
Manifest next update: Wed 01 Apr 2026 04:21:19 +0000
Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: D3t6M6vHbXiRzsFIWZvT/G7KXMXDrPABz7p8Wv+NPGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Validity
Not Before: Mar 25 04:21:19 2026 GMT
Not After : Apr 1 04:21:19 2026 GMT
Subject: CN=69c362c0-70e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:21:af:8e:63:20:23:1e:f5:30:7a:7d:27:
0d:f6:99:44:c8:b7:9b:92:9e:63:ef:09:83:62:80:
db:0a:1b:06:89:e2:b3:ce:33:ef:36:5e:1b:04:fc:
0f:8d:d0:3b:55:5e:ea:40:ca:e1:02:34:82:df:0f:
87:d3:df:5a:de:90:f9:62:1a:25:41:ec:d9:2f:be:
ba:53:d0:e9:c5:46:17:cc:d2:ce:ed:36:97:98:f0:
e9:7c:91:2f:52:eb:aa:71:2f:b6:7d:b0:eb:5f:74:
c7:cc:de:d8:e8:8c:71:2d:8b:dd:d8:1d:73:7f:66:
08:da:4e:44:f2:18:29:ec:e9:c8:95:ea:b8:0c:34:
19:1f:38:cf:6c:c9:7b:38:fe:42:b1:18:0f:8d:95:
a1:00:8c:32:59:1d:e7:83:36:0a:ba:bf:57:55:91:
91:f3:2f:87:8b:52:98:a8:74:a6:11:f3:5e:6e:68:
a4:21:5a:79:09:d9:71:1f:59:1d:76:bc:bc:c7:92:
83:4d:df:32:a5:81:d5:55:d9:5b:6c:35:c3:49:eb:
97:5e:6e:ab:38:40:f9:64:ad:14:e8:0a:4f:b0:5c:
ca:2e:1b:d7:cb:ba:8a:24:c6:00:65:50:27:db:ab:
bc:9c:a1:6d:41:11:dc:11:18:fa:6c:4a:f9:33:d4:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:99:47:FA:A9:CD:DB:DB:12:47:A0:CC:22:50:BF:29:E1:54:AE
X509v3 Authority Key Identifier:
keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:85:5d:4d:c6:71:a4:e4:e2:b5:5d:8c:69:64:e0:77:60:fa:
c6:0c:07:30:01:33:d8:c7:6e:18:12:7f:dc:86:3c:bc:19:47:
11:78:d8:6d:3e:10:66:33:b6:e6:e9:fc:02:82:27:6b:91:5b:
11:59:3d:4a:88:79:e8:dd:f4:11:46:26:eb:91:c2:d9:0d:f0:
e1:d7:72:4d:fd:26:0a:d4:06:0d:5f:6b:31:4f:b3:d3:91:16:
6e:c7:e6:08:6b:a3:44:af:97:80:25:61:a0:d9:64:92:54:1e:
1b:8d:c2:71:91:f9:37:ed:4d:56:6b:5c:1b:7f:6d:02:c0:c4:
93:24:00:3b:5f:26:ca:8e:fc:1a:9c:d7:71:ae:24:dc:1b:77:
e7:de:2f:72:ce:8d:77:99:52:e4:7f:79:9b:7f:f6:b2:ec:ca:
67:f8:2b:1e:a9:1d:02:07:f4:5a:23:f1:43:76:6d:0e:bf:0a:
40:0c:9f:f0:7b:6b:58:cd:ad:29:44:d5:26:92:b4:b0:03:ad:
d5:3b:a8:32:12:35:22:2d:0a:64:7d:59:e8:af:eb:27:89:54:
1a:d5:57:e7:e0:1d:f8:19:12:de:d9:77:62:3d:2f:49:e3:7e:
c0:6c:b9:75:4b:6b:c1:9d:10:b0:76:7b:0f:f3:78:78:1d:ce:
16:d5:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:28 2026 by rpki-client