
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier: 6Y0LI0BjVvbtoFLwgXiKJXrAzhUO2HcMdNPKw9o7ngc=
Subject key identifier: 91:DC:4B:26:41:5D:69:95:FE:78:C2:72:4F:DE:9E:39:AA:2E:36:5D
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial: 1454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number: 1428
Signing time: Tue 24 Mar 2026 16:49:40 +0000
Manifest this update: Tue 24 Mar 2026 16:49:39 +0000
Manifest next update: Tue 31 Mar 2026 16:49:39 +0000
Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: O1yDEtpZkuHR5ubWe4xJS7QCqC/YZ6WjeQdZWi+MCJ8=)
2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Validity
Not Before: Mar 24 16:49:39 2026 GMT
Not After : Mar 31 16:49:39 2026 GMT
Subject: CN=69c2c0a4-5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:47:a7:89:a8:be:32:9a:2c:4e:bc:40:83:
ca:91:52:32:7e:e7:25:9e:03:2e:d1:39:92:f7:fd:
53:46:f3:e5:d5:bf:73:c7:52:b3:e8:5e:b5:6c:cd:
19:75:41:f6:92:4e:81:cb:b4:12:03:25:9f:05:9b:
73:a7:9a:c9:5b:6e:89:90:84:bf:96:c3:a1:08:cd:
94:a5:2e:f2:17:46:16:36:22:99:db:62:c6:ad:ff:
e5:e2:08:db:c5:7d:d0:e7:c7:f0:6f:87:4d:a1:5c:
7a:cd:ed:0f:b2:b2:9e:4b:58:0a:43:54:17:2c:70:
ee:23:0d:63:7d:77:e2:87:19:4a:e1:7f:28:6a:0c:
bd:c9:8e:cb:c5:09:f2:2a:5c:3c:0f:f8:7e:e9:16:
93:6a:dd:34:5d:e8:35:0a:ca:e6:b8:bb:93:d4:4e:
36:aa:17:fb:af:a1:f3:2b:c0:94:58:18:56:fd:cf:
a9:ee:25:cf:c1:9b:9e:3f:91:7e:12:90:dd:c5:99:
81:44:c8:08:e6:1a:a4:78:6e:fd:1d:a9:8e:ef:7c:
fc:0b:4c:d8:fe:cc:24:82:f9:b3:ec:90:91:7b:14:
5a:03:c2:a4:f6:1b:1d:8f:3f:d4:3b:63:08:9e:83:
06:bd:b1:c1:ef:d2:a8:b8:84:48:57:1b:af:54:d2:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:4B:26:41:5D:69:95:FE:78:C2:72:4F:DE:9E:39:AA:2E:36:5D
X509v3 Authority Key Identifier:
keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0b:30:84:b1:cb:7b:3d:2a:e9:0e:3c:ec:56:72:59:fc:54:
48:fa:11:ab:49:db:80:84:b6:6c:4f:80:13:37:64:0c:05:a6:
ff:d1:2c:11:4e:29:21:f4:a5:a4:a0:c4:94:73:a1:fd:d8:cd:
27:7a:51:03:21:4a:9d:11:f3:a3:10:1f:6d:b9:d9:c1:ff:39:
6e:89:b1:9a:ac:aa:30:84:ec:8d:85:64:f5:58:17:26:0a:c1:
0d:b4:45:7f:ee:6c:c0:ef:53:4d:fe:08:7f:ed:56:3a:11:aa:
35:b3:20:e7:ff:3c:48:af:1b:4b:05:0a:d3:eb:63:f6:6a:bd:
71:21:b1:e3:84:eb:62:58:56:d5:a9:9f:e5:86:e2:b7:b3:15:
e4:2e:ae:5f:6a:2c:91:94:44:00:68:87:6f:ae:94:83:a3:30:
38:e0:7e:06:17:b8:93:94:09:0e:25:0a:0f:7d:8a:be:1e:99:
e1:11:49:d2:63:45:a2:cc:3b:4f:c3:f9:81:d3:ff:fc:7a:5e:
3a:3e:62:fb:ff:34:6b:0a:d8:ff:b1:08:2f:85:d6:ff:a1:e9:
32:de:9b:7d:da:f1:dd:d6:f4:77:10:8c:fa:d2:ae:a6:d9:87:
df:bd:d8:9b:23:90:22:7f:f4:6f:24:69:32:c7:be:5a:d7:a4:
20:fb:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:48 2026 by rpki-client