
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier: /f8zxttfqM39LIIrsldEVTnFzkQqtG7HfKVLW5rQFVc=
Subject key identifier: 65:D4:60:10:CD:92:ED:19:8E:B7:55:FC:D6:51:F5:3D:74:58:CD:10
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number: 01F5
Signing time: Wed 25 Mar 2026 02:34:07 +0000
Manifest this update: Wed 25 Mar 2026 02:34:07 +0000
Manifest next update: Wed 01 Apr 2026 02:34:07 +0000
Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: ZUK1+1Nnjf+URu48NNqFfhz4f7RoyWHTytQFYnqv0MA=)
2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: NZR7cop8QVWqUsDBeZWfV0zvXiChucbzAQ2g4pUVe3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Validity
Not Before: Mar 25 02:34:07 2026 GMT
Not After : Apr 1 02:34:07 2026 GMT
Subject: CN=69c3499f-8dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:ca:fd:23:42:dc:d1:c6:09:35:45:50:fd:
f3:8c:b3:13:cf:01:88:1b:07:7a:4f:65:c8:ce:22:
20:00:03:22:4d:ea:58:4d:7f:7e:0d:da:b2:4f:2c:
98:5d:63:25:95:57:ba:3a:fe:fc:9f:be:cf:20:41:
dd:b0:14:cb:84:a5:ec:12:f7:e3:ff:a8:74:b9:bf:
05:f5:b9:40:1a:91:76:76:f1:73:72:85:a0:ce:35:
83:fb:27:c3:50:c7:f8:d4:bf:cc:81:84:f5:66:43:
b4:31:b8:ad:47:e2:ea:e4:8f:06:7a:cd:2b:07:d1:
30:94:f7:80:7e:53:1b:f2:55:83:9b:cb:af:fa:98:
fb:e9:61:b7:0e:60:f4:74:e2:90:93:cb:fb:e7:23:
a6:7d:2e:27:b3:6c:ab:6e:98:8a:0a:1b:68:34:df:
46:37:1d:d8:d8:ab:ad:17:23:18:c0:e5:29:aa:4d:
fd:af:12:ff:4f:bc:66:8c:75:19:75:cc:48:77:3d:
4f:31:c5:06:8a:83:be:8c:ad:47:2b:98:e7:a8:82:
d3:b6:ad:42:fc:47:f5:ff:be:08:9a:bf:f0:a3:f0:
57:22:ce:50:f2:cd:80:b6:dc:69:78:56:c6:73:3d:
a6:dd:12:70:83:f1:63:e6:f4:60:08:03:ff:e8:e0:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D4:60:10:CD:92:ED:19:8E:B7:55:FC:D6:51:F5:3D:74:58:CD:10
X509v3 Authority Key Identifier:
keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:00:a5:95:b6:57:4e:35:23:cf:8b:bb:1e:96:9f:ef:7a:6e:
de:74:82:7a:6e:92:ff:72:10:88:5e:1c:1b:d9:8d:19:e6:cb:
eb:58:f9:be:d4:07:09:a3:43:62:5f:d2:24:d2:9b:59:c5:a5:
3b:41:37:0f:26:65:0b:22:15:df:69:a2:06:5f:e5:b5:3b:bd:
a2:df:47:20:16:c2:56:0c:4c:90:75:76:fc:c0:01:40:6e:a4:
1d:c5:6b:1d:37:02:83:40:bb:df:9c:ac:fa:14:23:b6:2d:54:
56:c5:69:b7:c0:b7:64:d4:3b:dd:10:65:c3:97:4c:91:2d:f5:
b0:ba:5c:c2:6f:9f:65:94:c5:e2:f1:92:4b:25:c3:49:8c:b1:
f3:4a:ef:4b:c9:c8:63:a6:3f:7b:7c:83:5c:83:38:3a:95:e0:
47:a6:a9:26:b8:b3:8b:3c:fc:74:aa:90:39:ab:e1:be:a2:31:
c0:7d:92:44:7e:96:e5:65:a9:6c:66:02:c7:00:73:28:4b:43:
43:eb:bd:ba:b4:87:4c:ad:e2:e3:ae:0d:32:30:0b:bf:c6:be:
99:d8:ee:ec:18:ff:c4:dc:51:47:2a:63:27:d4:bc:7d:6a:66:
fa:b5:34:18:55:61:ef:c2:aa:8b:30:30:e4:0c:dd:94:c4:6d:
bd:d4:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:25 2026 by rpki-client