
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier: dyd08dsz2j06RHgH4UhrTPR+R1eN/JvpsDI6BIIFcUo=
Subject key identifier: AE:97:98:B6:07:D2:95:4A:F8:D2:0C:8A:AE:05:D1:9E:00:76:1B:87
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial: 049E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number: 0454
Signing time: Tue 24 Mar 2026 23:54:31 +0000
Manifest this update: Tue 24 Mar 2026 23:54:30 +0000
Manifest next update: Tue 31 Mar 2026 23:54:30 +0000
Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: VK5B5bgpvRt9ztgEUg2YIzaEhowXOJ2wXYkRoiIxS1U=)
2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: PuL+mA1dV7Hh7bENHYnKx3eA2jTd4Smp4c1oR/M4V58=)
3: 06820D08961011ECA540626AC4F9AE02.roa (hash: 3dB0qB5yNmzIvDRiuP2+fGgguKKPz4Cvi65Utf4OECk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Validity
Not Before: Mar 24 23:54:30 2026 GMT
Not After : Mar 31 23:54:30 2026 GMT
Subject: CN=69c32436-b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:db:dd:1e:8e:1d:ae:d7:cc:b5:3f:78:92:
a3:3b:d0:29:40:a8:b3:0d:d9:07:d2:1e:34:59:38:
f6:b0:59:01:18:38:e9:ba:b2:4b:e6:b2:82:4b:86:
19:79:06:99:11:3c:5f:72:d7:6a:e0:d5:4b:52:5a:
2f:3d:3e:3b:58:61:e4:94:4d:da:58:3c:f7:da:24:
f7:9e:cf:24:c6:b2:54:8d:cf:d7:b2:75:c6:b2:17:
2f:3d:aa:ac:0e:e2:aa:71:26:d5:ec:0b:75:85:ff:
24:f7:f6:a9:ce:39:dc:c4:72:9e:bd:db:cf:93:97:
9a:3a:da:8b:e5:7c:b0:88:87:82:7b:c5:60:28:bc:
69:91:90:d6:bd:51:52:4c:73:4b:6c:f2:4b:de:0c:
2a:8b:43:25:c3:c8:1f:de:34:ff:b3:33:83:38:51:
02:d5:66:68:d7:5a:b5:f5:02:2d:4a:29:47:1a:42:
fd:6e:8d:18:34:26:0a:30:9d:6a:0c:10:18:18:ca:
75:c5:1d:8e:0b:d8:41:e4:5b:56:bd:0d:bd:73:df:
86:9c:6b:9f:bf:e6:d0:9d:cf:4a:59:7d:a0:3a:31:
34:fe:d8:1b:65:99:61:69:82:62:c4:0d:79:5e:cb:
72:31:ca:32:a9:46:29:5f:12:82:8e:ba:a6:c1:24:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:98:B6:07:D2:95:4A:F8:D2:0C:8A:AE:05:D1:9E:00:76:1B:87
X509v3 Authority Key Identifier:
keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9f:59:7d:89:c1:15:6f:d8:84:80:91:2b:9e:78:bf:c3:95:
2b:aa:55:02:db:90:fa:ef:09:94:b8:65:57:c2:f5:38:56:ca:
31:0a:8c:b2:40:db:c3:ad:c5:33:90:a7:29:7f:4f:12:c8:47:
c6:59:79:65:39:ec:db:f0:57:ed:4d:0c:da:e1:61:e2:a7:ca:
4f:5d:eb:d8:bb:66:7a:d2:fa:94:a0:7c:81:3f:98:40:43:86:
1b:9e:ba:29:98:2a:85:f7:27:29:4d:7f:58:d8:97:e6:fe:23:
eb:b0:09:66:dd:aa:1f:2c:10:3f:af:84:51:a0:59:a8:15:dd:
fe:02:44:02:36:86:6b:8e:01:3c:32:69:aa:f4:cb:9e:1c:8a:
10:ba:df:ac:8d:c9:a0:40:42:6e:b1:a9:84:86:f4:26:a2:99:
8a:81:1b:51:ee:fd:e1:25:48:d9:52:d3:0d:22:a4:2a:bf:85:
ac:a5:b5:b4:8a:5a:6f:69:2b:ed:24:b1:1e:20:5d:e5:db:2c:
75:eb:6f:53:9a:f1:95:db:f8:e4:fa:ba:18:22:10:9c:99:a8:
83:77:23:f3:09:d5:2f:52:01:66:76:cc:9a:bc:c7:02:8f:a8:
d7:59:31:d8:f3:9c:6e:53:1d:3d:fb:21:be:0a:c7:8d:57:73:
31:0c:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:28 2026 by rpki-client