
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json)
Hash identifier: a02xoMdMe66MBEjlZ70RLc0BLRrJuyDowvWOfCzWOGM=
Subject key identifier: 16:A2:FF:AB:42:39:B4:EC:39:0B:FB:F0:1C:D5:D3:8C:C0:42:D0:C4
Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Certificate serial: 0712
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
Manifest number: 0707
Signing time: Thu 26 Mar 2026 21:48:39 +0000
Manifest this update: Thu 26 Mar 2026 21:48:39 +0000
Manifest next update: Thu 02 Apr 2026 21:48:39 +0000
Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: Dj3pCMQRPZy3Crd2VwYIQ+AmNkTL42byYm9MEmVDByM=)
2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: pbEuFfcN0Cf82pQV3b1lTzxKeQZd/9psLm0KfUgnVXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Validity
Not Before: Mar 26 21:48:39 2026 GMT
Not After : Apr 2 21:48:39 2026 GMT
Subject: CN=69c5a9b7-2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:e4:15:97:3b:59:0b:37:72:17:2f:ba:ca:
70:7b:2c:b5:f8:60:45:6b:62:8a:1a:94:05:94:50:
8a:25:ac:fe:dc:5e:28:13:58:e1:51:78:16:31:4a:
fe:7d:b4:8e:c6:3e:74:69:4a:26:8b:fb:bc:cb:6d:
31:47:dd:d1:a7:63:33:af:c9:42:29:64:d5:e4:54:
15:63:23:2b:0c:44:00:6b:87:9b:66:73:c3:f8:f5:
e8:73:9e:e4:1b:b3:d0:eb:dc:6b:79:9f:1b:c2:3e:
1b:11:ea:1f:97:13:b3:52:e9:ef:cb:3d:7d:86:56:
a1:83:8d:fb:77:54:f1:df:92:c7:4a:5b:de:a8:3d:
78:c1:db:03:dd:ef:a1:0c:e5:8b:89:13:53:3a:8d:
34:8b:90:4d:98:2f:3d:a6:9e:b9:b7:15:da:3e:17:
24:00:f8:af:45:3e:2b:8d:2d:7b:9d:9d:43:78:21:
91:9b:84:6a:e3:bc:7a:f2:ec:f9:65:01:2b:d3:fc:
2d:f9:db:34:88:1d:ff:f4:b1:0f:5f:68:89:60:58:
02:10:8a:35:76:9f:1e:db:3b:24:86:1c:f3:cf:b8:
64:6c:d6:e6:d1:80:45:2a:b7:f3:31:f7:7a:0e:24:
4f:53:84:dd:0d:43:8e:ee:5c:b5:58:98:16:09:48:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:FF:AB:42:39:B4:EC:39:0B:FB:F0:1C:D5:D3:8C:C0:42:D0:C4
X509v3 Authority Key Identifier:
keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8f:3a:9a:3b:6a:21:df:cb:47:e3:b0:2c:dd:0a:94:56:84:
b6:52:80:88:f5:f3:ec:c5:9c:09:69:0d:0a:2a:63:9e:dd:b6:
10:4a:21:57:9c:d8:0f:98:40:5c:44:5d:ca:98:6c:b3:4d:17:
14:9b:5d:73:60:86:3e:90:fe:a8:a2:a9:29:bf:6c:6c:77:b0:
ee:60:ea:fd:0e:f0:e4:03:96:bd:79:36:5b:77:4b:09:be:5c:
f4:13:dc:3b:97:fa:0a:66:0f:d1:de:2f:41:24:7c:49:dd:ac:
94:79:71:bf:a0:bd:40:18:fb:9f:7d:97:ac:68:14:74:23:22:
81:f4:e2:27:c3:7c:3a:30:df:93:81:e5:c8:3d:71:8e:8a:a9:
da:a3:a7:f2:89:fa:9d:0c:29:39:7c:9a:7d:2f:40:58:aa:68:
d5:ff:f0:91:6b:ef:19:d4:7c:0d:a2:e5:a5:15:2e:5d:fc:b0:
99:d9:8b:db:02:d0:46:e2:61:3f:12:cb:a3:6e:95:36:49:49:
41:79:91:d0:45:e6:de:3f:d0:02:77:b1:db:2a:5b:b4:c4:76:
91:aa:c8:2c:ad:c8:c3:c2:81:8d:e0:c9:fa:17:bc:e7:ed:5f:
a9:25:10:9c:10:f5:8d:a1:ed:5d:a8:9a:66:a0:dc:be:f2:67:
a8:b6:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:07 2026 by rpki-client