
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: j4DaeQBidIjR7qVUgeHjef4mXkBnmOAD8pjq+E6p7gI=
Subject key identifier: EB:21:CA:78:D5:C7:C8:C8:02:42:DA:73:FD:04:60:7C:AC:94:18:BE
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: F9
Signing time: Wed 25 Mar 2026 05:28:45 +0000
Manifest this update: Wed 25 Mar 2026 05:28:44 +0000
Manifest next update: Wed 01 Apr 2026 05:28:44 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: fPxyfypSIlq14/Q4icHzGvGrvS6nnztkeXHUjq3EI1E=)
2: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
3: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Mar 25 05:28:44 2026 GMT
Not After : Apr 1 05:28:44 2026 GMT
Subject: CN=69c3728d-32e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:56:b0:d0:d2:e6:53:48:80:a4:6c:a5:35:
51:1a:53:f0:ff:65:8e:64:55:c7:6e:1e:b4:cc:52:
09:a4:a2:20:c1:2a:e0:5f:37:93:34:40:ae:25:31:
36:0b:85:5a:78:f7:92:09:c9:83:ac:fd:dd:95:9a:
29:93:2a:2a:58:21:15:94:f2:ba:2f:8e:5c:48:05:
ab:82:a5:6e:ba:9c:38:22:75:d4:26:2b:97:97:a4:
27:a3:48:34:f9:0a:a2:fd:30:40:5f:f8:2b:d3:28:
cc:94:50:47:7e:2c:a9:ab:6d:20:38:96:7c:f3:36:
14:5c:c7:fb:68:75:be:61:ad:d3:b1:af:01:93:58:
e9:a1:c9:bf:8d:7d:7d:12:04:e6:0d:24:96:1d:24:
9d:81:28:f3:d6:54:d8:34:9d:72:e3:69:2a:19:6d:
08:8e:22:57:21:be:1f:50:52:c6:21:b3:f7:3d:8b:
c7:2a:87:d3:00:ca:e5:1c:69:72:6b:c5:2e:2f:72:
c4:ac:2b:07:57:3e:31:4d:47:9f:5f:25:30:7f:d0:
d3:c4:8c:7c:08:f4:65:76:3f:ab:a9:f7:32:0b:64:
37:dc:11:91:f6:76:db:28:a9:f6:42:88:33:53:b3:
d0:d1:a8:ac:ac:73:b9:24:bd:ad:8a:4f:1d:e5:50:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:CA:78:D5:C7:C8:C8:02:42:DA:73:FD:04:60:7C:AC:94:18:BE
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:11:a6:c6:5a:18:89:2b:0a:df:ef:bc:bd:82:c2:ae:06:28:
83:91:9d:34:f5:a4:7b:f6:ae:e3:87:33:c8:18:d0:24:0a:68:
f8:df:d8:19:0d:3f:be:86:5f:c9:2b:e9:84:fe:ce:32:89:ab:
95:5f:52:42:ac:40:02:cc:0f:74:72:cf:f1:80:3f:45:f4:d2:
ac:ee:34:8c:18:0c:de:9a:41:be:e3:d4:a8:81:6f:a1:70:c9:
10:5a:5f:40:4e:ce:68:8a:51:df:9c:27:d0:99:d0:ed:c8:af:
c7:61:e3:27:c6:6a:d7:9e:a3:7e:45:3b:32:a2:c8:6d:a6:45:
19:4c:cd:9d:f6:50:25:e3:27:cd:d5:a9:6c:04:5a:74:23:ec:
a6:27:ec:f8:af:bb:ed:e9:07:9f:a4:be:3b:d0:40:23:f1:5e:
89:d1:45:74:2f:0e:33:b7:c0:d7:09:00:f3:6b:a6:14:ec:e1:
56:8b:9f:1e:fc:3b:de:7c:8a:76:d9:c4:d5:3d:4f:8f:59:7c:
44:cd:67:22:53:ea:2c:14:98:da:22:50:ef:21:2a:27:f3:64:
2f:9e:50:60:d4:91:cc:bf:e1:b0:91:c0:4e:6e:ed:b0:8c:f3:
89:f4:08:be:73:2d:d8:1b:ee:11:3e:7f:b2:0b:fd:5a:e9:cf:
28:08:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:58 2026 by rpki-client