
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier: R/J8cwag2fCqCFYUXKJCcVYHePhQbfbjhXDqyj1X0Oc=
Subject key identifier: 4E:34:75:92:41:B3:05:27:28:91:AC:85:61:17:B0:86:51:AA:49:BC
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number: DB
Signing time: Wed 25 Mar 2026 05:53:20 +0000
Manifest this update: Wed 25 Mar 2026 05:53:19 +0000
Manifest next update: Wed 01 Apr 2026 05:53:19 +0000
Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: ftOvheXhSj6AcPH8u5Drdn7o+ZlUcbEZKCG6kdaJ0JE=)
2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Mar 25 05:53:19 2026 GMT
Not After : Apr 1 05:53:19 2026 GMT
Subject: CN=69c37850-0119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:c6:0b:a1:4e:9e:9a:e4:78:b4:b8:e2:97:
db:19:5b:14:79:31:f7:20:b3:8d:0b:33:ed:d6:f7:
45:b1:f8:38:ba:5e:cb:02:01:12:ae:48:a0:2d:e4:
95:de:50:19:4b:75:15:f0:72:3b:de:8a:10:99:7f:
e2:25:bf:fd:b4:fb:d8:db:4d:3a:1b:a5:c1:86:e5:
7a:e1:07:45:69:92:2c:ca:83:b0:ae:53:68:f0:a0:
3c:ee:b8:62:35:0e:4b:c6:4b:33:df:03:a5:a4:87:
ca:17:47:2a:ff:59:db:2d:a4:5d:ff:22:34:a5:6d:
27:e9:2c:db:98:43:12:26:c9:c3:61:c2:97:c0:1f:
3d:23:e0:00:07:fe:dd:ba:64:34:d1:3a:8e:9e:f9:
f0:e6:97:a7:08:1e:26:7e:6c:3a:01:1b:b6:17:a1:
71:28:16:20:83:5f:63:f8:57:82:12:1e:64:7d:35:
9a:34:0a:5b:31:6f:b6:fb:d8:29:32:41:e9:5b:40:
c3:56:3d:2f:de:49:32:3b:44:3f:0c:24:db:9f:97:
30:28:70:7f:26:a0:71:18:87:db:ad:89:6d:5d:02:
45:3d:61:8b:b5:5e:42:53:22:65:27:99:7d:78:63:
bf:00:cd:8e:80:e1:88:90:75:1a:89:da:c6:9b:ba:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:75:92:41:B3:05:27:28:91:AC:85:61:17:B0:86:51:AA:49:BC
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:ff:e1:20:97:ef:5e:db:b5:8f:f3:8f:82:57:f9:f9:f5:
9a:84:0c:b3:67:d3:1c:eb:2f:5f:45:6a:81:67:e7:7c:9b:8b:
8f:8a:be:4b:1e:0f:0e:ab:94:f7:c9:7f:f4:72:54:1c:39:ab:
d4:fc:51:5a:44:57:73:41:a6:16:6a:09:1a:53:be:f5:c4:99:
f5:48:3f:82:3c:ae:d0:83:7d:90:55:4b:de:a9:d0:f3:a3:ef:
dd:67:97:f6:80:7c:e4:fc:fd:c1:41:30:b3:b1:e8:0f:f3:ef:
6f:d2:15:63:83:f8:e1:03:d0:b5:68:15:e1:7b:e9:44:c6:05:
24:1f:f6:70:1c:b0:34:b5:c9:47:6e:4d:c6:83:82:cc:3b:e9:
d7:22:52:88:42:a9:89:43:91:44:58:e7:25:4f:fa:4f:5b:9d:
99:86:45:0e:1f:c8:55:a0:b2:79:94:35:f8:83:ee:d4:2c:e5:
cd:8b:00:d2:32:28:86:85:fa:d8:02:e5:97:2a:51:ba:54:90:
1b:d1:6a:5c:a2:9f:8b:ec:3e:c0:51:b5:e2:d2:ef:10:6e:01:
14:17:f8:3c:88:5b:2b:a8:e1:07:ee:d5:4c:f3:69:dd:9a:98:
43:c7:6b:27:28:7b:f8:20:64:2a:1e:1b:6b:ef:0d:e3:b0:bb:
e2:4a:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:35 2026 by rpki-client