
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier: foOx/0Iox/Y9ESBWPS3SLrjyX5402OAGBi0yLEf6En4=
Subject key identifier: 82:4F:97:A7:41:AF:88:26:35:3E:47:9F:84:2B:E9:33:A5:78:E6:68
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number: 0394
Signing time: Fri 27 Mar 2026 00:31:42 +0000
Manifest this update: Fri 27 Mar 2026 00:31:42 +0000
Manifest next update: Fri 03 Apr 2026 00:31:42 +0000
Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: NxDOGPtUFP4JuJDY0q6GX31TmQm53yK2Fkk4N8iqOaM=)
2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: 6fsqmzIKuFRYmBYI22zsQWgNYl7101x+SUd+GORgsaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: Mar 27 00:31:42 2026 GMT
Not After : Apr 3 00:31:42 2026 GMT
Subject: CN=69c5cfee-8f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:fa:68:b7:17:4c:6c:a9:74:9a:a8:1a:15:
54:1c:c7:88:ec:42:1f:ad:0a:89:c5:1c:d5:bf:39:
c5:a8:e3:a8:76:5f:57:58:42:c9:e2:3f:30:08:4b:
63:b3:c4:e6:d2:61:62:83:8c:c8:09:1f:0c:5e:66:
07:68:e8:f1:8d:cf:1f:9b:c9:b5:14:05:c6:df:4d:
0d:79:76:2e:f1:4c:e4:f1:68:b7:a2:71:16:01:92:
5d:ae:c2:fc:d8:21:42:34:cd:db:d3:e8:42:f0:e8:
2f:37:d8:5a:68:4d:43:a4:ae:00:5f:9d:de:86:cd:
93:5b:89:e1:9e:e9:4a:89:81:ee:65:1d:0a:98:f5:
69:61:f8:a4:55:e9:e1:b8:ee:a1:4c:39:57:ae:32:
0d:31:55:37:7b:c3:bd:90:a5:38:e3:11:8f:3d:6f:
6e:be:7f:fe:f6:65:f9:46:c0:a1:50:04:82:d2:c1:
ab:c0:d1:b9:f2:21:d7:35:44:fe:31:07:02:c2:22:
0f:2c:71:e5:02:93:67:8c:e8:48:e2:96:de:f9:6a:
e3:84:ec:e3:25:f4:f3:a9:85:db:49:c3:e6:91:a2:
f5:85:6a:59:9a:a3:71:9c:ae:ca:01:71:2f:7b:60:
09:96:ce:e0:c2:5f:25:ad:49:da:72:14:2a:af:eb:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:97:A7:41:AF:88:26:35:3E:47:9F:84:2B:E9:33:A5:78:E6:68
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:7d:cb:7e:46:38:a2:3d:65:0b:a6:00:c1:d9:a1:73:42:
8a:aa:86:36:95:88:a7:81:38:8d:19:22:c2:dc:c5:66:bc:2d:
12:0e:64:8a:5c:df:47:3e:59:8e:53:d2:87:d0:cd:16:cc:97:
56:62:28:f1:be:3c:fa:e7:47:ae:ac:75:e1:31:02:2b:94:ce:
9a:9a:ce:14:fe:92:0a:c0:23:43:6e:c1:0b:bc:22:37:37:89:
6c:8d:3c:f3:0e:fe:88:1f:f1:33:79:57:28:3c:29:6b:ca:f6:
9d:2f:0c:e9:89:b5:7b:9a:ac:df:ff:91:2a:ba:d6:88:6c:dc:
30:a9:39:1a:f3:49:d4:ec:13:39:15:08:c2:0c:e1:a5:c9:6d:
b5:5e:06:1f:34:79:d7:85:29:80:ea:15:f1:f5:88:7f:c7:eb:
6e:db:24:c4:93:5f:09:e1:eb:62:5b:32:eb:ed:e0:3a:5b:42:
0e:f5:d4:65:7d:22:15:11:47:fe:98:d6:9c:0c:38:b5:f6:31:
64:72:62:8b:f9:0a:71:03:24:63:de:4c:ef:d1:27:da:e4:60:
09:5a:fd:30:d9:a0:52:87:e9:f0:c2:1b:97:61:2f:0f:06:23:
45:aa:11:7d:28:52:91:50:88:10:f3:fb:aa:c6:ae:ab:06:af:
fa:f8:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:32 2026 by rpki-client