
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier: ZkV9Zg7WhtuuNHxV0yX47lxHh+I4DKzomqqJfdAYums=
Subject key identifier: DA:0B:AB:C4:A0:A1:63:19:BA:92:CD:CB:AC:B4:13:2D:2C:18:A4:9F
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number: 03F3
Signing time: Wed 23 Sep 2026 00:03:33 +0000
Manifest this update: Wed 23 Sep 2026 00:03:32 +0000
Manifest next update: Wed 30 Sep 2026 00:03:32 +0000
Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: XOXaKMCOTJgwnCWb/x3bU7zGVv57vJU0xPhqQEFx4/s=)
2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: 1QnIPwxuY/dfkR4MhbghggmusXDfW8Mw8GOCC4ieNXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: Sep 23 00:03:32 2026 GMT
Not After : Sep 30 00:03:32 2026 GMT
Subject: CN=6ab31754-e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:28:8e:8e:f1:96:a0:85:7c:0a:a6:84:f2:
54:e6:b4:78:ff:6b:d2:a9:bd:cd:4b:2f:09:c5:a6:
8d:7c:fc:d9:a1:b7:92:6d:d6:f2:55:59:fb:0c:f0:
62:92:f2:2c:64:c9:03:11:d1:ec:a6:49:c9:15:59:
44:49:97:33:c3:cf:4d:cf:09:2c:e1:ad:23:21:ea:
e7:52:e8:46:eb:16:1e:2e:50:91:5d:06:9e:13:9a:
78:ec:9b:16:01:40:18:11:4c:bd:84:f3:eb:67:58:
eb:a4:44:de:5c:04:eb:ed:53:a4:b8:b9:67:54:4d:
01:fa:06:4c:59:48:02:d2:15:2a:a3:b4:38:51:c8:
ca:6a:11:26:df:d1:7c:cf:2c:4e:7a:41:2c:67:80:
31:f5:66:29:ea:dc:6c:e7:99:f9:15:51:96:c5:e9:
f0:2b:57:45:d8:ca:18:1d:de:00:92:d8:22:73:a3:
d8:9e:e0:93:dd:04:33:97:ab:ba:78:ef:ff:22:9d:
98:a8:67:09:e3:86:fd:50:3d:41:da:0c:c7:b4:a4:
ef:52:37:93:70:9d:c3:75:12:f2:21:43:79:87:c0:
c1:41:27:5d:ec:6f:3c:93:32:6a:37:77:6b:1b:25:
9c:31:01:fa:89:2a:bd:5f:02:4c:6e:36:c5:1f:64:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0B:AB:C4:A0:A1:63:19:BA:92:CD:CB:AC:B4:13:2D:2C:18:A4:9F
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:c1:16:68:58:9f:9d:91:2c:29:95:b2:d1:2b:e6:e8:db:
a7:3b:95:b2:ba:d4:79:7f:ff:63:00:8f:02:4c:57:c6:eb:39:
49:c9:78:39:ec:15:e0:61:e9:eb:a0:c6:0a:5b:61:b3:bb:38:
f7:55:d1:76:86:72:18:13:2b:70:10:61:07:e6:e5:48:97:bf:
23:c7:82:5a:a9:eb:8b:11:f5:66:42:4e:b5:38:75:ee:50:0c:
bf:21:e2:21:a4:0b:da:b8:c2:4a:58:be:66:67:05:7d:ac:c3:
95:78:47:2d:97:88:44:5d:c3:d6:c8:cf:f8:2b:99:7d:3e:cc:
6a:e7:bd:75:ef:a5:99:b3:85:8e:66:5e:0a:32:f7:b5:97:a5:
aa:b8:a8:eb:b4:03:c4:16:fb:06:0e:8e:48:06:a8:5a:24:38:
13:dc:ac:3d:c3:d6:b6:b9:da:95:36:a9:bb:8d:e4:7c:76:98:
bb:46:84:4b:1d:14:00:71:7a:2a:89:f6:59:65:8f:9e:43:3a:
40:96:17:67:9b:8b:41:9d:f3:3a:11:82:bc:06:0f:f0:79:8f:
58:b9:11:80:3c:16:d1:b2:cd:99:1e:a3:d3:28:3d:98:ba:3e:
79:15:c2:b2:fd:8c:13:99:c7:06:95:36:47:d3:cb:02:2a:bd:
a5:84:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:56 2026 by rpki-client