
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json)
Hash identifier: 0ZcHRaqqUGLyRcukHSV9CRWU1mnv35TA0r67XV91pvM=
Subject key identifier: F4:3C:9A:42:C4:42:6A:A8:A5:B1:98:DC:15:C3:AC:45:C3:68:F3:20
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
Manifest number: 0133
Signing time: Wed 25 Mar 2026 04:43:09 +0000
Manifest this update: Wed 25 Mar 2026 04:43:09 +0000
Manifest next update: Wed 01 Apr 2026 04:43:09 +0000
Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: 5qKo6ERZLOacHLHsF5GHfGmmpt2Ha1XI/x/b+GPRG0s=)
2: 6A1352D0ABF311F08AAF8C15C4F9AE02.roa (hash: +UtQoGpilvtG1qoTPs/5jgLYowTqDUkkJwS5bjtwnxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Validity
Not Before: Mar 25 04:43:09 2026 GMT
Not After : Apr 1 04:43:09 2026 GMT
Subject: CN=69c367dd-36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:ce:20:db:09:c9:67:da:c7:e0:5f:00:81:
95:85:ef:6b:8b:2e:30:03:f7:fe:c7:dc:ee:4a:dc:
99:4d:26:1b:7f:8b:93:b1:2b:c6:7d:24:1a:48:d1:
a1:d0:66:37:be:c3:23:12:09:d4:a6:b9:19:13:e4:
59:26:d7:ed:c7:29:52:80:73:bb:41:50:ce:be:21:
7e:25:8a:65:5c:07:36:ab:f5:5f:a0:4f:18:8b:62:
d3:50:7e:53:af:56:56:f8:40:00:84:da:b8:b8:9a:
a3:0b:9f:7a:85:59:da:ee:37:5c:02:53:ff:db:0a:
6e:a8:92:80:42:5d:8c:33:65:09:73:d5:86:e7:60:
d2:1b:a7:76:26:f1:cd:a7:61:63:d9:57:cb:f6:c1:
32:09:52:ac:57:fc:f0:ff:dc:28:c1:58:e4:5d:7d:
f4:df:77:58:7e:6f:df:eb:a4:96:a1:c9:a2:e8:bc:
8e:ce:cb:09:cb:f1:b0:cf:c9:8e:4d:a6:ce:02:8c:
3d:31:b7:0e:4f:04:f4:bc:0f:fc:2b:01:32:d5:05:
8f:c9:57:d8:ba:23:42:15:b2:25:47:8a:71:3a:b3:
e7:f2:29:36:4c:38:94:36:ac:02:1a:73:f5:40:0c:
df:f0:d8:2d:d3:1c:cd:23:bf:dc:40:12:0b:36:c0:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:9A:42:C4:42:6A:A8:A5:B1:98:DC:15:C3:AC:45:C3:68:F3:20
X509v3 Authority Key Identifier:
keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:42:b1:1d:76:de:ee:10:ad:46:7c:57:a9:25:50:3e:72:2d:
db:50:e7:2a:8f:11:fe:89:d2:00:40:0b:bc:38:3b:55:f0:43:
83:20:81:c2:7e:2e:57:55:f4:4a:1f:f8:b0:9b:d4:40:4a:c2:
6a:c5:7a:79:e4:da:25:a1:93:d8:30:a9:d7:fb:ac:4e:ab:28:
63:68:32:e3:00:65:f8:ad:7e:37:c7:ac:20:f4:5e:07:8f:96:
ed:d6:b8:79:ea:d1:97:f5:ca:38:ea:f4:fc:ba:86:46:11:70:
e5:75:4d:4a:2f:56:69:36:63:69:c5:21:14:3b:6e:be:88:51:
79:af:35:0d:52:e5:9d:9b:77:a5:97:01:b4:fb:25:3f:28:2b:
45:d1:0f:a6:43:d4:3a:07:06:ee:6d:fa:0b:5d:fb:8d:70:59:
31:c1:7c:aa:3f:bb:54:9c:98:ba:ab:db:65:04:6c:3d:f0:b2:
5d:eb:e8:89:34:a5:09:48:a0:57:e6:11:31:d6:db:70:a8:59:
ce:35:eb:46:fe:86:0d:de:ed:dd:a4:5d:ad:b0:24:28:96:86:
b8:d3:12:cb:04:02:c4:26:cb:6e:93:47:59:4b:f9:bb:2f:39:
49:f9:40:bd:9a:4f:7d:19:09:c9:c2:49:89:6e:31:3b:b4:64:
59:7d:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:08 2026 by rpki-client