
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json)
Hash identifier: n55ZZNOY+i7GHERoaI2l//QKgR2RNbNSJSGSAIFs6S0=
Subject key identifier: 19:A7:2A:E3:CA:86:0F:FD:8D:AB:51:1B:EB:D1:57:37:88:63:41:E6
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
Manifest number: CC
Signing time: Wed 25 Mar 2026 06:02:29 +0000
Manifest this update: Wed 25 Mar 2026 06:02:28 +0000
Manifest next update: Wed 01 Apr 2026 06:02:28 +0000
Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: uNTWmCBjnXnOoNqa7W3mx9otwuYgX9TSmAmYqgY/X8E=)
2: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: C3aagPpa6AuSNI4mAxmbbsp6/a45ylNp6b8evhWo/ho=)
3: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: rUwmt+bo32fXyc76egq+OZINFYA/ahBwXXwNyoCKn6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Validity
Not Before: Mar 25 06:02:28 2026 GMT
Not After : Apr 1 06:02:28 2026 GMT
Subject: CN=69c37a74-59b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:e2:7e:ae:57:72:f7:4b:86:86:cb:d0:f3:
07:5a:7e:5b:df:62:9e:13:1a:fd:80:d5:ba:55:d4:
d7:7f:c3:c4:b4:69:9b:b0:a6:82:b4:57:09:1a:c9:
f5:67:b4:55:2c:b3:91:af:89:79:a2:72:9e:20:e2:
83:c7:2a:ce:bb:a6:07:31:5b:68:72:0e:fd:55:51:
bd:1e:9e:71:34:16:8c:0d:b2:6e:e3:85:81:f1:12:
4b:52:78:14:e4:d8:fc:ed:20:21:3d:68:8c:23:41:
0a:fd:37:bc:fb:c5:95:6c:f3:8e:6f:5a:16:bf:fe:
b0:19:0a:dd:f6:04:53:90:c0:72:df:96:70:35:cd:
d2:43:5b:6f:9c:81:a2:6f:b9:71:53:9f:4f:ca:5f:
fc:4e:ef:29:b1:9d:9f:23:be:78:0f:55:8b:7e:24:
d0:2f:d2:48:ba:f8:38:98:3c:22:ad:9c:dc:db:14:
39:fe:30:10:3e:83:96:9a:02:de:a8:91:f2:88:0f:
1e:a8:d3:7f:96:65:d6:c6:ea:92:af:ad:3b:1b:5d:
f0:d2:e8:68:d2:de:25:97:84:05:26:c7:10:22:58:
31:90:93:1f:93:a9:ba:ef:41:9a:7b:9f:0c:f0:ae:
f1:81:cb:55:c2:11:cc:3a:3c:0e:9f:51:56:3d:18:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:2A:E3:CA:86:0F:FD:8D:AB:51:1B:EB:D1:57:37:88:63:41:E6
X509v3 Authority Key Identifier:
keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:cf:97:d5:60:a3:32:1e:99:af:3e:46:c4:98:cd:c3:34:
52:4f:7d:8e:cb:6c:2d:df:d6:6b:8c:5d:d6:bc:70:81:f0:a6:
83:c5:02:53:0b:f0:9d:f0:59:fc:6c:93:ea:36:96:c2:ef:97:
1c:7e:8c:ad:d7:35:11:96:e0:48:73:08:91:e3:35:5e:f2:c2:
ef:40:cf:ad:2b:7e:5d:05:47:af:ae:63:a3:37:b3:a9:8d:4b:
aa:85:ef:06:32:2c:c7:dc:be:5a:59:4e:a2:a1:c3:db:87:f4:
87:db:40:d4:9b:78:c5:6d:03:15:0f:f5:53:e2:89:b9:f2:24:
69:67:9a:8d:30:59:71:e3:4e:f3:0a:4b:e1:93:fb:c5:34:59:
41:d5:f8:86:04:a0:5f:81:7f:e9:6e:c1:de:69:be:3e:26:ab:
c8:a9:20:6e:a5:c2:66:b3:00:79:de:e2:da:7d:e5:c3:8b:e5:
ad:90:be:26:69:b1:ef:1e:a4:67:1b:6b:09:b1:68:3a:a8:c2:
55:4d:4f:5f:19:77:88:e9:bf:0e:06:59:f3:d0:ae:df:63:96:
62:0e:01:f5:ad:d0:8d:3b:04:04:0e:d2:c0:87:96:3a:db:9e:
07:ae:d8:21:c0:d2:aa:ac:73:39:6f:1b:c2:97:e6:cf:f0:c9:
b8:1a:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:34 2026 by rpki-client