
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: SBMoq4HNnED0tGendGgoKjtjoyrXI2uNaRxq3dvKkzg=
Subject key identifier: 94:34:54:B0:3D:70:A5:AD:28:9B:2B:48:F9:83:66:16:61:E3:E4:F2
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 021D
Signing time: Wed 25 Mar 2026 02:11:40 +0000
Manifest this update: Wed 25 Mar 2026 02:11:40 +0000
Manifest next update: Wed 01 Apr 2026 02:11:40 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: U+1oxN7ytSI5aOBhpv5fa8Bs5FzMjOVh2kMuhuCNlRs=)
2: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
3: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: Mar 25 02:11:40 2026 GMT
Not After : Apr 1 02:11:40 2026 GMT
Subject: CN=69c3445c-cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:ec:7c:5d:4d:d9:1d:f3:14:98:ff:f6:df:
69:52:a4:4f:84:f7:50:1d:79:5a:b2:14:3f:40:8d:
e4:6c:68:74:f0:90:50:46:ee:2c:4f:a5:61:fb:2f:
11:2b:75:38:63:bd:af:e2:14:bd:e3:e1:9b:bd:68:
de:43:9e:6c:9d:c1:b5:6f:b9:ce:a7:96:57:a6:73:
59:da:c2:ef:7d:0a:b1:3b:09:eb:38:38:a6:c6:4d:
17:c0:76:75:0f:bd:65:41:23:94:df:49:d1:93:3b:
bc:ed:71:ff:68:6c:83:b9:1a:51:a7:22:84:fd:26:
95:e9:8c:17:e3:4e:62:36:69:77:0c:a3:6e:3e:13:
e2:02:43:4f:45:91:6d:90:0f:20:68:cc:a1:6c:10:
67:9a:2e:3d:73:7a:e1:3f:1f:68:56:60:53:53:32:
dc:14:63:a8:4b:b5:d6:ae:9b:2d:09:97:ce:28:8c:
1b:5c:b4:76:68:5b:e3:f2:3f:3c:2d:8e:b3:9a:1f:
5a:66:0d:34:c9:88:fb:86:11:c2:d8:2d:4b:d1:cd:
72:72:b1:52:8d:c1:44:63:5a:58:b0:aa:f6:31:7b:
62:7b:06:bd:6c:67:3d:70:72:15:33:79:7e:50:08:
16:47:6a:af:9a:7f:11:49:9a:07:22:a1:f6:3c:ee:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:54:B0:3D:70:A5:AD:28:9B:2B:48:F9:83:66:16:61:E3:E4:F2
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:9f:8b:b1:d9:4f:44:86:75:68:1b:59:b2:ba:fd:c6:07:
24:86:53:6e:5a:bb:69:30:be:0b:59:12:a3:62:01:2d:9d:2a:
61:85:0a:a9:2d:ab:0a:00:fe:43:ad:4e:da:1f:40:3b:bf:1d:
65:3b:08:f9:7d:0b:0b:68:a5:85:c5:64:de:87:0f:12:d7:9e:
7c:e7:b4:d6:28:85:48:79:85:d6:db:9d:28:1f:bd:d8:61:f9:
23:7b:52:c6:71:6c:21:cc:9e:b2:b1:95:e5:92:5a:65:79:ac:
7b:da:42:ba:68:7c:85:49:c8:a8:bc:67:c8:1a:0d:6e:97:96:
ab:d6:02:0b:65:66:44:cf:7a:92:03:10:89:c2:7c:1e:68:bb:
4d:54:4f:6f:79:e7:65:f7:93:23:df:65:36:73:03:d6:f9:1f:
5e:b0:ba:6c:70:6b:44:4b:5a:90:75:a3:84:f1:53:db:b6:a1:
20:03:6f:97:66:14:23:0b:82:bd:41:39:eb:9d:da:83:24:ab:
95:6e:8f:29:f4:a7:f9:fb:1d:5a:29:24:b6:4d:cb:93:a8:5e:
0b:65:c4:0c:14:95:ec:c0:39:5e:2d:76:a5:90:2a:3c:9c:5c:
cd:3c:e9:78:3a:d5:7b:9b:aa:1c:67:b9:9b:d6:8c:a9:21:21:
6d:1f:7b:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3MDZGMkJGRURE
OTJBMTExQzkwHhcNMjYwMzI1MDIxMTQwWhcNMjYwNDAxMDIxMTQwWjAYMRYwFAYD
VQQDEw02OWMzNDQ1Yy1jZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrHsfF1N2R3zFJj/9t9pUqRPhPdQHXlashQ/QI3kbGh08JBQRu4sT6Vh+y8R
K3U4Y72v4hS94+GbvWjeQ55sncG1b7nOp5ZXpnNZ2sLvfQqxOwnrODimxk0XwHZ1
D71lQSOU30nRkzu87XH/aGyDuRpRpyKE/SaV6YwX405iNml3DKNuPhPiAkNPRZFt
kA8gaMyhbBBnmi49c3rhPx9oVmBTUzLcFGOoS7XWrpstCZfOKIwbXLR2aFvj8j88
LY6zmh9aZg00yYj7hhHC2C1L0c1ycrFSjcFEY1pYsKr2MXtiewa9bGc9cHIVM3l+
UAgWR2qvmn8RSZoHIqH2PO7gowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQ0VLA9
cKWtKJsrSPmDZhZh4+TyMB8GA1UdIwQYMBaAFOdwUIkb+JJ0MmULcG8r/t2SoRHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFERi9DREY0MDVDMkYw
NjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtuUXlaUXR3Ynl2LTNaS2hF
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUzQlFpUnY0a25ReVpRdHdieXYtM1pLaEVjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtu
UXlaUXR3Ynl2LTNaS2hFY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO7afi7HZT0SGdWgbWbK6/cYHJIZTblq7aTC+C1kSo2IBLZ0qYYUKqS2rCgD+
Q61O2h9AO78dZTsI+X0LC2ilhcVk3ocPEteefOe01iiFSHmF1tudKB+92GH5I3tS
xnFsIcyesrGV5ZJaZXmse9pCumh8hUnIqLxnyBoNbpeWq9YCC2VmRM96kgMQicJ8
Hmi7TVRPb3nnZfeTI99lNnMD1vkfXrC6bHBrREtakHWjhPFT27ahIANvl2YUIwuC
vUE5653agySrlW6PKfSn+fsdWikktk3Lk6heC2XEDBSV7MA5Xi12pZAqPJxczTzp
eDrVe5uqHGe5m9aMqSEhbR97lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:30 2026 by rpki-client