
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: K/fKuVD1XQiDhFkptxP4meYEFv8gjz6P7qHWz/wLbfs=
Subject key identifier: C0:31:B8:2A:71:17:A7:C8:1B:EF:86:54:89:2C:53:EF:77:0D:3C:A5
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 22AC
Signing time: Tue 24 Mar 2026 15:52:04 +0000
Manifest this update: Tue 24 Mar 2026 15:52:04 +0000
Manifest next update: Tue 31 Mar 2026 15:52:04 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: gw56KjLMU4hwhpEiHyOc799l1b2H4faf0wqTE5ezS0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Mar 24 15:52:04 2026 GMT
Not After : Mar 31 15:52:04 2026 GMT
Subject: CN=69c2b324-2ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:68:a5:04:72:0b:3b:5b:d1:06:8b:0b:2f:
e9:d5:a6:48:d5:1e:8f:ed:f8:3b:d0:6e:dc:ad:b0:
c3:c4:fa:ac:65:50:8b:b6:8c:50:4f:cf:ce:06:0b:
ba:13:6c:1d:2f:8b:a5:50:64:1e:31:49:fb:e4:ee:
98:a5:98:e9:3a:a3:e2:72:94:28:ab:b6:81:6a:23:
af:46:0f:ea:bc:01:ca:29:24:dc:91:f1:81:68:12:
dd:14:d6:92:7f:9d:bd:24:e7:0c:c8:87:f8:f1:9e:
a2:ac:c2:f4:0a:f8:9d:0f:9b:87:be:5d:81:57:a8:
f5:99:b8:36:b8:68:d6:ef:82:1c:3a:31:35:51:b6:
db:1a:22:94:25:a6:19:d8:0a:58:cf:2c:d9:9d:a6:
31:0b:8c:3f:29:14:da:c8:b6:1f:c8:80:2b:62:78:
81:a8:19:21:a7:be:69:e3:e9:75:76:98:42:57:aa:
af:93:10:46:cb:b5:86:0e:76:f6:d7:60:c7:2d:ea:
7b:eb:41:cb:53:5e:8d:00:6d:43:bb:67:30:05:f7:
73:89:e1:a1:16:8e:68:67:a6:89:90:95:a4:c6:26:
ad:3d:af:3e:4d:a6:92:b0:b5:4c:a7:ca:e0:d5:bb:
44:f3:00:1b:53:6b:24:78:7d:25:3d:09:aa:48:56:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:B8:2A:71:17:A7:C8:1B:EF:86:54:89:2C:53:EF:77:0D:3C:A5
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:f3:6c:8d:cf:24:1d:2a:ce:55:ce:fa:21:10:b4:17:db:
f2:f0:ab:03:18:cf:86:4c:fa:05:64:9a:72:84:09:a3:d5:75:
b3:20:3b:f9:ee:63:8f:60:e6:d3:2c:39:fd:d0:ad:9a:77:d3:
fa:3d:ec:db:a5:fe:44:48:dc:97:30:9e:ba:d7:2a:6d:47:7b:
cd:6d:fb:f7:f7:d8:f5:58:16:ad:f6:e5:b5:f2:98:7b:1d:9b:
0a:b3:0f:0a:ad:f1:9e:c2:3a:51:18:0e:cd:2e:25:63:51:cb:
5d:0a:89:89:fc:48:84:6f:7b:d5:66:45:47:3f:e9:2f:47:8c:
f8:8f:56:56:fe:d2:da:93:98:ee:03:66:96:9c:cd:bb:92:3f:
41:64:cd:41:79:7c:97:db:f6:b1:83:7b:d4:17:9d:38:3e:cf:
a1:c2:3d:a5:19:b9:28:dd:4c:ea:eb:93:f2:01:c4:32:5e:69:
51:3b:fa:17:97:4d:b3:79:af:ab:11:17:c2:6e:f1:c4:5c:47:
b8:b8:69:69:59:f5:36:d3:ac:dc:5d:1b:22:fe:48:13:c2:03:
f9:13:66:52:8d:b7:a1:ec:4e:7a:5f:4c:3a:65:d6:27:d5:f5:
1e:f3:19:cd:90:40:9d:8a:3c:b5:fd:a5:13:9f:ff:e9:1b:49:
83:0e:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:08 2026 by rpki-client