
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier: lZEyR5FJVIKcF/jI0a54hYAemIr+y+1ur5q+C1pBFig=
Subject key identifier: B3:07:BB:F3:4F:D0:FD:EC:4F:B9:89:E8:6E:EF:D4:BF:DC:E2:08:22
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 139A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number: 1374
Signing time: Mon 28 Sep 2026 17:02:15 +0000
Manifest this update: Mon 28 Sep 2026 17:02:15 +0000
Manifest next update: Mon 05 Oct 2026 17:02:15 +0000
Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: 2fmHi7buph12PyDIfjo0h0ITxYHZ7cqUrF3FKEQ3Axs=)
2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: VTQTT8xuT6Dg+SWzxk2QMe23LBYYzjpf4J2jxRAO07I=)
3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: KjogEvmeziwi8gySjs9Ywm3IXf9Y7i+lrZLVGgULe+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5018 (0x139a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Sep 28 17:02:15 2026 GMT
Not After : Oct 5 17:02:15 2026 GMT
Subject: CN=6aba9d97-1bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:61:c4:d1:13:90:30:4e:b0:9c:29:50:6a:
0a:6c:31:c4:a2:6a:b5:7e:68:7f:f2:95:f1:a5:b3:
5e:21:4b:b8:2e:e6:a8:c8:e0:db:f0:9e:48:ad:16:
a1:5b:ee:c1:09:4c:cc:a0:2f:d9:57:8f:9b:2a:21:
18:e1:71:55:fa:06:05:ee:02:c4:cb:de:53:94:a3:
2c:e2:e2:72:e7:19:53:03:a4:93:d0:fb:c6:5f:18:
d9:92:55:6f:a2:8f:be:44:0e:26:e1:88:28:b9:70:
90:aa:f2:37:27:d0:bf:5d:e8:7f:99:66:ea:90:92:
f6:db:b5:36:f2:30:dc:41:0a:50:bf:83:3c:ba:b9:
95:f7:c5:10:10:ca:dd:37:bf:f4:8c:33:69:94:83:
f5:55:00:79:99:49:3c:98:93:db:94:93:4b:3f:ac:
2c:e5:1a:8f:1e:a1:ff:c3:f2:30:3e:36:58:3b:0d:
33:7f:2f:41:e6:c5:4a:d2:52:50:71:5f:83:05:00:
ba:c6:b8:6f:e9:73:eb:1d:57:93:c4:59:65:2c:19:
04:fe:a9:b7:69:c5:a6:98:d0:6a:ef:c6:5a:53:9a:
39:f7:59:9a:b8:0f:a7:e0:2e:d2:cd:8e:19:51:35:
62:d1:a0:93:91:ee:50:99:03:49:4f:ed:b7:9c:af:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:BB:F3:4F:D0:FD:EC:4F:B9:89:E8:6E:EF:D4:BF:DC:E2:08:22
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:42:2e:5e:ef:4f:64:f4:f4:4d:dc:3e:83:55:bb:5c:f9:ac:
0b:67:66:40:42:a0:50:cf:5b:9f:4a:b1:80:9c:20:35:21:f2:
52:16:77:53:99:db:99:eb:ac:8a:c2:b9:9a:e2:18:9c:c4:e0:
25:ae:26:52:48:5c:42:8e:58:dd:8e:14:c5:6f:8c:82:c0:cf:
a1:16:a8:9b:b3:da:27:04:a4:55:36:eb:79:1f:15:3a:4e:37:
f7:4b:85:95:60:dc:85:85:e7:35:b7:de:08:0c:17:5c:0c:28:
db:d0:1f:c2:0a:96:03:d1:25:d5:41:fd:28:be:1c:8a:85:ff:
a0:16:ff:4b:d9:c9:85:12:66:bc:e3:ec:a8:cd:ab:4b:51:6f:
11:cf:ea:66:18:53:3d:9b:0f:5c:3a:43:3d:5d:07:ed:58:7b:
1b:5b:5a:88:17:4d:84:06:0d:db:e7:c5:e7:3b:f0:fd:e1:bf:
cd:c8:b8:43:c2:1c:45:39:f4:d9:cf:09:88:51:87:03:1b:8a:
32:be:30:c9:e3:b6:1a:22:d1:11:0d:99:32:1f:48:86:97:94:
d7:95:06:85:7f:57:be:f8:f5:28:6d:a3:4d:39:f5:c3:e5:35:
6f:63:a1:c9:fc:60:6d:5b:6a:bc:e9:f5:60:72:bc:41:2b:22:
53:8d:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:39:42 2026 by rpki-client