
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
File: RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft (raw, json)
Hash identifier: jahxcFwtIpsM5wlTAgugNU43VXh17ceT8pIgff4H9Bk=
Subject key identifier: 3F:F3:B8:E2:A4:8A:08:09:55:D4:E7:A2:EA:AB:B7:AD:D3:04:E7:C1
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Certificate issuer: /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
Manifest number: 0115
Signing time: Wed 25 Mar 2026 05:06:39 +0000
Manifest this update: Wed 25 Mar 2026 05:06:39 +0000
Manifest next update: Wed 01 Apr 2026 05:06:39 +0000
Files and hashes: 1: RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl (hash: i8YN5M9MzjvNfpaMB5xrUYHMVHAksLsHsOhUfnoBUas=)
2: 88A6DB9086E211EF82ACA725C4F9AE02.roa (hash: cV0epGQTem/GEv7IIKubFOnRwGYNIWNxG9bk0ie+Eac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Validity
Not Before: Mar 25 05:06:39 2026 GMT
Not After : Apr 1 05:06:39 2026 GMT
Subject: CN=69c36d5f-b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:5e:ca:1c:55:86:5a:7a:9f:d3:16:02:65:
cb:32:a6:62:f8:8b:03:9e:4d:24:af:09:4c:b8:77:
80:97:2e:0a:44:4a:b7:ea:ec:d8:05:7b:de:f9:30:
2d:e4:85:4a:8d:bb:0c:93:f0:45:d0:39:b8:79:b9:
5f:d0:72:67:95:90:4f:e4:4c:b7:39:86:5b:88:43:
c6:c2:38:6d:95:4f:32:64:45:49:9e:d4:95:ae:9a:
d7:95:5c:0f:bb:46:c8:d6:b5:e6:e8:e4:b4:7b:fb:
2f:3c:49:9a:11:77:fd:27:ff:c5:3a:13:cb:ff:0d:
ad:4e:74:98:53:9e:33:2b:d8:6f:2e:8e:65:36:90:
85:47:e2:46:8e:5a:e0:5e:72:06:36:cb:50:33:bb:
cd:bc:c7:dc:27:4f:6f:a4:eb:8b:58:c0:87:a0:b6:
a2:8d:da:81:4e:83:aa:2e:29:d8:f4:e5:5e:e4:e4:
00:9d:9c:61:8b:41:93:4c:3c:a2:a9:26:f5:ba:8e:
df:98:db:35:5d:94:a8:b7:82:7c:aa:bd:a5:76:60:
0a:e5:cb:7e:d1:6d:96:db:8b:d3:d2:e6:ca:12:29:
06:19:3a:f6:e8:c8:bb:2c:d6:51:1a:93:14:7a:35:
1b:99:a2:26:3a:ee:47:21:95:c6:b5:b3:90:aa:e7:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:B8:E2:A4:8A:08:09:55:D4:E7:A2:EA:AB:B7:AD:D3:04:E7:C1
X509v3 Authority Key Identifier:
keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a2:dc:eb:38:cf:70:7d:6a:a3:3e:3f:a3:59:24:50:05:f0:
3d:43:7e:14:6b:fb:4a:97:d2:38:0d:4b:28:f0:61:24:40:96:
6e:e8:43:6d:88:78:c1:28:2d:f8:c5:6a:eb:b6:dd:10:65:74:
3a:dc:2b:78:27:82:b8:f6:cf:48:34:49:e4:2d:f3:5f:5e:4c:
86:87:94:5f:45:a3:be:eb:e0:f5:f9:e0:3f:c3:34:2d:98:4d:
3e:73:35:73:ce:65:3c:dc:19:6f:9d:80:13:44:d0:03:82:ee:
64:ad:f4:9a:11:34:a7:19:ec:66:6e:75:02:8c:df:c9:de:27:
3c:3f:7f:ff:2a:ec:5a:1a:90:6f:68:55:93:6e:7a:d9:75:c0:
28:30:02:ff:4b:be:fe:fa:c5:82:e5:ea:18:0a:37:b4:37:b6:
c0:13:10:2a:bf:77:9f:70:2f:4d:75:ba:09:e4:94:d7:45:a4:
47:10:0e:e5:84:f4:dd:98:97:4b:0a:04:25:44:fc:6b:7d:2f:
b0:0f:92:ef:e3:fe:2e:45:dd:d2:76:df:50:80:e4:92:dc:ae:
1b:12:80:38:90:e5:50:cf:4c:9d:bd:db:1e:62:52:1f:5c:86:
75:9b:be:fe:63:28:c5:16:b2:72:fb:d6:23:b7:f7:76:65:23:
1d:f6:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:41 2026 by rpki-client