
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier: bDWimJCN5S0pWwzKAlWU4KWG/xPedeN7B0tdIJHjYDY=
Subject key identifier: BB:58:B9:84:EB:4E:7D:E6:76:E8:8B:2F:B9:23:4A:30:28:C7:1A:E5
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number: 014F
Signing time: Wed 25 Mar 2026 04:25:18 +0000
Manifest this update: Wed 25 Mar 2026 04:25:18 +0000
Manifest next update: Wed 01 Apr 2026 04:25:18 +0000
Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: yPPzJkuf/lLAmR/ZKMcGIBj5ouoFBH5Vn1MADzkrXYQ=)
2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: Ig/wbZdh4jHG/0RZspeIPFlmWVtGZIemOVk+yYX06AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Validity
Not Before: Mar 25 04:25:18 2026 GMT
Not After : Apr 1 04:25:18 2026 GMT
Subject: CN=69c363ae-e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:6b:be:50:50:1a:a2:41:77:63:b0:88:1b:
b2:60:af:48:9e:0d:9b:a9:0b:0c:42:f1:92:6b:2e:
e5:c2:b4:7e:34:72:50:88:b2:72:0e:ed:25:82:f6:
23:3c:08:b6:e1:87:1e:74:10:2f:1e:a8:43:7d:4c:
a9:de:e9:96:61:0c:31:58:c8:7a:b3:e7:ce:62:c6:
de:b8:66:87:7c:4a:26:64:5c:22:43:ae:08:08:db:
5a:01:d1:93:c6:b7:c3:3d:fa:4c:0f:10:e4:ba:e1:
25:94:c5:82:07:eb:a5:fc:90:a9:4c:24:16:32:8b:
31:b5:85:5c:20:be:ea:68:c8:cd:d2:19:fe:be:2e:
ee:64:e9:75:7e:45:1c:70:1b:61:9f:d2:f4:26:48:
6c:8d:7e:a1:ef:0c:e7:97:d6:08:f8:44:5f:8d:41:
73:47:05:72:b0:47:bc:3a:3e:9e:10:9d:f8:93:31:
b0:b1:a4:10:05:b4:70:37:23:8d:9c:78:ce:c9:f1:
0e:f9:04:65:56:21:3c:1f:16:80:17:bc:d1:ee:40:
c6:aa:01:63:17:88:84:34:8e:6d:5b:74:96:2e:13:
15:51:e2:df:88:52:a6:7b:9e:b6:2c:e0:98:86:45:
eb:89:d1:00:2c:51:e4:d7:54:c7:64:e0:c2:1e:9e:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:B9:84:EB:4E:7D:E6:76:E8:8B:2F:B9:23:4A:30:28:C7:1A:E5
X509v3 Authority Key Identifier:
keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:0c:e3:c5:c4:81:c6:bc:8a:fc:d4:f6:5b:d9:4d:07:eb:
f0:87:b8:61:9d:66:af:a1:06:31:fa:29:d7:7c:f9:a6:ca:bb:
15:5e:75:89:20:cc:6b:b9:77:9a:fa:f4:c4:bc:30:1d:a9:4c:
2f:32:42:72:7f:4e:54:1f:c8:ab:96:13:dc:f9:10:81:4e:f4:
98:b4:70:a4:2b:21:e7:cb:26:8d:9b:ba:cd:a3:d7:d9:74:d2:
80:4d:8d:a7:e2:5f:cf:64:96:b7:4a:34:e4:f0:2f:7e:31:12:
9f:ab:73:09:0f:d5:49:f8:7a:85:e1:16:0d:6b:24:4f:10:1a:
05:e8:c3:2d:1f:27:24:66:c6:36:15:e4:4e:0e:0b:66:b5:85:
f9:3c:a7:c2:b3:d0:55:c3:45:6e:a6:c5:c3:42:2b:f3:26:dd:
2c:3f:b5:fd:23:fd:5b:1a:23:5d:b3:82:6a:b1:76:e2:fc:e5:
b1:58:6a:65:1b:11:d6:42:84:71:26:ab:f5:ad:77:41:bd:8d:
7e:fa:4d:33:78:23:bc:49:32:cd:a2:3f:65:1f:96:49:d3:24:
3c:31:a8:29:e8:d9:e4:1c:d6:88:ca:1f:59:5c:e6:fd:66:e4:
2c:05:9f:7a:13:d1:b5:dd:08:d8:67:0d:8f:93:01:10:28:88:
a6:75:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:30 2026 by rpki-client