
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json)
Hash identifier: Rx5hJsBsHM1GXxsVgPd6fuG86AZuqAWKGLFX6wD/OBc=
Subject key identifier: 75:EE:1D:4E:DE:6C:C5:47:A9:51:7B:53:71:66:6F:81:B9:54:FC:1B
Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
Manifest number: 0857
Signing time: Tue 24 Mar 2026 20:31:39 +0000
Manifest this update: Tue 24 Mar 2026 20:31:38 +0000
Manifest next update: Tue 31 Mar 2026 20:31:38 +0000
Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: +6eQkkz2TbsITgsq1jagLajO9qH2up08Xy+u+rNeqkI=)
2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: KdzxhfaL6N8OpKtTXar6kXEIGG1BCxW71mfqiWDRui8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Validity
Not Before: Mar 24 20:31:38 2026 GMT
Not After : Mar 31 20:31:38 2026 GMT
Subject: CN=69c2f4ab-9100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:b8:2a:bc:bd:a8:a9:12:ae:c2:d9:27:19:
3d:a7:bd:14:00:57:3d:e9:37:24:dc:97:08:1c:04:
22:29:de:fa:49:96:bc:20:67:c3:80:88:a9:e4:63:
61:85:fa:7e:fe:45:84:0c:56:ae:01:1b:5c:65:19:
1b:76:e1:77:fd:ec:77:bd:ad:a2:56:bd:36:ff:5e:
15:d6:14:88:d0:a2:9f:5d:a8:55:a9:a9:b7:3a:8b:
76:c4:74:7f:87:fa:e2:54:5e:a7:74:1d:76:c8:17:
43:99:1e:ce:47:50:ba:f5:08:ba:23:cf:6b:43:61:
9e:54:14:dc:08:08:c2:13:ff:cd:61:7f:ee:05:2e:
4c:b0:58:66:2d:1f:36:4d:c3:3e:0d:49:f4:5a:e1:
73:0d:5c:75:be:51:de:ec:91:ad:eb:e1:59:4b:a4:
23:65:6f:c1:4c:b4:99:79:b0:b0:0b:90:d1:42:ab:
e0:d4:4e:64:e1:a3:d4:9a:f2:8d:32:f2:22:3f:b2:
eb:1c:b5:88:6f:eb:59:3d:71:2f:2d:22:09:01:2c:
a7:39:df:f8:13:15:03:6a:cb:cd:5d:3d:65:d6:ee:
f5:df:84:c0:83:80:d5:75:00:ab:80:75:ca:d4:45:
00:a2:59:76:4c:28:d0:fa:57:6b:c2:94:7a:d5:dd:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:1D:4E:DE:6C:C5:47:A9:51:7B:53:71:66:6F:81:B9:54:FC:1B
X509v3 Authority Key Identifier:
keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:69:7d:0d:fa:7e:3f:a6:5a:af:36:4a:2b:74:6e:ca:bd:
3f:48:5d:29:6f:0f:92:17:da:c7:b4:96:68:1f:d0:e0:ce:84:
28:7e:58:f5:48:a2:d5:7a:2f:34:63:1d:d9:7c:01:d9:02:72:
8b:1e:fe:13:2d:4d:a8:80:de:ff:6b:23:a5:1a:26:03:4e:18:
72:4c:af:0e:ad:71:62:7b:1b:b2:74:46:b9:96:6c:cc:a6:cb:
e4:cb:1d:a5:48:73:51:97:5f:1d:9a:53:25:5b:0b:12:67:57:
dc:2b:7c:f0:9b:b9:d3:8a:ab:84:67:d0:13:fd:6e:b9:78:15:
43:12:52:fc:9e:02:44:cc:cf:ff:f1:ef:8e:15:22:bc:12:cd:
96:32:64:b4:60:c6:7e:fc:ea:b5:07:dd:bd:59:83:3d:0e:57:
ff:ad:64:49:37:32:6e:fe:4c:e8:f8:0e:51:18:92:72:b1:85:
b7:89:af:25:de:2a:8c:5b:d2:3d:96:80:3c:28:4b:c8:16:61:
a0:fb:25:2e:97:2b:fa:6e:2b:de:30:cf:3c:33:df:e1:40:c7:
55:fe:7e:39:61:fc:36:6d:45:c1:31:da:eb:8b:b3:c8:6b:c9:
31:1a:4e:f5:5b:ae:a4:fe:d7:5c:ef:19:94:ea:d4:8b:56:60:
6d:d9:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:06 2026 by rpki-client