
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json)
Hash identifier: Of4xhtUtehcdz+OlZR+xp4PgzPbNXJwh5tlitDUE25g=
Subject key identifier: 4E:58:5A:1E:95:89:1E:C0:40:51:70:BE:45:46:CD:1A:44:ED:DC:D0
Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
Manifest number: 0113
Signing time: Wed 25 Mar 2026 05:10:12 +0000
Manifest this update: Wed 25 Mar 2026 05:10:11 +0000
Manifest next update: Wed 01 Apr 2026 05:10:11 +0000
Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: MOcasamOyxwEG4InLjYGRb7YaH8KNBKQ7iRUnlv3Q6Y=)
2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: l5WwokX0ZI8Y9CP6TgDkOcP9plGfuJ8GmKuV1BnPJZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Validity
Not Before: Mar 25 05:10:11 2026 GMT
Not After : Apr 1 05:10:11 2026 GMT
Subject: CN=69c36e34-b10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:6f:4c:e4:4d:19:57:20:87:51:80:03:53:
89:c9:11:85:1b:53:25:2e:a5:88:28:74:1a:e1:db:
1a:3d:46:2f:e1:4c:6f:68:79:2f:da:e3:65:05:a6:
f9:12:8f:6c:a9:ac:d3:ba:ec:52:4a:f5:b8:74:de:
1d:1f:6c:30:6e:e1:af:fe:93:89:5b:75:2a:c1:bb:
eb:1b:7a:a7:5a:78:36:fb:40:83:81:1a:7e:42:b3:
a6:15:c9:f5:d2:2d:cf:a4:49:7d:23:7e:44:22:d9:
af:dc:5d:c9:a1:e8:f3:45:80:8b:78:cf:51:9f:b2:
76:c0:90:74:91:85:4a:7a:95:56:46:91:36:b5:65:
3e:e5:01:9e:77:fa:b0:ed:2d:45:92:4c:96:f2:42:
45:bd:ce:9c:42:64:22:42:a6:5e:4b:fe:35:a9:b9:
d0:26:43:55:ef:53:dd:f7:99:f7:57:09:81:03:41:
b3:07:60:f2:f3:68:07:69:d5:cc:ac:c5:23:b7:fd:
8d:b1:99:14:8e:d3:d5:37:dc:48:74:cb:32:c5:4c:
95:a9:78:52:27:f7:3b:14:80:6a:21:b0:dd:ff:3f:
7f:75:c6:7a:40:62:ec:2d:ee:e8:0d:a3:85:10:a1:
f2:49:7a:43:1f:f1:51:9c:e7:36:70:6c:bf:2a:2b:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:5A:1E:95:89:1E:C0:40:51:70:BE:45:46:CD:1A:44:ED:DC:D0
X509v3 Authority Key Identifier:
keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:51:49:e4:46:fb:45:d2:5f:1a:ef:f2:11:6d:cc:02:ed:71:
00:86:f1:cb:9a:11:f9:7d:c9:92:ee:ed:3a:5f:9f:4c:4d:76:
a3:02:ac:a7:34:1d:21:d3:f0:9e:e1:36:5f:81:73:96:8a:5a:
8a:85:4f:21:6b:4f:b0:ec:d2:c7:e1:d6:4d:ea:13:67:49:e9:
9b:a1:0d:f6:dc:b9:67:0c:23:d8:02:b9:de:3e:41:c3:7c:5a:
72:3b:30:25:a4:79:2d:1f:e1:12:56:9e:0f:85:a6:2e:27:8f:
10:aa:1b:12:84:c5:50:4d:48:62:9e:01:a8:e5:bf:2f:5d:43:
5c:1a:8a:c8:aa:9c:82:f8:35:55:53:40:39:a2:c1:bd:f8:a7:
2c:16:5a:41:7b:a8:58:ee:16:fd:28:41:56:8a:d4:fe:92:af:
4b:20:9c:b1:b3:ac:f8:66:7c:66:c6:bf:81:86:f9:98:8f:6e:
a7:8d:df:39:9f:00:87:bb:7c:fe:58:ee:f6:cc:eb:96:01:fe:
d0:18:87:9c:96:a3:11:cd:b8:42:05:41:ef:dc:aa:f5:d5:fd:
a1:ac:ce:08:b9:cd:81:4c:4b:e0:b2:b9:fc:ab:e3:2a:14:dd:
27:55:53:83:0e:b8:54:a8:92:c8:7b:5f:54:4f:07:2c:41:ba:
81:04:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:09 2026 by rpki-client