
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier: 3QWUcl9Y+/7ZAXmvJEfZ69oOcGNdAm9qj6ntJj1NLdQ=
Subject key identifier: D9:CD:68:66:49:1D:87:E3:5E:68:6F:C8:3F:1D:7F:C3:29:3D:63:3F
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number: 01E4
Signing time: Wed 13 May 2026 03:38:04 +0000
Manifest this update: Wed 13 May 2026 03:38:04 +0000
Manifest next update: Wed 20 May 2026 03:38:04 +0000
Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: TCVPW5/+n88iRElukY0tEN4h53DYhTczhMsWOmwSOkU=)
2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: May 13 03:38:04 2026 GMT
Not After : May 20 03:38:04 2026 GMT
Subject: CN=6a03f21c-0dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:b5:fe:b2:70:41:60:1e:8d:e2:9b:bd:44:
38:2f:4f:7f:d2:77:cc:f9:f9:40:0c:d2:3e:3d:ed:
e2:83:88:e6:0f:11:94:1f:a7:32:a1:12:bc:2e:44:
94:09:64:aa:1e:2c:ec:3d:cc:bb:c9:d6:0f:ad:a2:
cc:c2:ca:fa:a8:d1:07:f8:3e:3d:24:41:0e:e6:7e:
68:7e:de:32:7f:5f:4a:e7:4d:cb:af:2e:16:c5:49:
43:1a:dc:65:c3:9d:0b:75:ee:f7:74:02:7f:6e:1c:
f0:bb:9f:00:53:94:41:0f:e2:e0:a9:08:a4:df:9d:
5a:d0:d2:08:55:30:5c:fb:63:58:26:57:a1:72:02:
0f:a4:ba:78:1e:e4:37:8f:22:c6:63:c0:e3:69:cc:
e3:16:ca:2c:b8:a5:22:58:de:ee:ed:83:16:3f:6c:
2d:ce:c3:45:b7:6d:19:cd:40:a1:df:d2:7b:47:db:
5b:5a:13:d9:f6:dc:ef:c2:9b:53:e1:df:22:91:47:
fd:a7:56:e7:a6:78:03:28:61:04:14:5d:ca:79:b9:
be:ec:bf:e1:f3:86:7a:de:c5:30:b1:c8:0b:05:86:
e8:38:52:6b:62:23:c0:40:7e:7c:5d:d9:e2:31:c8:
6b:9b:68:19:6a:52:f1:29:60:4d:12:31:ed:2e:f9:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:68:66:49:1D:87:E3:5E:68:6F:C8:3F:1D:7F:C3:29:3D:63:3F
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:c0:3a:b6:ee:93:1e:52:bb:1e:98:4c:6d:49:19:24:a7:
80:03:b2:18:1c:87:f4:d1:17:ae:a6:23:24:30:44:0c:7f:53:
41:50:94:e5:6b:72:ea:c4:5d:e0:b1:cf:22:77:24:5d:6b:3c:
0f:c9:f6:fd:4a:b0:67:49:d6:82:82:e4:89:80:c0:7d:97:92:
32:2d:e7:e8:43:7a:dd:dc:be:21:ec:b5:95:24:22:a2:25:d2:
a9:c5:3d:54:9c:0b:a8:47:f9:a1:20:5d:6e:0e:ca:ff:3b:65:
a5:3c:da:df:22:6a:2a:15:2d:dd:57:26:69:46:d5:b1:8c:c4:
0b:67:d1:9f:bd:1c:e6:73:20:10:2d:87:e2:94:e7:44:c5:f1:
3f:e1:9b:cd:a9:87:be:57:8a:80:db:d2:0e:6d:5e:b5:43:df:
07:4b:af:5e:50:4a:1b:fe:91:19:32:df:c0:ea:77:fa:c8:75:
b3:1b:23:d0:67:52:1d:56:5a:8f:df:e4:5c:94:a1:ee:f3:ac:
b3:51:86:18:bd:f5:e2:18:19:95:d7:5f:aa:f0:bd:d2:b9:ec:
22:de:2e:39:74:74:0d:1f:70:e0:ea:a3:f2:0a:8f:91:31:89:
b6:e2:cf:a5:10:2f:6c:a9:6a:d0:fc:2f:95:2a:7c:38:f5:2a:
1c:db:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:43 2026 by rpki-client