
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier: hjxRCaKhSfnRRGmpBeIKWoggUGki1KMySKfNdha3b5A=
Subject key identifier: C2:F5:C1:F1:23:88:3A:29:41:71:6E:80:6B:86:DF:70:B9:8D:B0:B7
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number: 022A
Signing time: Fri 25 Sep 2026 02:54:58 +0000
Manifest this update: Fri 25 Sep 2026 02:54:58 +0000
Manifest next update: Fri 02 Oct 2026 02:54:58 +0000
Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: uigYiZPgJcTVKh+d1DCuavdhonNLmIlwWYaavHjEbpY=)
2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: x3N43LNHpCNmmbJ4oepJrzKxjOa5Xqqq2QK4fNAveZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: Sep 25 02:54:58 2026 GMT
Not After : Oct 2 02:54:58 2026 GMT
Subject: CN=6ab5e282-0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:ab:0d:04:25:d1:49:4a:c8:b8:ec:b3:65:
4a:4f:7d:7a:3e:47:97:49:17:da:0f:54:e8:b3:27:
f7:97:15:d7:68:40:b4:75:dd:8c:3a:7e:6b:dc:da:
f7:1b:af:78:38:3b:8f:ad:24:4f:32:13:3d:7d:26:
e9:6e:55:0f:9c:46:13:19:af:9a:d9:12:3c:13:eb:
f1:ac:67:75:fd:75:61:1a:37:38:08:c7:d3:77:b5:
5c:25:47:21:92:8c:80:c7:30:22:e5:00:03:21:fe:
c6:9e:e0:e6:52:57:94:14:bb:12:f3:ea:70:ce:23:
63:e7:b3:c7:f5:2f:6d:85:1e:07:46:0c:55:a5:79:
91:a7:9f:9d:97:04:9f:94:f9:4b:3e:a3:3c:bb:29:
b0:5b:9e:e5:ca:f6:c1:04:76:dd:88:e3:13:3e:fa:
1e:5c:c4:6c:38:cb:7e:ef:51:22:ff:0c:2f:e6:b0:
0e:f6:7f:7b:a7:a1:ee:69:b4:b6:2f:e7:8d:5e:4b:
ab:df:05:ca:9e:0b:2e:39:be:8d:32:9e:d6:0d:77:
ab:8d:0e:2c:21:cb:2a:a7:34:ca:41:88:32:cc:08:
12:21:0f:3d:c2:a7:ed:f3:68:32:02:a2:3a:d9:f5:
c7:eb:52:99:2c:0e:91:9f:97:95:13:04:61:bd:7e:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:C1:F1:23:88:3A:29:41:71:6E:80:6B:86:DF:70:B9:8D:B0:B7
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3b:59:da:b8:32:fa:14:9a:8a:4a:d9:52:58:43:9c:a2:58:
6a:b3:81:61:97:1f:cb:ba:10:9f:52:09:90:16:4c:1e:e9:1a:
76:b2:36:53:ed:43:d6:23:cc:59:8e:9d:7e:60:eb:c0:97:6e:
2c:a7:e7:ab:fa:28:7b:62:e6:73:cf:f3:56:43:31:06:28:8c:
c4:9e:9c:f4:2a:0b:cb:ec:37:f4:90:57:19:f5:6e:96:35:d2:
cd:55:c8:cf:05:99:df:7b:50:33:81:ef:89:ff:51:cd:d8:fc:
79:99:cf:ed:e5:6c:bb:ec:25:4c:61:80:38:ca:fb:24:45:7d:
09:33:db:b6:93:ee:41:33:da:81:54:c1:69:e5:48:fc:b8:6a:
60:5c:02:2e:73:f1:c6:a7:1d:21:b4:78:7a:a9:38:3b:85:fe:
b3:b4:d9:2d:4d:39:d1:50:34:f5:28:1a:e3:75:2d:c5:d2:ea:
ce:fc:cd:d9:30:00:2e:8f:d5:46:8f:61:01:e4:c5:7c:5d:c1:
b2:bd:3a:3f:3b:94:84:fc:d0:30:11:80:67:71:e8:ca:35:cf:
0b:1b:67:62:53:ac:e0:22:c2:1c:f5:2b:15:5f:08:aa:f7:79:
4a:a3:a3:ac:d1:e5:2b:09:10:8f:24:4c:a6:cf:04:33:8d:78:
9d:69:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:47:44 2026 by rpki-client