
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json)
Hash identifier: Z/2HBoD+eRIEECF0CZOtuZEypLq+p/PJ2GrfvSTwUhE=
Subject key identifier: 86:28:7F:DB:BB:8C:CD:A4:64:99:BA:C4:F5:61:26:DA:0D:75:79:BF
Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
Manifest number: 0121
Signing time: Wed 13 May 2026 05:53:54 +0000
Manifest this update: Wed 13 May 2026 05:53:53 +0000
Manifest next update: Wed 20 May 2026 05:53:53 +0000
Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: VWJRagaWQTJwptztcTEZw0HeDfBs77JQCIbR57PJUIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Validity
Not Before: May 13 05:53:53 2026 GMT
Not After : May 20 05:53:53 2026 GMT
Subject: CN=6a0411f2-7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:51:a5:52:6d:8e:c6:13:52:51:8b:41:f0:
d1:43:a7:06:66:59:76:77:7e:a2:41:99:62:e9:ba:
ef:79:1e:4a:1b:37:38:c8:41:eb:e3:67:fc:7a:b0:
54:10:01:be:1a:eb:07:18:e8:8d:73:ab:0d:d4:5b:
c4:f6:f6:6e:8b:84:6e:93:b8:ce:9c:0c:c4:3d:95:
1b:de:16:26:6c:0e:01:aa:9d:a9:d3:ef:e0:44:ff:
35:39:e7:9c:78:b3:e7:6b:43:c4:68:15:17:75:de:
5c:52:47:78:ab:55:fd:5c:38:d7:d2:10:b3:cc:90:
ee:72:77:7e:c5:a7:c2:40:7b:38:0b:ab:20:18:57:
af:a6:ed:d4:d6:8a:50:e0:9d:30:83:25:8d:f9:a8:
0f:c2:67:63:72:47:9e:20:2b:49:85:6d:10:a7:07:
d8:e7:82:7f:dd:f9:f8:13:63:a1:f2:a2:86:1b:24:
6e:fb:cc:65:9e:97:1f:19:a1:46:be:5c:71:a3:07:
bd:70:ae:a4:0e:f5:12:fa:d7:37:d2:0f:da:a5:af:
f4:d1:60:e2:b9:27:9e:cb:0b:eb:2f:73:32:1e:4f:
68:cc:d0:05:c0:e9:ab:a8:e8:47:3f:80:4b:c7:24:
f7:83:62:8d:0b:5f:5f:3e:fb:34:9c:a7:0c:7b:3c:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:7F:DB:BB:8C:CD:A4:64:99:BA:C4:F5:61:26:DA:0D:75:79:BF
X509v3 Authority Key Identifier:
keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:33:06:92:c1:11:5a:c3:30:a7:a0:56:94:3d:f6:ff:c8:82:
a0:82:a5:2b:10:c5:dc:54:b7:c5:d5:7f:1d:73:22:53:ad:64:
b6:9b:3f:2f:86:cc:3a:7b:15:ef:3f:ee:e7:d3:22:01:7b:a0:
70:e1:ac:61:a9:2a:e9:26:74:c9:fd:fa:51:57:2b:3b:8f:d6:
b0:a5:21:91:c9:b7:a6:de:83:61:01:6b:5d:45:38:ed:a4:c2:
b4:1c:2b:e2:2c:79:70:bf:fe:62:69:c1:34:60:46:70:0c:a6:
ae:84:3e:0d:07:c0:fa:f5:55:1f:07:4d:2a:a1:4e:22:bc:69:
74:dd:20:d3:04:20:19:3f:40:81:e0:c5:4a:4b:18:a0:2a:4c:
81:c9:6e:66:af:cb:fa:33:f1:ac:e2:21:80:c1:27:55:3b:1b:
71:a6:4d:23:4c:e6:9b:45:9e:73:a0:b5:c7:94:c0:c4:0f:c1:
71:48:92:e6:2d:f2:f1:bf:86:16:68:45:6f:28:6f:9e:a4:9f:
4e:9f:50:d1:a3:05:4f:6f:c4:38:ce:dc:99:04:2e:31:f9:a5:
d2:68:58:15:37:16:ad:27:69:ad:f3:07:eb:1d:6d:a4:18:95:
ef:41:51:ad:52:a2:fd:36:1c:d8:a0:a0:19:3e:b5:26:cf:60:
7a:d8:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:42 2026 by rpki-client