
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier: YrVRpAtj3b/ZL5sQuI9Zy/9F3RSDHFyIKDldSp7ZInc=
Subject key identifier: 99:5B:36:D8:57:FD:89:F2:5D:17:F2:D2:D2:87:A2:FB:94:AD:EC:9F
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number: 01BC
Signing time: Wed 25 Mar 2026 03:21:11 +0000
Manifest this update: Wed 25 Mar 2026 03:21:10 +0000
Manifest next update: Wed 01 Apr 2026 03:21:10 +0000
Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: ST+C9OL2tuh5cUWvRiLSvtWU+2z6WwFbTFS4cbWOcuU=)
2: 6ABF5CFAB24311F093F9B04EC4F9AE02.roa (hash: T9d4VibSASPmkCyH9NpIJk4mWr2jmH2I4BlIvYJVUCo=)
3: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: zkNUDLjXuqFNaipi5YVq9yVdI9wqBX+vkJTiE60LyPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Validity
Not Before: Mar 25 03:21:10 2026 GMT
Not After : Apr 1 03:21:10 2026 GMT
Subject: CN=69c354a7-681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:fd:59:bf:ca:28:7f:60:b6:19:99:7c:e7:
b7:ac:39:6f:ac:be:78:44:96:bd:de:33:0b:fb:0b:
34:f9:e1:d2:73:66:71:f2:6f:f9:55:38:7f:e2:6c:
03:52:f1:92:18:fd:20:0e:e2:73:3e:f1:16:5d:3f:
9c:94:fd:13:0c:3a:18:b0:e6:cc:73:95:76:eb:bc:
91:6f:50:7a:7f:98:4f:1f:bb:3a:e4:fb:84:98:79:
a5:08:70:05:a7:12:bb:82:40:80:f0:3b:99:8c:f5:
bf:60:8b:f5:5d:ec:de:cb:5a:72:fe:0b:eb:dd:f2:
37:9b:14:6b:0e:f3:b0:eb:73:ce:51:12:ac:93:27:
af:d4:f6:08:27:6b:ad:8a:ed:d5:cb:ed:67:5e:8e:
41:fc:c8:fd:73:bf:e9:25:b2:5e:cc:41:08:47:11:
01:9d:75:22:b1:80:32:7c:a0:f4:26:99:4c:90:87:
3c:6e:f1:8b:cc:62:cf:b8:16:69:40:67:37:5d:b7:
d0:84:7a:5b:cb:59:04:00:5d:cf:c9:85:a8:b6:4b:
11:f4:a9:f5:d1:e8:32:bd:75:e0:bc:2b:fb:cf:d9:
0a:d2:a0:fc:d3:e6:ca:dd:e4:fd:51:47:39:b9:d0:
26:f9:d3:2a:39:7e:f3:68:67:65:09:47:98:16:de:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:36:D8:57:FD:89:F2:5D:17:F2:D2:D2:87:A2:FB:94:AD:EC:9F
X509v3 Authority Key Identifier:
keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:3b:03:6a:cc:21:89:48:53:12:ba:40:dd:55:5c:73:5d:
fa:af:15:bd:d9:c9:7b:ca:22:b8:80:be:9a:3e:c9:a3:e6:5c:
f6:f9:f9:96:66:c7:ea:ef:77:7c:10:5b:e7:a1:ff:cd:49:12:
67:10:f6:a6:55:9f:2c:30:ff:7a:b0:bc:5e:dd:ce:94:25:d0:
1f:ed:59:5a:a0:c5:18:f1:5a:b9:b8:23:af:99:8f:59:69:55:
24:82:54:50:c6:74:e1:0f:ba:33:0a:59:25:1b:ad:e9:0f:06:
63:36:ac:4f:f3:7d:a5:0d:2a:22:f1:74:2a:dd:1e:6c:7f:4b:
19:85:28:8f:74:a0:dc:db:64:3b:62:8a:d7:44:63:1b:2a:8b:
43:7b:91:1f:90:55:61:f6:9b:de:0a:7d:ba:6f:59:41:c6:91:
29:ef:e9:94:97:79:67:b2:fa:ad:87:7b:ec:5b:4d:78:d4:6e:
1d:81:02:1b:34:41:2e:65:e7:5d:e9:1f:6a:88:3c:0a:af:dc:
d6:7a:ea:1a:ea:0e:2b:63:8d:97:c3:be:45:eb:4f:9e:76:9d:
b2:b8:19:99:04:7f:18:96:35:ce:f6:06:1e:29:6e:c3:f4:5a:
d5:e4:79:4e:70:cd:d9:31:b6:27:fb:00:45:c1:10:26:f0:f0:
fe:d5:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:27 2026 by rpki-client