
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier: kwuYLEKQYEFFFuNBh2Ynkgkd3QedRuS1+kA+kOdrfYI=
Subject key identifier: 96:2B:31:5F:B0:7F:E7:C8:E7:29:E2:47:24:78:5B:16:77:01:32:A4
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number: 01D2
Signing time: Mon 11 May 2026 03:42:10 +0000
Manifest this update: Mon 11 May 2026 03:42:09 +0000
Manifest next update: Mon 18 May 2026 03:42:09 +0000
Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: Gq3uUUW8P1sLc8u3x5drZWAsDeXukNb+/6GzJ7p/tWY=)
2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Validity
Not Before: May 11 03:42:09 2026 GMT
Not After : May 18 03:42:09 2026 GMT
Subject: CN=6a015012-d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:3b:62:21:75:ae:60:78:5a:73:5f:ef:51:
09:d4:cd:4f:8e:9c:fe:32:1b:54:5c:b5:82:e7:ee:
89:9d:0f:71:cf:c0:c8:1a:37:da:b3:3f:09:78:cb:
ac:e8:fa:e2:14:86:4b:d2:c8:a8:cb:20:d2:f4:93:
46:eb:1d:ff:52:a2:cd:d4:d9:69:1c:03:db:45:44:
ff:e3:5f:0e:3a:21:56:ad:40:fc:11:92:20:a5:03:
81:ea:2f:de:d3:54:ae:bb:3e:55:c7:55:43:79:f1:
71:9f:5f:1d:c2:ee:83:f8:7a:8a:cc:bf:30:85:77:
60:7a:fa:18:f9:f8:38:cf:b1:3c:b5:5d:bf:05:d1:
b2:a3:f2:b1:6f:f7:93:65:75:40:2a:03:8e:45:16:
66:07:d3:48:f0:fc:6b:00:41:fd:bc:89:04:c0:48:
d8:ef:94:77:2e:27:0d:3e:2f:16:a4:cf:ff:d8:73:
45:e1:6a:55:9c:87:d7:71:56:39:18:ff:34:08:26:
b4:64:fc:c4:af:90:bb:80:a7:c3:96:cb:69:93:0e:
0c:16:f6:34:5b:cb:6e:cb:71:e1:5d:a6:0f:91:9d:
64:62:ab:8c:16:4b:a6:5e:2a:59:29:b3:fc:0c:29:
44:d9:5c:53:ad:b9:7f:8e:37:17:d5:f6:87:09:70:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2B:31:5F:B0:7F:E7:C8:E7:29:E2:47:24:78:5B:16:77:01:32:A4
X509v3 Authority Key Identifier:
keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:87:2c:a5:d1:17:0a:3e:ef:c2:61:cb:09:98:12:14:9e:
c4:05:ad:66:ec:75:aa:d8:27:b8:a4:a5:9e:39:dc:d7:f9:77:
96:57:69:a5:49:c3:72:82:50:5a:e8:de:2a:fc:7e:1f:ca:58:
31:53:95:d4:09:4b:36:02:06:04:91:30:34:55:f2:d9:80:9e:
bb:74:94:f7:d0:f4:40:a4:c6:5c:59:58:3e:54:eb:95:a6:97:
94:8c:05:e2:47:c5:a9:32:d8:59:a3:86:84:68:67:0e:a8:17:
39:d9:e6:b4:a8:a5:6c:2d:5f:1d:86:af:13:e1:65:83:0b:8f:
37:bd:6b:9f:0d:ea:45:83:d9:98:8d:10:85:04:21:dc:17:cb:
81:f6:e4:56:05:d3:aa:ec:e9:8a:63:98:16:da:7d:ca:8e:c9:
8b:93:f3:da:11:2a:9e:86:dd:cd:5a:2d:98:d5:5f:f7:71:cb:
4c:3e:d4:6f:9d:53:3c:7a:5e:8f:ae:71:ff:68:f7:41:3c:ac:
cf:98:da:3e:0e:3c:97:b5:19:50:73:4c:e7:0b:43:43:f5:e1:
cc:f2:87:41:d5:9c:e6:41:ea:53:16:eb:8e:8b:95:ae:82:91:
a3:48:05:b7:b0:4f:9f:fd:55:f4:c4:f7:3a:4f:09:2e:89:94:
93:e0:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:39 2026 by rpki-client