
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: Lvp01trITzmP4bBwtc4q8Xg4+27XfeCd4OafKozN4Oo=
Subject key identifier: F7:68:6A:90:44:6D:05:D6:FA:02:81:70:BB:B6:33:DE:B1:E7:57:F9
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 0272
Signing time: Mon 11 May 2026 02:05:04 +0000
Manifest this update: Mon 11 May 2026 02:05:03 +0000
Manifest next update: Mon 18 May 2026 02:05:03 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: T7aF4u4U7KyVriNm1DiG5/Tt2CXkHs1/+a5SWwZT08Y=)
2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=)
3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=)
4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: May 11 02:05:03 2026 GMT
Not After : May 18 02:05:03 2026 GMT
Subject: CN=6a013950-7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:9f:bd:99:da:ea:db:f6:e5:4a:15:b9:11:
51:98:da:23:0e:14:d7:a7:cb:aa:1e:30:3b:7b:fb:
39:d6:92:76:9c:07:f8:79:27:26:4a:2e:6d:69:d2:
7f:50:e1:13:1b:35:37:5f:40:43:ed:b6:2a:3d:d1:
5f:57:7c:df:96:17:82:19:c0:f5:90:22:78:98:c0:
4b:df:1e:bf:be:e6:53:91:a1:31:0e:70:7a:29:72:
a5:e5:09:61:88:9d:c3:e0:5a:7d:51:37:b1:e8:67:
11:e2:e0:cb:bd:3e:25:ac:8e:28:50:b1:34:41:7d:
90:8b:b9:88:51:d8:af:a4:0b:60:7c:2a:eb:56:da:
71:88:7b:6f:d9:02:6c:69:22:07:3a:73:3a:50:4b:
ed:e7:c2:09:11:49:5c:9e:c7:1d:84:3e:ed:d3:e5:
5e:95:3b:25:1a:00:0f:d9:74:f9:ba:4d:11:ca:0e:
41:c2:a6:fc:40:f7:a4:5a:da:22:09:7f:6e:18:b6:
22:fd:ff:8d:ac:69:40:f7:54:57:0e:1f:6a:93:fb:
7a:fb:c1:f3:4d:15:81:d3:10:06:74:00:ab:15:fe:
10:d5:fb:31:76:dc:bf:c2:03:f5:94:b1:3a:a5:eb:
28:cf:3d:90:4d:96:90:89:6a:20:94:02:63:3e:a6:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:6A:90:44:6D:05:D6:FA:02:81:70:BB:B6:33:DE:B1:E7:57:F9
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ac:57:ba:8d:47:7b:b1:b3:05:20:56:d1:cf:e4:dc:5b:c5:
13:48:20:19:ca:d3:66:68:d3:f4:2a:70:b1:d5:35:69:cc:8f:
52:3e:01:bd:0c:62:ad:e3:76:b6:82:b6:34:b8:35:71:be:b5:
6c:c6:28:fa:10:af:1b:dd:23:52:e4:bf:30:0f:8b:ad:ab:df:
a2:bf:4a:33:67:8b:04:31:de:4a:71:6b:50:fa:9d:4d:3b:5a:
88:0e:f7:1a:b7:ef:e8:97:80:e6:ea:a8:eb:f6:0d:22:03:cf:
94:3d:97:71:48:ef:12:b2:d6:5c:d3:50:a2:d2:bc:fa:0d:2a:
c7:00:e1:30:68:72:f9:b1:ec:a2:1b:b3:23:d9:0e:95:9a:b3:
04:c6:9a:aa:9f:6c:cf:70:2e:bb:bc:38:91:ca:71:7f:92:d0:
61:d4:25:c4:14:ce:e4:62:6f:7d:bc:d5:ba:6e:4e:34:e2:ae:
41:8c:d0:21:34:f6:d3:22:3a:db:20:cc:e8:c4:08:cf:33:17:
9b:0e:35:5d:36:7e:fb:6f:4e:15:7c:4f:7d:59:9d:aa:16:f3:
8e:e8:cc:02:de:c9:2f:53:ff:01:71:aa:9a:6d:cc:52:bf:cf:
56:bf:75:85:4a:1c:7d:de:49:b0:41:08:4c:b5:03:27:e7:b1:
ce:81:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:34 2026 by rpki-client