
$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier: R31PqrpELuqSq+VDDgzQcLFfNsCmuTfXaO7+8aWuygU=
Subject key identifier: 29:32:35:A7:00:F3:01:58:1B:9F:71:64:E9:EC:70:6E:C0:9B:45:8A
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial: 09AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number: 0999
Signing time: Sat 04 Apr 2026 19:48:00 +0000
Manifest this update: Sat 04 Apr 2026 19:47:59 +0000
Manifest next update: Sat 11 Apr 2026 19:47:59 +0000
Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: MYKDdR7c1WiiqimKOrM7VyFjhPcBQ2WEGsvpsCODBtw=)
2: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: QVfdEdXCocoSVGgWS+Yl9hl7mgDFeG4r0nSsOh9ZTOM=)
3: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: PQw146eyKjPqxP/GNGS/hIkUi+lf/ZqFvVQElnQS1VQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Validity
Not Before: Apr 4 19:47:59 2026 GMT
Not After : Apr 11 19:47:59 2026 GMT
Subject: CN=69d16af0-c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:f3:2c:89:fc:a0:26:6c:7c:b1:37:24:9d:
d6:69:c8:fb:1c:e8:fb:0a:c9:2c:06:1a:e4:1d:45:
79:29:8c:7f:ee:b6:08:5e:52:ae:bb:15:48:be:a2:
1c:80:bc:f3:0a:c3:79:ec:d5:9f:89:43:d5:7d:7b:
13:e5:60:73:b5:4f:fb:4f:29:0e:1c:b8:2b:6a:f4:
83:8e:84:15:b7:4d:0c:da:58:48:ab:b8:9e:ec:9b:
07:73:90:f9:7d:a4:a6:ba:a2:08:ec:0f:d6:3f:84:
29:bf:3a:6b:44:50:81:eb:36:62:7e:6f:83:f3:8e:
60:ab:77:5a:f6:71:fe:d7:4f:41:14:8d:34:6f:23:
2e:bd:50:19:a5:07:9f:31:16:07:1b:2d:09:9e:3b:
3c:85:55:ed:a1:79:80:95:ac:ce:6a:ba:20:2a:15:
4d:39:1f:3b:8e:ff:77:13:44:01:85:30:8e:a0:f8:
8f:29:56:9f:03:81:d3:01:65:bc:fe:ef:92:12:3f:
84:8d:61:0c:d9:03:49:1d:d1:fe:1e:5a:3d:3a:ac:
e3:c5:10:6f:92:4e:c9:79:07:f6:fe:9d:b4:50:2b:
ce:06:b6:7c:1a:0e:d1:23:a9:66:49:26:bf:df:3b:
2a:49:44:d0:8a:ce:f0:13:3e:02:09:84:69:a8:d0:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:35:A7:00:F3:01:58:1B:9F:71:64:E9:EC:70:6E:C0:9B:45:8A
X509v3 Authority Key Identifier:
keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:05:e0:6f:44:e9:9a:90:a7:20:3f:cb:1f:6a:ad:4f:6a:
df:15:9b:09:4a:cc:86:f7:e4:94:02:61:9b:07:3a:df:d0:41:
a0:2c:80:b9:73:e1:21:9e:41:42:77:6f:89:5d:d9:39:f9:85:
33:0c:a6:1c:59:3f:5f:12:41:58:09:29:a8:65:8e:84:b1:e2:
3f:c2:e3:8f:e1:61:ca:f5:b9:03:17:65:51:3e:95:07:5c:da:
6e:82:ce:94:b6:6d:0b:89:4d:7d:35:ae:d6:f7:9f:68:60:30:
6b:f4:24:3a:40:97:4f:0a:a8:f1:85:17:db:88:5b:4d:bb:48:
2f:c0:89:42:6c:bf:3f:bb:c6:55:de:31:a0:10:06:e7:3b:64:
5c:59:7d:51:e2:7f:20:39:ab:3a:56:20:5d:6f:f1:48:2b:b2:
ef:45:52:38:35:0b:a5:00:31:dc:e6:c1:fb:01:38:98:2a:52:
49:ab:5e:8d:98:ac:f8:ae:0d:8d:5b:cf:88:bf:3f:ee:73:e4:
aa:73:58:1e:b9:b8:11:ca:a3:aa:78:ca:dc:47:b5:f0:d9:1d:
76:b3:43:ce:a9:56:dc:6d:f3:04:b3:b9:8a:f6:2d:67:2a:a4:
42:ff:eb:ba:8f:dd:4b:2c:32:d5:fa:3e:d4:64:ba:0a:d8:48:
e1:04:df:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4
NjU4MkYyNkMwHhcNMjYwNDA0MTk0NzU5WhcNMjYwNDExMTk0NzU5WjAYMRYwFAYD
VQQDEw02OWQxNmFmMC1jN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/bzLIn8oCZsfLE3JJ3Wacj7HOj7CsksBhrkHUV5KYx/7rYIXlKuuxVIvqIc
gLzzCsN57NWfiUPVfXsT5WBztU/7TykOHLgravSDjoQVt00M2lhIq7ie7JsHc5D5
faSmuqII7A/WP4QpvzprRFCB6zZifm+D845gq3da9nH+109BFI00byMuvVAZpQef
MRYHGy0Jnjs8hVXtoXmAlazOarogKhVNOR87jv93E0QBhTCOoPiPKVafA4HTAWW8
/u+SEj+EjWEM2QNJHdH+Hlo9OqzjxRBvkk7JeQf2/p20UCvOBrZ8Gg7RI6lmSSa/
3zsqSUTQis7wEz4CCYRpqNDi2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkyNacA
8wFYG59xZOnscG7Am0WKMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB
QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu
RlNnMVJPMWx0R0dHV0M4bXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkFcF4G9E6ZqQpyA/yx9qrU9q3xWbCUrMhvfklAJhmwc639BBoCyAuXPhIZ5B
QndviV3ZOfmFMwymHFk/XxJBWAkpqGWOhLHiP8Ljj+FhyvW5AxdlUT6VB1zaboLO
lLZtC4lNfTWu1vefaGAwa/QkOkCXTwqo8YUX24hbTbtIL8CJQmy/P7vGVd4xoBAG
5ztkXFl9UeJ/IDmrOlYgXW/xSCuy70VSODULpQAx3ObB+wE4mCpSSatejZis+K4N
jVvPiL8/7nPkqnNYHrm4EcqjqnjK3Ee18NkddrNDzqlW3G3zBLO5ivYtZyqkQv/r
uo/dSywy1fo+1GS6CthI4QTfzw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:24 2026 by rpki-client