
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier: HW8Gk7hUXxZO3leWBqBCRbcdHqJD2LfSXk9OGzetvtA=
Subject key identifier: B1:21:43:9E:4C:45:FC:6C:9A:5E:FD:32:92:BB:9B:BF:91:29:20:F8
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial: 0B89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number: 0B7C
Signing time: Sat 04 Apr 2026 18:58:13 +0000
Manifest this update: Sat 04 Apr 2026 18:58:12 +0000
Manifest next update: Sat 11 Apr 2026 18:58:12 +0000
Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: ufqeyQYuGcuT/EmRemZts8xmQ/b8zn1Z7sUSEcEfc04=)
2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: tFJq8prm/jm01/luS9MVt882V4/WGQN42LpWhd1UgG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Validity
Not Before: Apr 4 18:58:12 2026 GMT
Not After : Apr 11 18:58:12 2026 GMT
Subject: CN=69d15f45-bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:d6:c6:30:8f:46:3a:41:94:fc:71:8a:d3:
2f:d1:ce:28:fa:74:25:61:2b:a9:61:5d:b8:6d:cc:
50:4b:71:62:9a:1f:61:a0:50:29:1f:f4:98:ba:4b:
c4:09:50:51:e4:8b:5c:03:12:19:f7:df:4d:35:aa:
f6:38:aa:c4:ed:37:8f:4e:2f:9e:d6:50:35:56:3c:
b2:0a:c2:5f:81:7f:d1:fc:7a:b2:65:fa:26:ee:72:
60:f1:c2:a5:5f:db:2e:80:85:c6:86:2b:b8:51:ec:
29:e2:58:d2:87:88:b0:78:c0:4a:4e:fe:6d:61:6c:
08:82:43:ca:53:ee:99:68:be:26:d7:85:10:7d:82:
67:52:e6:99:58:51:cb:23:8a:d7:57:b8:b2:5f:fc:
22:e4:ad:2f:40:70:14:bc:ed:33:29:7c:fe:48:f5:
0f:3c:f7:55:64:ff:1d:70:3c:e1:0f:ae:42:b0:9e:
b8:08:74:9e:4d:f6:2c:ef:4c:1e:1c:90:09:50:46:
b0:be:3c:c0:c7:74:6b:9b:27:1b:e0:3d:99:9f:7d:
f9:e0:92:46:54:92:3a:8f:1e:d4:af:4c:99:ee:04:
e2:ee:da:4b:ef:e9:ab:72:d6:84:a3:15:2e:31:ff:
49:53:35:63:4b:6b:1c:cd:5b:70:a0:0e:f6:85:54:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:43:9E:4C:45:FC:6C:9A:5E:FD:32:92:BB:9B:BF:91:29:20:F8
X509v3 Authority Key Identifier:
keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:69:35:65:8f:fc:6a:d6:59:bf:4d:aa:04:1d:26:c8:4b:
0b:82:0e:2e:be:0b:9d:32:c6:f0:36:79:2a:4d:ef:eb:54:b3:
3c:a1:37:c0:75:12:d1:1c:eb:e6:96:59:dc:62:9c:5d:ca:04:
fc:e0:ac:4d:b1:83:d0:41:ae:74:f3:95:01:9c:75:49:37:c8:
2a:75:15:23:91:a2:c0:45:64:8f:03:e0:a0:f7:8d:18:82:75:
83:21:44:33:b9:bb:a2:36:9e:f8:da:20:93:7e:2c:d5:2a:6e:
94:61:58:e6:37:f6:de:0d:a6:df:09:e6:9e:39:18:7c:8c:61:
64:88:a2:73:05:c7:2e:e6:c5:a5:4d:a2:2d:8b:34:42:e7:13:
6a:92:6d:4f:6c:ab:4f:b4:37:31:5c:5d:6f:10:3d:c8:eb:ac:
8e:f3:16:d4:73:c2:58:bd:f1:e5:d8:ca:95:39:43:f5:0b:3f:
1b:86:33:1a:8c:82:d0:36:d1:01:b4:35:3f:f4:7f:1c:3c:95:
8a:f1:a7:1e:40:86:82:c9:db:5e:9d:2c:5f:ef:e8:ec:ef:cb:
9c:32:4d:19:cb:cc:0a:45:e4:68:ef:67:12:19:77:a9:b0:eb:
a6:7b:80:aa:71:d5:79:f5:16:1f:0b:b2:83:39:ce:66:ca:28:
f1:6c:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:25 2026 by rpki-client