
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: ncMFbN0/wgZimGM6kz0m2/BDQvJVSFsynykHIHugoPg=
Subject key identifier: E0:22:B8:6C:32:C9:FE:CC:29:8A:E2:11:8E:E6:6D:51:77:7B:63:96
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 0260
Signing time: Sun 05 Apr 2026 01:46:49 +0000
Manifest this update: Sun 05 Apr 2026 01:46:48 +0000
Manifest next update: Sun 12 Apr 2026 01:46:48 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: x4bSvee22GZwFJfEu6a6qhXfc2lLpKHqyvl4glrUDkQ=)
2: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=)
3: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=)
4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Apr 5 01:46:48 2026 GMT
Not After : Apr 12 01:46:48 2026 GMT
Subject: CN=69d1bf09-d877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:de:87:00:da:1f:7b:6d:be:f8:b3:d1:b6:
2e:07:9e:79:f1:22:d6:8e:6e:16:f9:86:e4:50:dc:
c5:7d:b3:81:47:3a:1a:57:7b:ca:b8:d8:16:f1:f6:
0d:02:b6:a1:59:3a:ac:ff:c4:8b:02:9f:3f:32:1b:
ea:e8:55:5f:42:ab:7a:94:ca:73:0a:87:4e:fb:a8:
5b:70:e4:03:8f:49:5e:f6:df:3e:1d:16:aa:ad:02:
e9:46:27:77:fc:77:27:d8:51:57:9a:65:48:7d:3c:
40:3a:04:07:ed:42:78:15:d6:ff:3f:59:11:fd:01:
8d:c2:ce:cf:87:66:f8:6a:c7:73:cd:8e:a5:e8:7f:
a5:6c:37:33:7f:2f:a2:45:90:2e:67:54:8e:05:18:
e7:0f:22:e1:60:a7:8d:5f:b6:f3:2a:d9:2a:66:d8:
be:98:c9:3f:d0:5d:5d:d6:b4:ea:23:da:1c:19:fb:
db:b7:2e:c5:87:e7:93:73:1e:81:9c:b1:e9:be:5e:
58:88:bd:4d:8f:0e:7c:d5:ed:0c:56:88:f0:f3:b8:
00:15:a2:9e:76:37:25:2c:a4:ce:e0:d7:30:2c:89:
64:e2:1d:49:a7:4e:69:94:72:dc:eb:f8:ff:85:77:
d9:63:53:f0:53:2d:18:ab:2e:c6:ed:8f:b1:15:15:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:B8:6C:32:C9:FE:CC:29:8A:E2:11:8E:E6:6D:51:77:7B:63:96
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d7:10:fb:50:3c:cd:9d:de:5d:1e:01:df:f1:a4:df:2a:fd:
2a:a6:67:50:f0:f0:22:1a:ef:2a:1d:a5:13:6f:12:29:e8:ee:
ac:b0:b7:5e:86:24:80:1e:71:8e:35:86:21:82:a1:71:f3:7e:
2d:46:08:fe:7f:29:a9:d1:45:b1:5a:8b:80:c6:30:14:87:e1:
62:37:a8:c0:50:b8:89:6b:2d:e9:5b:17:76:07:94:73:06:a3:
60:15:fe:2b:12:4a:bf:ac:e5:48:87:18:61:57:7f:d6:8b:ae:
42:b8:09:63:2f:61:b4:5d:c4:cb:34:8a:02:e9:a6:a2:fe:e0:
e0:97:f5:30:45:df:27:a3:73:d6:91:66:06:0a:7b:8d:64:c2:
e7:bd:5d:07:4b:6c:8e:ae:ff:dc:59:97:95:b3:01:00:dd:a5:
d6:42:74:05:b6:40:88:73:f8:8f:d8:e0:f5:77:a1:eb:bc:0f:
6a:72:47:2d:f4:cb:77:49:cb:5e:68:2a:34:76:3d:cd:bc:5e:
5e:a0:d1:eb:88:22:fa:9d:38:f2:33:e8:af:ff:fa:6d:b3:4f:
27:39:ca:75:15:3c:2f:c6:ff:9d:97:de:1b:a9:d1:cf:53:07:
4e:a2:f6:44:8b:f3:7f:30:7b:6a:0e:96:1d:7b:ca:12:aa:16:
39:1a:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 05:58:47 2026 by rpki-client