
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier: NSw8htEbiYmote1Vg+ENntR1cdsii/KJcLgEyY+8Spk=
Subject key identifier: 27:6D:A3:8B:82:5A:33:18:13:41:48:1B:B7:68:A7:94:4C:6F:D3:D2
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial: 35DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number: 3587
Signing time: Mon 20 Apr 2026 14:41:30 +0000
Manifest this update: Mon 20 Apr 2026 14:41:29 +0000
Manifest next update: Mon 27 Apr 2026 14:41:29 +0000
Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: i1b24u+sFTNx3/NyXXFQ3YXSRofP/DmAS9gAX2PtT34=)
2: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: YNlGAXVG6Otxz1oTc91JGnEKWMVhDfGSlJsoaRX0wMo=)
3: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: mOn42WnRE+/Mos3ahI73htZV2BdO/yRo2Jrd4NQohQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 14:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13787 (0x35db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Validity
Not Before: Apr 20 14:41:29 2026 GMT
Not After : Apr 27 14:41:29 2026 GMT
Subject: CN=69e63b1a-217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:cd:7a:e2:10:34:dc:7c:63:93:d4:51:9b:
f2:91:96:4c:31:40:91:3c:b3:1e:a4:dc:98:b7:de:
76:01:e9:62:2e:c4:07:a5:78:f1:d3:16:b0:cd:bc:
b0:f9:de:de:37:a6:2e:58:44:8e:34:3b:0a:a0:66:
81:38:f3:f7:33:a4:2a:fd:b6:01:04:aa:bf:98:01:
d7:78:8f:a0:79:cf:f2:3c:03:a9:3a:96:a8:cb:00:
d2:40:b6:86:55:aa:5a:44:d8:65:bc:40:9a:89:61:
b9:7d:aa:b7:5c:2e:7a:0d:22:90:16:f7:6b:a6:c5:
5f:eb:5b:25:3f:c2:8b:31:ea:cd:49:01:40:91:b8:
a5:52:e5:55:22:ce:84:33:b1:ad:ba:3e:a8:96:04:
3d:14:d6:03:68:3b:d4:db:27:3b:56:27:ca:a1:cf:
61:19:ba:c8:bc:2b:a3:40:a9:d3:be:c5:93:41:44:
cc:17:f5:1f:26:91:ce:a5:2c:96:c0:42:78:0e:9c:
3a:2f:55:e3:cd:87:9b:df:ee:63:a9:43:9f:58:5f:
f9:25:e1:5f:93:9e:b5:cd:30:3a:ef:69:b7:7a:1e:
52:b8:99:3a:01:61:82:30:ef:da:60:c5:cf:fc:8c:
b2:70:d2:af:4a:d6:71:d6:b6:f6:69:ea:88:88:d7:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:A3:8B:82:5A:33:18:13:41:48:1B:B7:68:A7:94:4C:6F:D3:D2
X509v3 Authority Key Identifier:
keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:77:48:3a:4e:e5:92:35:e3:12:b5:b7:d2:14:19:5c:5b:04:
5e:94:8d:5e:9a:e3:f1:72:f8:2a:87:2c:31:9c:32:11:7a:41:
de:54:9d:d6:78:1d:c8:ab:78:84:a2:58:a5:f5:13:3e:61:d9:
e9:d3:f9:b1:c0:f1:f9:6c:92:6c:30:fd:e3:09:78:14:31:2a:
61:7b:8e:e5:f0:8e:b1:59:29:d7:b6:97:a6:49:ae:19:ea:b2:
45:76:91:c4:1e:5c:92:2f:89:ce:2b:69:50:54:d1:d8:4b:4c:
28:4e:d3:b9:86:3f:4c:4e:da:16:c3:d1:14:58:16:bd:d1:96:
20:15:26:b7:ac:40:de:1a:15:25:62:b8:b7:f9:eb:1d:91:f1:
99:24:2e:eb:8f:61:bb:24:61:0c:74:82:fa:46:83:92:83:b0:
44:a5:71:fa:e2:fd:da:2a:4b:89:b6:d2:d4:8a:03:b0:9a:8a:
5e:08:73:54:55:c0:27:ce:be:a2:e1:11:ea:64:5d:f3:8a:d8:
e4:b8:3b:b2:7e:14:e1:8e:23:6c:c0:c1:cc:14:0c:00:6d:e5:
60:6b:af:bd:a5:ef:cd:69:7a:56:b7:07:19:07:80:94:3a:86:
e5:0d:2b:f8:07:7d:db:b0:41:d0:32:4e:54:f8:50:bc:fd:66:
42:d6:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:19:57 2026 by rpki-client