
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: mcz9sVlUrTYMXQVTvNEJ231oAGlghTFULjPf4psLi3g=
Subject key identifier: 7F:D8:A6:6A:2A:E2:02:CB:ED:7A:A6:3A:22:CE:85:CB:25:9B:F2:89
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 01D7
Signing time: Sun 05 Apr 2026 03:06:12 +0000
Manifest this update: Sun 05 Apr 2026 03:06:11 +0000
Manifest next update: Sun 12 Apr 2026 03:06:11 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: Ph7s5VpKjElhJ0IkcnwepFobVqwXlJAhefQScJj/om8=)
2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Apr 5 03:06:11 2026 GMT
Not After : Apr 12 03:06:11 2026 GMT
Subject: CN=69d1d1a4-7113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:79:44:f9:43:20:74:85:2a:f6:65:43:22:
97:7a:3c:e2:89:38:a8:0c:27:67:8b:02:40:f2:36:
0a:64:82:e7:a0:04:f4:fd:ad:ed:87:fa:9c:64:a3:
9a:45:bd:01:28:39:ff:40:25:b3:1a:dc:21:bb:16:
89:38:ef:f4:02:fc:93:b1:52:e8:fa:82:f0:1b:24:
8a:8e:f5:ef:ae:3a:bc:07:33:91:69:63:55:a8:a1:
43:89:7c:cf:08:0e:1c:8e:31:81:b5:c5:90:0a:9e:
b0:25:3c:ea:6c:18:ff:b4:a2:84:84:03:85:ca:7d:
2a:d0:d7:fc:e7:d5:02:45:f1:19:35:1b:c5:bf:cc:
48:4f:a1:92:ad:41:b6:86:44:dd:fe:13:e5:4f:3b:
fb:52:66:1a:f3:ef:0b:0a:0d:c0:fa:91:2c:91:12:
c6:13:2a:60:19:8a:7f:9b:14:ed:ba:0e:35:b2:d1:
cf:f4:3a:4a:11:55:b6:ec:8c:ad:c8:26:41:78:50:
92:46:91:40:1a:89:fe:7c:c8:89:be:da:a3:2a:f9:
e4:86:16:b7:4b:3c:00:f3:dd:eb:cf:98:48:42:e7:
dc:2b:5b:92:ac:4c:0d:60:97:8a:c6:57:c7:17:37:
ec:d1:94:90:dc:a4:7d:30:2f:62:00:f4:0b:7f:d9:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:A6:6A:2A:E2:02:CB:ED:7A:A6:3A:22:CE:85:CB:25:9B:F2:89
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3e:b1:f9:cf:1e:1d:2f:c9:8e:ab:0c:9a:7f:45:64:cc:ae:
1d:d5:bb:e0:76:18:79:8e:f2:72:14:d3:e2:cd:06:36:16:a7:
ef:9f:9b:b3:2f:b4:40:ee:1c:c3:bb:e8:34:7b:e9:24:9d:14:
47:47:60:d7:9c:05:48:77:2c:25:2b:a7:eb:7b:17:a3:1d:da:
d9:16:66:cd:30:4f:8b:16:0b:15:27:04:c2:f2:eb:de:03:6a:
b1:b0:73:ca:e9:d6:ed:0b:49:59:46:a7:58:72:04:3c:a0:4a:
d0:76:00:a8:7c:03:ef:b9:62:4b:23:d5:2c:56:4b:e8:6b:80:
16:62:f9:cf:b8:f4:4f:bd:98:0c:80:80:ef:5a:f8:9d:e4:98:
a5:14:8b:f4:9a:ad:b0:c6:4a:75:11:44:17:79:04:6b:c8:ea:
ea:03:88:e3:cd:d7:08:c8:0c:73:9e:07:ec:fe:0e:92:35:28:
fd:1c:a2:31:1a:14:af:47:cd:38:d0:1f:d4:05:74:ec:86:89:
18:3d:7e:72:ba:b2:81:0e:12:67:30:bc:47:56:40:a1:d5:36:
a2:1f:79:d3:e0:10:5b:8e:0e:a8:93:6e:03:02:da:47:67:ca:
8d:2e:51:d4:4b:2f:b4:25:c8:8f:d9:cc:47:14:3e:05:5f:c3:
4e:e2:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:52 2026 by rpki-client