
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier: hUaw2i4Jchrv9syFpxknMYpQZaxiwjBR0e+ERwYwfC0=
Subject key identifier: 9F:4F:E2:5E:65:E9:F7:B8:C5:5D:2F:0A:87:A3:9E:FA:04:03:2B:B9
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number: 3541
Signing time: Sat 04 Apr 2026 14:30:03 +0000
Manifest this update: Sat 04 Apr 2026 14:30:02 +0000
Manifest next update: Sat 11 Apr 2026 14:30:02 +0000
Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: AGf59qSTDfSi+1eplNox1UniiS1uAft5B5JLCa3yDSc=)
2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo=)
3: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Validity
Not Before: Apr 4 14:30:02 2026 GMT
Not After : Apr 11 14:30:02 2026 GMT
Subject: CN=69d1206b-9d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:17:7a:30:b1:5e:b3:2a:9f:0d:5c:8a:eb:
01:6a:96:dc:60:d4:07:d4:a6:e2:27:94:99:cb:f5:
aa:95:ce:e9:66:d9:6b:e6:5d:2b:7b:04:fb:8d:66:
92:07:68:a2:62:06:09:68:e3:a9:ce:50:8a:e2:ed:
59:72:f9:c2:3d:f0:24:35:0e:c5:db:a6:91:f3:99:
bd:f9:13:a4:3c:a8:8b:a7:16:8a:ff:aa:41:71:59:
9f:88:7d:17:e0:52:a4:0a:fb:51:94:05:84:ea:29:
e5:ac:be:33:d9:27:3c:09:73:27:86:b7:f2:d5:11:
13:10:09:df:7c:a1:13:f0:6e:15:39:be:b9:d5:db:
95:26:80:0b:97:05:d9:06:2a:60:1a:5d:e1:b3:09:
48:65:39:3c:05:f4:e5:31:33:e7:74:c0:f1:53:39:
7d:ac:32:1c:2e:63:c9:25:63:c1:94:0f:49:f2:da:
54:19:88:99:fe:ac:d4:41:15:f7:05:fa:25:ce:77:
51:46:36:77:0b:f3:c8:9c:56:16:3f:15:91:02:18:
b6:1d:f2:9c:03:5f:4d:0f:df:cc:b1:5f:a2:ca:b2:
d3:dc:8f:ff:bf:f3:26:2d:1c:df:0e:c6:d1:32:38:
49:19:77:46:7b:15:af:9a:fc:e7:8e:48:86:ad:77:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:E2:5E:65:E9:F7:B8:C5:5D:2F:0A:87:A3:9E:FA:04:03:2B:B9
X509v3 Authority Key Identifier:
keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8c:59:63:b8:d5:26:a7:74:5b:64:5f:41:a1:83:a8:d6:73:
13:d0:11:7c:d9:fe:2d:c8:fa:b3:b1:a8:9f:e9:e3:98:77:fd:
36:95:06:da:cb:05:92:df:7c:bd:35:a7:f2:fc:ee:21:9e:eb:
6e:ad:7b:15:2f:33:6f:53:76:40:ba:6f:92:ff:7f:13:ca:ca:
00:fb:71:63:20:fb:77:13:25:a4:d1:b5:ea:c1:92:b5:ac:a5:
1d:55:b1:43:66:13:6a:77:a0:22:55:d2:76:9c:ec:66:f3:a6:
0d:98:46:a0:df:50:fa:c4:76:85:77:06:57:90:ba:7d:ff:40:
b7:9f:05:1d:c5:8e:02:84:17:df:34:2d:c1:9f:36:a3:c1:58:
4c:74:da:76:7e:cd:5f:f6:c6:34:0e:68:73:d4:32:67:70:54:
43:58:76:ce:d1:11:e9:4c:cd:e7:d2:76:e6:a8:ab:c0:89:c6:
de:74:82:bd:2b:57:1e:f4:f1:10:49:c7:59:39:a3:5c:0f:17:
89:ed:48:aa:8b:a9:e6:fb:6a:16:a3:2b:f9:17:88:07:7b:10:
ad:20:9e:b8:ea:a8:1a:2c:29:a3:00:a9:ad:b9:ca:69:30:23:
55:45:6d:f5:fd:0a:60:1e:ea:f0:60:56:de:46:c2:15:db:5f:
5c:99:c8:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy
OUU3MkI0QkMwHhcNMjYwNDA0MTQzMDAyWhcNMjYwNDExMTQzMDAyWjAYMRYwFAYD
VQQDEw02OWQxMjA2Yi05ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvawXejCxXrMqnw1ciusBapbcYNQH1KbiJ5SZy/Wqlc7pZtlr5l0rewT7jWaS
B2iiYgYJaOOpzlCK4u1ZcvnCPfAkNQ7F26aR85m9+ROkPKiLpxaK/6pBcVmfiH0X
4FKkCvtRlAWE6inlrL4z2Sc8CXMnhrfy1RETEAnffKET8G4VOb651duVJoALlwXZ
BipgGl3hswlIZTk8BfTlMTPndMDxUzl9rDIcLmPJJWPBlA9J8tpUGYiZ/qzUQRX3
BfolzndRRjZ3C/PInFYWPxWRAhi2HfKcA19ND9/MsV+iyrLT3I//v/MmLRzfDsbR
MjhJGXdGexWvmvznjkiGrXc3WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9P4l5l
6fe4xV0vCoejnvoEAyu5MB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE
ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUVFMi82NDMyNEREODFEODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0
VHdDdWhZY0M3NDRwNXl0THcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn4xZY7jVJqd0W2RfQaGDqNZzE9ARfNn+Lcj6s7Gon+njmHf9NpUG2ssFkt98
vTWn8vzuIZ7rbq17FS8zb1N2QLpvkv9/E8rKAPtxYyD7dxMlpNG16sGStaylHVWx
Q2YTanegIlXSdpzsZvOmDZhGoN9Q+sR2hXcGV5C6ff9At58FHcWOAoQX3zQtwZ82
o8FYTHTadn7NX/bGNA5oc9QyZ3BUQ1h2ztER6UzN59J25qirwInG3nSCvStXHvTx
EEnHWTmjXA8Xie1Iqoup5vtqFqMr+ReIB3sQrSCeuOqoGiwpowCprbnKaTAjVUVt
9f0KYB7q8GBW3kbCFdtfXJnIiw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client