
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier: vLFXj6WIQi8faY3fkJrUCS21nk05z67/EznE+s2P+GE=
Subject key identifier: 5C:16:80:1B:93:EB:9C:58:DE:20:6D:BF:DD:CF:BD:E3:D2:8B:26:27
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number: 0431
Signing time: Sun 05 Apr 2026 00:05:33 +0000
Manifest this update: Sun 05 Apr 2026 00:05:33 +0000
Manifest next update: Sun 12 Apr 2026 00:05:33 +0000
Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: m6aetEx9tYz+pL9LCk1AFAjzWZGlf0pMDbYmZhqaC0M=)
2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KTSt+ZHRMgLJ8/R5wENqUSR1L1JAi9WdX/iu4I2PtVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Validity
Not Before: Apr 5 00:05:33 2026 GMT
Not After : Apr 12 00:05:33 2026 GMT
Subject: CN=69d1a74d-4ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:e2:9c:04:59:1e:66:50:0d:a4:fe:01:d8:
1d:a9:f2:32:6b:34:95:c6:5a:a2:7c:38:08:e4:ff:
a1:59:ee:5a:4d:92:c6:a6:70:a9:61:69:2c:40:59:
04:60:2c:5e:c2:1f:d4:cc:61:72:f6:d4:1f:40:e4:
45:81:be:e1:12:54:71:06:3b:d6:52:4c:6a:f7:dc:
26:66:bb:cf:cd:4f:77:e2:7f:2f:de:d9:5b:58:a5:
cf:96:c7:7e:95:15:0a:f1:4f:59:a4:ab:a2:5c:ea:
18:7d:fd:71:b1:73:b1:c2:d0:54:73:68:21:44:7a:
c8:f8:73:ca:af:38:f7:aa:4c:20:5c:26:eb:50:08:
3f:bf:22:c5:46:b3:c3:eb:14:30:79:20:fb:9c:5f:
ec:09:aa:a5:ce:5f:54:f7:38:ec:49:a0:f7:06:53:
40:23:97:df:4b:04:e6:62:e7:50:81:8d:04:4e:a1:
3f:08:03:df:fc:f8:a0:5b:78:1b:6a:75:55:2c:77:
37:66:c0:5d:72:4f:37:79:ea:a6:9e:3a:90:18:da:
75:5c:72:ba:12:1f:d4:13:a8:9f:c4:2c:8a:a8:57:
6f:fc:f4:ee:e8:dd:4e:76:da:93:b8:db:46:17:39:
70:71:bc:69:5a:a7:e7:db:e4:79:6d:8f:77:dc:c8:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:80:1B:93:EB:9C:58:DE:20:6D:BF:DD:CF:BD:E3:D2:8B:26:27
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:b9:9c:c6:06:47:09:d9:10:18:cd:a5:27:32:b8:71:0a:03:
dd:d6:59:00:81:e8:1a:ee:c1:54:2a:6c:ec:e7:d0:5c:a6:06:
6d:b5:dd:0c:30:66:64:80:97:b0:63:23:ae:0c:15:9a:32:dc:
eb:ca:a6:74:9c:4e:dc:1d:d7:37:44:4f:1b:3e:c7:63:f9:2a:
a8:70:be:a0:50:db:49:e7:1c:99:38:09:35:d3:47:ff:fb:e6:
52:28:0a:c0:96:a4:b4:f3:4b:8a:7e:1e:24:50:54:4c:c9:ca:
7b:f0:6b:5b:8b:97:9c:b2:ef:d0:74:f4:10:2d:5d:e3:cc:da:
9d:21:f5:61:80:ef:81:b7:5c:61:a2:72:bd:48:19:b5:29:bf:
d1:72:f1:ad:d3:16:7e:16:0d:5f:40:01:96:79:5c:7f:85:bd:
06:49:b1:b4:be:45:6c:e2:58:ac:0d:b8:0f:f1:99:bb:2a:44:
3a:76:4c:63:be:b6:ca:77:12:6d:f5:d1:4e:7e:f8:ea:89:7b:
17:96:c2:d4:72:cd:c4:5d:f1:1a:39:d3:93:5a:80:0c:1e:61:
f8:cb:2b:79:2d:9e:3f:e3:f0:1e:ad:47:1c:c0:1e:da:88:c5:
ff:33:dd:8f:44:89:1e:c8:7c:6a:ae:59:31:23:31:27:06:fe:
50:df:1a:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2
ODI5QTQwMjEwHhcNMjYwNDA1MDAwNTMzWhcNMjYwNDEyMDAwNTMzWjAYMRYwFAYD
VQQDEw02OWQxYTc0ZC00ZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxninARZHmZQDaT+AdgdqfIyazSVxlqifDgI5P+hWe5aTZLGpnCpYWksQFkE
YCxewh/UzGFy9tQfQORFgb7hElRxBjvWUkxq99wmZrvPzU934n8v3tlbWKXPlsd+
lRUK8U9ZpKuiXOoYff1xsXOxwtBUc2ghRHrI+HPKrzj3qkwgXCbrUAg/vyLFRrPD
6xQweSD7nF/sCaqlzl9U9zjsSaD3BlNAI5ffSwTmYudQgY0ETqE/CAPf/PigW3gb
anVVLHc3ZsBdck83eeqmnjqQGNp1XHK6Eh/UE6ifxCyKqFdv/PTu6N1OdtqTuNtG
FzlwcbxpWqfn2+R5bY933MhhTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwWgBuT
65xY3iBtv93PvePSiyYnMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG
MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL
b1V6Znllekk2YzlvS2FRQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYrmcxgZHCdkQGM2lJzK4cQoD3dZZAIHoGu7BVCps7OfQXKYGbbXdDDBmZICX
sGMjrgwVmjLc68qmdJxO3B3XN0RPGz7HY/kqqHC+oFDbSeccmTgJNdNH//vmUigK
wJaktPNLin4eJFBUTMnKe/BrW4uXnLLv0HT0EC1d48zanSH1YYDvgbdcYaJyvUgZ
tSm/0XLxrdMWfhYNX0ABlnlcf4W9BkmxtL5FbOJYrA24D/GZuypEOnZMY762yncS
bfXRTn746ol7F5bC1HLNxF3xGjnTk1qADB5h+MsreS2eP+PwHq1HHMAe2ojF/zPd
j0SJHsh8aq5ZMSMxJwb+UN8auw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:26 2026 by rpki-client