
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json)
Hash identifier: q4A2d/t9CVJWy4HRITUwO1M+9wJ4jxNdXLbvFOdSXq0=
Subject key identifier: 37:5D:7B:5F:BE:88:50:17:53:8D:11:9B:7D:88:C0:EC:12:66:40:23
Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
Manifest number: 02CD
Signing time: Thu 03 Sep 2026 01:21:42 +0000
Manifest this update: Thu 03 Sep 2026 01:21:41 +0000
Manifest next update: Thu 10 Sep 2026 01:21:41 +0000
Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: V+3lWqeXMbcUiv3mYWOnjFJekjPbTgpMV6l3aas5tSY=)
2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Validity
Not Before: Sep 3 01:21:41 2026 GMT
Not After : Sep 10 01:21:41 2026 GMT
Subject: CN=6a98cba5-167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:83:d1:46:55:4a:b8:0c:aa:6d:9a:2f:19:
d6:38:ce:73:a6:26:d9:62:1d:15:e2:3b:0e:72:9f:
a4:54:3e:72:a4:45:06:0f:1f:51:5e:ed:d3:07:47:
38:c6:55:73:52:2b:2a:ca:c6:28:2f:d7:ab:a3:d3:
aa:5b:00:be:46:40:5a:14:c3:2a:74:dc:1c:5d:c6:
4c:74:bc:8c:91:f9:6e:ce:3e:65:4e:2a:d7:8d:32:
00:9e:13:42:18:bb:a5:54:c6:cc:3b:1e:da:d3:3f:
54:b9:11:79:ee:b2:bb:5a:be:0a:f0:04:de:f7:8d:
42:39:ff:29:31:2b:9f:b4:f8:5c:ab:d2:30:5f:5a:
a1:42:59:fb:80:84:34:78:2d:a0:32:70:d8:3d:ef:
8c:68:83:8b:a9:96:fb:61:f5:21:ad:0b:0c:f0:1b:
a8:ae:62:dd:15:76:49:e5:66:10:cf:ce:f9:d5:b4:
06:a8:06:24:e2:90:28:a6:e5:59:d6:58:8f:18:25:
b9:b6:1c:64:4a:52:af:0e:61:5c:10:f6:46:f3:c7:
33:12:3e:60:bf:a5:ef:a2:2b:4e:c9:da:a8:bc:63:
9c:6e:c1:aa:d0:27:ed:e8:12:d0:c7:c1:b6:69:68:
15:e9:ef:02:e6:35:5b:ae:8d:ef:64:09:a0:2b:ae:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:7B:5F:BE:88:50:17:53:8D:11:9B:7D:88:C0:EC:12:66:40:23
X509v3 Authority Key Identifier:
keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:87:24:78:48:03:26:49:a0:33:3f:10:ab:de:95:79:56:
de:9d:07:a9:3f:91:f4:b7:20:77:1f:e1:f4:41:1d:89:f4:f5:
9d:4d:40:d1:ea:b6:05:93:05:8a:b5:58:e1:a5:96:1f:5c:e2:
43:dd:ec:02:c4:ec:45:37:f1:b4:7a:f3:95:c8:a8:a9:1e:60:
a3:57:9c:e0:a5:2b:9e:f8:c5:6e:c5:26:f2:44:24:65:f6:d2:
d6:91:67:0a:52:13:1a:da:06:fc:78:db:21:0c:f2:37:32:5e:
c6:b6:cd:1f:1c:86:f1:21:c2:fb:0a:5b:4f:1d:da:73:fc:42:
a5:2b:c4:04:f5:65:b7:1f:f5:1d:5f:68:8e:bc:5e:5f:2b:27:
7a:46:20:b6:5d:08:ef:7a:0e:8f:c8:4c:38:dd:19:bf:7b:25:
15:c4:3b:fb:01:bf:27:98:ff:fa:dd:22:73:f9:97:c8:71:4c:
18:f0:0d:9e:18:9f:1c:18:3f:1b:0c:60:20:e6:90:ac:ba:07:
e6:5b:42:a0:0d:f2:96:f1:f5:fb:0b:1a:53:7c:9b:c7:75:24:
db:be:8a:05:f2:d6:3e:e7:7a:9e:a8:7d:29:8a:d4:6c:58:0b:
ac:44:91:60:d3:e4:ad:56:a5:a3:fa:22:a6:54:69:94:04:a3:
d1:3a:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:07 2026 by rpki-client