
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier: UcUwX/+hPnw6cREFYQQnuBINXxa2HbSm8Qxh+orkEPc=
Subject key identifier: 6C:A9:88:57:3B:25:14:E1:F6:A0:A0:91:85:4D:A2:9E:52:97:37:12
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number: 0680
Signing time: Sat 04 Apr 2026 22:17:38 +0000
Manifest this update: Sat 04 Apr 2026 22:17:37 +0000
Manifest next update: Sat 11 Apr 2026 22:17:37 +0000
Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: w0/UUkGiyR4Qd2hVKiBC1e2O+ESv1h3fxutIk8KF21Q=)
2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: WUXJJ8dA0rIPvSiYS0+Cpa5v7JDaDBTiBjA7j+6k8hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Apr 4 22:17:37 2026 GMT
Not After : Apr 11 22:17:37 2026 GMT
Subject: CN=69d18e02-d6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:af:53:0f:c7:75:f3:21:27:ec:5a:55:f6:
4a:ed:df:d4:53:92:77:dc:39:00:73:dc:06:10:ac:
98:46:2d:e8:9b:2a:16:c4:21:39:98:23:e7:18:58:
d4:ec:26:c8:86:98:3e:ad:12:d5:86:05:fd:66:d7:
36:eb:f2:cb:ef:aa:fa:e0:fd:b8:49:96:9a:57:bd:
80:d1:f2:28:04:36:ba:43:4a:5a:28:bf:a9:b9:10:
60:ef:29:5b:24:76:e8:e9:4e:b5:c9:90:12:ef:c5:
2b:53:0a:79:0c:c1:da:88:96:d1:48:4e:ab:28:1c:
e2:2f:6a:b2:6a:9b:87:c4:cd:36:3b:07:df:0b:c6:
5e:3f:85:87:d9:35:30:03:aa:02:26:01:f0:36:a3:
32:d4:8f:67:83:0a:ac:51:e4:35:b6:91:53:aa:55:
28:98:e9:8b:4a:ce:c7:16:bb:21:0d:94:2b:c5:7b:
16:3c:7a:ff:74:1e:66:c9:46:fe:4b:49:5f:b3:dd:
4f:f6:57:26:f0:66:f9:d9:10:cd:05:a4:cb:91:2b:
d3:fe:f1:11:dc:e4:44:20:82:41:37:bd:ef:4d:10:
ad:72:77:62:1f:20:1e:16:b5:30:4e:b2:c2:23:cb:
f8:54:a0:e1:57:f6:13:24:d1:89:a7:a1:67:52:b9:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:88:57:3B:25:14:E1:F6:A0:A0:91:85:4D:A2:9E:52:97:37:12
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:a0:a7:ce:76:94:e4:2b:61:4a:54:09:2a:8c:b7:30:77:
9d:ae:57:f7:cc:8d:cd:b6:76:af:43:66:8a:b2:9c:5e:8d:51:
41:e2:fd:c4:0c:68:c5:3c:0d:2f:20:39:45:7b:ab:7f:35:49:
00:ed:e0:43:e3:b8:9c:3f:0c:8e:cf:3a:89:96:14:b6:7a:18:
0f:05:83:ad:9c:ae:f3:6e:72:a3:bb:46:7e:18:2d:6e:d9:79:
dc:6c:0f:1c:c9:c9:20:1d:f3:46:2b:05:72:e2:c6:57:94:97:
6b:dd:14:2b:c9:4b:02:6d:86:4b:5a:36:fc:9f:f3:d7:bc:66:
4b:1b:17:44:0f:18:28:8e:06:a3:a7:ab:a4:3e:fc:03:dc:36:
10:79:22:4d:ac:55:02:b3:ce:80:f0:22:c5:4d:38:2b:da:73:
d8:a8:8a:c0:86:ed:37:95:3c:ed:16:93:ae:9a:ad:38:59:bc:
61:f5:55:dc:6f:f0:da:2f:37:00:53:2b:86:cb:34:26:36:28:
59:6e:15:5c:9c:63:3a:6a:af:be:4f:75:a4:20:02:06:ee:d7:
fd:1a:66:e3:8e:90:90:e2:3a:64:e2:b2:30:11:22:ee:a3:7b:
e5:ec:f9:9e:83:33:92:75:f5:00:0d:3d:ec:87:7c:92:56:e7:
cb:a5:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:52 2026 by rpki-client