
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier: JTtKhiM/NQbZELeFnKSn0ZVZZqosKkKVHsY8NXUJg3g=
Subject key identifier: 29:E6:90:90:B2:6B:11:26:93:87:FE:34:0F:D2:43:F2:3D:C2:9E:F1
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer: /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number: 07F4
Signing time: Sat 04 Apr 2026 21:01:06 +0000
Manifest this update: Sat 04 Apr 2026 21:01:05 +0000
Manifest next update: Sat 11 Apr 2026 21:01:05 +0000
Files and hashes: 1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: OETw5GXIPnHMTlQEoYwZ6S1Vtz9SfppYG005ki9WUos=)
2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: jMr4N89qOZyKi9q+aLu8Ip1ELJIMw1+M2FfLhwkNI7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Validity
Not Before: Apr 4 21:01:05 2026 GMT
Not After : Apr 11 21:01:05 2026 GMT
Subject: CN=69d17c12-75c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:d5:a6:51:98:d8:41:3e:48:ef:9a:08:dd:
05:58:6b:2a:ff:99:80:68:93:03:68:1b:fa:49:73:
ed:7d:46:7c:22:64:8e:1d:dc:6a:f6:f1:9f:87:a6:
4f:4a:7e:92:cf:c0:12:fc:d4:81:63:62:82:59:4c:
56:1d:c2:9d:80:21:bd:51:da:e7:e1:fc:86:15:45:
cf:a3:4b:54:26:55:2c:73:76:b9:34:37:9c:a0:47:
48:df:79:06:4b:73:f8:d6:3e:cf:5f:85:07:d1:ff:
7a:1e:3e:5d:bf:d6:d4:15:25:54:ce:6e:d6:4e:4c:
b4:f4:d0:ae:28:1f:3a:bb:d0:74:2e:ab:e5:49:48:
77:2b:83:b7:95:19:ae:69:00:c0:fc:24:8b:8b:09:
76:5e:b0:53:2f:18:72:d7:21:8e:ca:1c:23:51:4c:
e4:7e:bd:5c:b9:c6:66:46:f4:53:a4:63:4d:f2:fd:
f1:2f:d8:a8:ac:c2:7b:9f:93:11:1f:79:f6:9a:ba:
97:d0:c0:c3:e0:42:72:1f:15:4c:07:e2:53:57:65:
ce:fe:a3:21:62:88:5a:40:5c:f3:55:d5:08:31:1a:
00:7b:b2:59:d3:c6:25:5b:b5:96:32:7e:7c:e0:54:
b7:60:42:c0:c6:81:4f:72:66:7a:6f:53:3f:d4:ab:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:90:90:B2:6B:11:26:93:87:FE:34:0F:D2:43:F2:3D:C2:9E:F1
X509v3 Authority Key Identifier:
keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:8a:c9:cf:3e:da:4f:c3:9e:b9:31:64:e0:ad:19:d6:0a:
e9:a6:c3:7e:09:92:7a:2a:cf:8d:b8:74:de:10:e7:2e:18:f1:
73:f3:9c:1c:5e:a1:f6:55:71:ff:0d:39:38:f7:89:c6:95:a3:
a1:84:66:3a:b2:28:ff:d1:ea:d8:d1:cc:01:cc:b7:d7:e8:ee:
c5:4f:ad:78:bb:c0:96:2e:d2:a1:39:7f:85:3f:c4:8a:4a:79:
b9:5c:dd:65:f9:79:0e:a0:35:a6:1a:1e:9d:37:2e:2b:ae:72:
db:54:02:bc:b9:d7:0e:e8:47:c8:4e:4e:aa:4f:7d:84:85:15:
00:7a:77:0e:31:f9:b2:95:23:d7:ad:e7:b3:25:bf:70:68:be:
90:f1:d7:4c:56:fd:1c:dd:4e:2a:f3:1a:bf:da:ca:02:4f:a0:
90:1d:dc:ff:a3:c1:ac:5b:8a:5b:c9:e1:81:76:4e:f4:09:48:
f8:9a:a6:1b:56:33:ff:d2:48:cc:0b:7b:f3:5d:45:6f:d8:35:
91:6e:b6:ea:f5:24:0f:25:b5:30:bb:59:c9:ab:1d:e1:d5:45:
84:a9:d6:8c:11:3f:c5:a5:3a:ea:be:96:32:a7:7c:a6:9d:b9:
e3:c1:d1:71:ea:72:53:1e:dc:97:d4:29:13:50:32:21:87:d7:
f9:da:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:32 2026 by rpki-client