
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier: CV/yW0+qeQIjkQ1beFw/fciJUGw4Uzp9GVIijwYvMGY=
Subject key identifier: 92:17:74:C7:48:0B:58:AA:54:E3:9A:CF:08:BE:31:F5:52:DA:01:E7
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial: 1F1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number: 1F07
Signing time: Mon 22 Jun 2026 16:00:14 +0000
Manifest this update: Mon 22 Jun 2026 16:00:13 +0000
Manifest next update: Mon 29 Jun 2026 16:00:13 +0000
Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: OWW2zLMVWsDXJ+mcKZ8aA2hmEchsu2oUy/5tJwydD1s=)
2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: 1uL/iGleC4ndS65zjcBm2KBk7uIxinb++OXJi9TogpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7967 (0x1f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Validity
Not Before: Jun 22 16:00:13 2026 GMT
Not After : Jun 29 16:00:13 2026 GMT
Subject: CN=6a395c0e-6ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:c5:70:83:7f:9a:38:2c:c1:4a:ca:0c:44:
8c:02:4f:73:fb:5e:82:b5:c9:8c:62:6b:ec:54:c2:
f1:8b:54:ac:a3:1b:89:fd:38:de:e3:eb:61:ff:dd:
d2:a2:8d:44:cb:cc:b4:96:ed:3a:dc:22:13:d8:0f:
d1:ba:60:22:b7:fe:c2:be:2f:7e:40:8c:aa:ce:3e:
d3:11:b2:97:29:7c:cd:9a:df:84:4b:2d:a1:98:98:
5e:49:05:7b:46:86:11:bc:d4:77:62:00:98:5f:fd:
10:7b:5f:7c:0d:e8:6f:d3:36:8b:76:71:bf:b3:78:
12:58:54:e2:de:81:c5:6f:85:c6:5a:ac:53:d3:2b:
81:39:67:a7:ab:b3:94:81:df:02:ab:3c:f6:d4:ea:
f0:40:6c:04:dc:1e:0a:25:59:b7:33:b8:ef:fa:08:
56:a8:50:4c:42:3e:72:7d:f8:68:c8:14:0f:44:d6:
57:55:17:02:39:b6:7c:00:8e:1e:c5:cd:dd:af:49:
19:96:4a:f2:04:2d:ee:36:b8:58:03:0c:29:3c:bc:
0b:98:92:26:9b:96:a4:62:03:f2:9b:0d:f4:c4:7f:
7c:4f:f8:d2:c3:6b:d5:a1:78:f7:1a:da:ef:36:78:
d9:48:ba:6a:5c:d6:13:57:5a:b0:4b:08:cc:4c:89:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:74:C7:48:0B:58:AA:54:E3:9A:CF:08:BE:31:F5:52:DA:01:E7
X509v3 Authority Key Identifier:
keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:fb:fd:5a:ce:1e:65:99:c3:49:6e:72:83:51:a3:67:fe:46:
c1:ae:17:78:85:ba:1c:fa:97:f3:1f:03:00:70:88:66:02:ea:
7c:38:e0:3e:dd:4e:41:31:35:9c:3e:69:7e:2e:d2:37:65:9f:
ce:1f:b3:94:ee:9d:93:db:b5:23:2a:fe:9f:25:0a:d7:df:22:
7b:0f:1b:7f:14:3c:00:28:de:f6:bd:be:fa:f7:1d:b5:56:8d:
2e:ec:3c:d2:51:7e:84:51:2a:a6:38:26:f5:92:93:14:79:be:
58:b2:99:76:65:33:51:b6:e9:af:21:f1:e5:58:14:d9:9a:41:
93:ec:55:65:28:e2:1d:fc:36:3e:e7:17:8a:eb:86:69:c5:dc:
b5:d8:69:ca:a2:43:2c:06:92:b6:2f:e6:d9:c4:29:28:cf:ae:
13:ec:d8:25:b8:84:4c:52:59:75:e4:7a:0c:cb:ab:6f:c8:38:
87:40:b2:23:ce:b9:25:ef:5c:03:10:57:bd:1d:c1:79:77:a1:
e1:39:0b:1a:14:36:e5:6a:c6:74:86:bb:1d:8e:73:13:3d:68:
fe:c8:85:d5:ac:7e:53:1f:dc:d2:a2:61:bc:4c:e9:8f:c2:ec:
97:39:c4:c8:be:78:8d:a9:9e:b3:66:5e:1e:15:a6:eb:de:17:
70:ca:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:14 2026 by rpki-client