
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier: i1MY0SRgnqBhJfOL6iyuPoqcLAU/38oc+k/jM76o4Bg=
Subject key identifier: 9F:E6:51:4F:13:39:24:5A:C2:CF:09:18:66:53:F1:F0:44:AA:76:8E
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial: 1F58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number: 1F3F
Signing time: Tue 06 Oct 2026 16:02:09 +0000
Manifest this update: Tue 06 Oct 2026 16:02:08 +0000
Manifest next update: Tue 13 Oct 2026 16:02:08 +0000
Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: Zi8WPPrCUEOYXpf5ZU565E2to3u3mT8wGUFQdV0994U=)
2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: WNzcikHyNz/XCbkObbex7RStWIF1F/FG61SFteazfgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8024 (0x1f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Validity
Not Before: Oct 6 16:02:08 2026 GMT
Not After : Oct 13 16:02:08 2026 GMT
Subject: CN=6ac51b81-dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:e4:70:a8:77:62:d6:f8:6e:96:45:6c:e7:
0f:34:e6:7f:f2:d4:7c:6e:67:c2:60:f3:62:92:d6:
87:93:f6:ac:5d:c9:9f:b8:40:4e:41:f2:be:f1:aa:
ee:ed:4d:2c:e9:7e:ab:63:0c:19:f8:ac:3c:48:de:
fa:e6:0b:fc:d8:a1:e6:aa:c2:e2:17:eb:de:1a:cb:
e5:6b:ed:33:59:fa:1d:a2:35:72:9b:ae:d7:e3:71:
50:7a:f0:9e:d5:3a:1b:63:b9:81:c7:9f:35:88:8b:
ab:97:0b:42:e2:bc:74:b0:74:28:96:9b:a3:e2:a2:
53:0d:0a:1d:14:ae:b8:e5:0b:6a:e4:d3:f7:cd:4a:
bb:10:75:53:7f:b5:cf:c7:aa:e7:92:a5:b4:8b:c3:
9e:c3:4b:04:58:c5:8d:b7:01:b0:e9:4b:a0:d6:1d:
cc:1c:41:6e:91:cd:28:2a:3d:5d:33:01:b7:47:56:
94:e8:c3:f3:f9:63:29:2f:06:c3:06:51:de:77:86:
08:7c:13:17:fa:06:d0:82:e4:b4:66:7b:3c:40:26:
86:f1:bc:c7:16:60:f7:2f:6d:76:69:17:7c:33:5a:
5a:26:0e:55:7b:dd:f4:eb:cb:38:dd:72:f9:f2:23:
24:54:d7:99:a8:e5:5b:a2:01:49:0f:e8:43:a4:63:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:51:4F:13:39:24:5A:C2:CF:09:18:66:53:F1:F0:44:AA:76:8E
X509v3 Authority Key Identifier:
keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:d0:09:16:d7:d4:c6:21:f5:0b:ea:4f:83:bb:31:0d:17:
93:67:07:71:d9:43:ab:b3:fb:6c:e1:12:b7:a9:01:5e:13:8e:
9e:18:56:9c:dc:8c:5a:7f:4e:c2:55:51:7d:5a:5a:57:e0:6e:
eb:f0:28:12:c3:3b:3d:49:cc:3c:10:de:cd:2a:aa:d7:97:3f:
37:a1:40:4a:3c:d3:bd:26:b0:f4:c4:b3:7e:90:0b:e0:b7:ca:
e1:31:ef:24:59:54:a0:a7:44:ec:01:13:95:2e:58:86:16:e1:
7a:e9:57:a0:5e:2e:eb:06:e7:29:b5:99:43:14:00:49:17:1c:
1c:87:94:e0:50:0c:12:2a:9e:39:17:41:6f:34:24:eb:56:68:
ef:8e:4d:12:bd:5f:af:ff:8d:af:86:99:3d:e0:6b:0d:48:80:
c2:b7:5d:c4:6a:7b:66:cd:76:d5:8b:4e:66:a7:68:e8:5c:e6:
46:90:8c:c7:94:1a:63:9e:d6:a8:30:20:f5:17:f6:f9:0c:9b:
74:de:53:a7:e7:db:07:8b:c6:21:57:09:ed:3a:0f:46:97:46:
3d:55:c6:6c:80:40:bd:aa:f3:e8:f6:8a:1f:a6:28:80:0b:2f:
4c:04:02:93:85:90:8b:c8:8c:b7:bd:db:70:eb:22:19:a2:1a:
08:49:4e:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw
RUQ1RThDRjEwHhcNMjYxMDA2MTYwMjA4WhcNMjYxMDEzMTYwMjA4WjAYMRYwFAYD
VQQDEw02YWM1MWI4MS1kZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskDkcKh3Ytb4bpZFbOcPNOZ/8tR8bmfCYPNiktaHk/asXcmfuEBOQfK+8aru
7U0s6X6rYwwZ+Kw8SN765gv82KHmqsLiF+veGsvla+0zWfodojVym67X43FQevCe
1TobY7mBx581iIurlwtC4rx0sHQolpuj4qJTDQodFK645Qtq5NP3zUq7EHVTf7XP
x6rnkqW0i8Oew0sEWMWNtwGw6Uug1h3MHEFukc0oKj1dMwG3R1aU6MPz+WMpLwbD
BlHed4YIfBMX+gbQguS0Zns8QCaG8bzHFmD3L212aRd8M1paJg5Ve93068s43XL5
8iMkVNeZqOVbogFJD+hDpGM9uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/mUU8T
OSRaws8JGGZT8fBEqnaOMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz
QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL
eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASGXQCRbX1MYh9QvqT4O7MQ0Xk2cHcdlDq7P7bOESt6kBXhOOnhhWnNyMWn9O
wlVRfVpaV+Bu6/AoEsM7PUnMPBDezSqq15c/N6FASjzTvSaw9MSzfpAL4LfK4THv
JFlUoKdE7AETlS5YhhbheulXoF4u6wbnKbWZQxQASRccHIeU4FAMEiqeORdBbzQk
61Zo745NEr1fr/+Nr4aZPeBrDUiAwrddxGp7Zs121YtOZqdo6FzmRpCMx5QaY57W
qDAg9Rf2+QybdN5Tp+fbB4vGIVcJ7ToPRpdGPVXGbIBAvarz6PaKH6YogAsvTAQC
k4WQi8iMt73bcOsiGaIaCElOvw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:00 2026 by rpki-client