
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier: SZddJPSMXBgQ/Z/ZGB8K2u1nsvy78ql5kUo6CQKF5FU=
Subject key identifier: 5D:C5:0C:B6:38:40:D3:C5:77:5E:33:7D:75:BD:26:09:BE:E6:00:76
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 0975
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number: 0961
Signing time: Thu 16 Apr 2026 20:03:16 +0000
Manifest this update: Thu 16 Apr 2026 20:03:15 +0000
Manifest next update: Thu 23 Apr 2026 20:03:15 +0000
Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: ZiA551vv89YkIwJ+Vi9S7oUzEcXf2dQ4xOnvjURpJiY=)
2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: tEVppuvDqO2Igjts26bHGw8+2Z3qSj1DL7NhnyY1wWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Validity
Not Before: Apr 16 20:03:15 2026 GMT
Not After : Apr 23 20:03:15 2026 GMT
Subject: CN=69e14084-628a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:c1:5f:77:05:3a:2f:ec:2b:19:bd:7c:a4:
7a:95:5a:4f:a7:ca:99:93:bc:29:1f:e2:94:a7:ca:
65:23:00:70:9a:37:14:8c:3a:b3:da:66:35:58:df:
cf:ac:67:3a:a9:0e:d0:42:2a:f2:9b:fe:ae:6f:41:
81:b0:76:9f:56:39:d5:80:bc:9b:55:92:94:a1:7a:
d7:d8:5f:df:ea:fa:7b:d3:99:e0:1e:d7:ca:8b:f7:
96:1c:9d:d0:42:74:58:b2:c1:55:01:c7:cb:51:5a:
04:c0:30:51:7d:de:99:52:4e:34:83:f8:a0:8c:f5:
8f:48:0d:82:6d:f5:e4:ea:98:5c:31:e4:5a:fc:80:
18:a0:5f:7d:69:5e:05:ab:e8:48:63:47:b7:e5:e1:
39:62:52:f2:24:ad:db:d8:01:ea:b2:d2:95:47:c2:
c8:98:f6:c2:96:48:70:ad:ea:5a:9b:a9:19:4e:7b:
a7:fc:43:5e:ef:7d:30:6a:74:3b:cd:ac:18:64:62:
39:30:6f:6d:81:99:9c:76:d0:e7:13:29:a3:ea:b7:
36:a5:68:97:a6:58:ee:8e:53:e8:30:4f:ae:38:20:
ca:88:ed:f0:0d:b1:66:c0:b4:c8:f8:87:3e:60:8d:
c1:1a:53:2d:d5:e1:71:d8:a6:83:bd:c8:2f:15:8c:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:0C:B6:38:40:D3:C5:77:5E:33:7D:75:BD:26:09:BE:E6:00:76
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:79:77:c3:c6:61:1d:7c:c4:5b:d6:5e:15:9e:57:16:c0:
a8:aa:50:55:05:0a:51:a1:85:d1:ba:b1:0f:0a:bb:b8:d1:30:
82:27:01:89:23:17:e5:29:7e:b6:36:da:90:de:8a:b0:01:59:
07:e4:c7:e4:48:3b:0a:ff:10:ab:17:ce:f8:6f:72:31:15:c1:
8a:05:0f:3d:f0:6d:41:bf:8e:42:d7:95:63:ef:f8:49:04:a8:
f2:49:80:42:18:e7:46:af:3c:c1:0c:2b:88:28:80:ad:23:e3:
f4:39:07:83:9b:02:1f:e6:9d:da:e8:23:86:8e:cf:5b:86:d9:
11:bc:94:23:06:a8:48:74:ec:19:cd:26:76:87:59:2a:ab:01:
bf:8c:b3:02:05:e0:11:53:53:90:81:cb:f4:3f:1b:f7:af:fc:
b6:b9:89:3c:fe:65:7c:01:3f:88:ba:d3:53:52:a7:1c:b4:92:
95:9b:26:38:a1:d3:72:84:82:2c:db:f4:23:34:08:17:ca:ed:
71:9d:07:74:9d:e9:8e:3c:03:4e:44:b5:7c:d9:53:19:52:dc:
da:94:27:fd:8e:ce:d2:26:73:01:27:0c:0d:d7:8b:2b:b2:37:
4e:3b:67:8c:42:be:b0:8d:34:d4:42:b7:e6:85:3a:eb:8c:cb:
cd:21:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:05 2026 by rpki-client