
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: XdWNN4H4fursrJnn3vjRQ8WWi3varO6h/eS6nMCJd1U=
Subject key identifier: 3D:9F:02:77:14:10:1B:05:C3:22:C5:EE:93:F1:51:6D:19:5B:6B:19
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 010A
Signing time: Sun 05 Apr 2026 05:24:49 +0000
Manifest this update: Sun 05 Apr 2026 05:24:49 +0000
Manifest next update: Sun 12 Apr 2026 05:24:49 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: xna7fvAxbyH8+UM/c4hMwK/e980EKmzXdCndKfrgRJ4=)
2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: Jw2/8hFCb7UkBZKdXroqCm0fztt63pPdu28ak1gMp9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Apr 5 05:24:49 2026 GMT
Not After : Apr 12 05:24:49 2026 GMT
Subject: CN=69d1f221-7c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:96:2c:ca:c1:02:c4:24:ef:04:ab:e8:59:
4f:fc:a2:8c:e1:b5:47:ac:ac:0d:cf:e0:66:36:fa:
43:34:11:22:32:9a:6f:94:b7:0d:1b:32:ba:1f:ad:
e4:91:0a:ab:47:7f:2e:3a:db:d2:e5:cd:7f:93:23:
45:dc:7f:09:d2:1b:ba:7c:dc:30:ad:8c:aa:54:db:
7b:d4:11:75:2a:70:73:58:d0:c9:84:48:bf:ee:fe:
c7:2d:e0:02:d0:19:7b:d4:24:70:c1:a9:f7:c8:fd:
83:41:e7:7d:d0:40:0f:80:7a:35:7c:aa:d3:96:12:
ae:cf:b5:57:a0:4c:5a:7c:24:59:14:a0:f2:6b:1c:
ea:46:56:65:10:65:c5:3c:52:e5:23:46:9b:01:68:
0c:02:d1:5d:47:0d:28:f3:b4:7d:67:1f:4d:40:fe:
60:8a:4e:db:19:bd:69:a2:d2:c1:2f:8d:7b:94:3c:
27:09:c2:68:eb:0f:db:03:99:2b:b1:42:81:b2:fe:
16:92:c0:da:dd:26:33:24:84:8e:94:61:c1:d2:20:
40:a5:54:5a:b5:2c:87:7f:ae:28:14:3b:91:82:6b:
08:c4:d8:09:8c:f5:77:96:0d:53:cc:5e:44:5b:5c:
0d:e2:5d:e9:f6:8e:43:ff:44:44:8b:45:bf:65:83:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:02:77:14:10:1B:05:C3:22:C5:EE:93:F1:51:6D:19:5B:6B:19
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:95:57:90:8e:3c:f3:d4:2b:26:1f:47:db:a7:b4:9d:1d:
a1:8a:68:0c:c6:15:31:b8:fa:b6:1b:a3:37:88:32:b6:63:7c:
ff:14:44:1b:79:a2:7b:61:b0:a3:d4:7e:67:f3:b8:bb:8a:25:
3e:cc:7a:d9:0c:e1:d2:5a:cc:f6:2f:a0:22:0b:17:0b:3f:8f:
cc:ce:b2:6d:4b:2a:b5:97:95:54:a7:fc:84:0e:9f:c9:36:b7:
41:56:4b:13:20:d0:63:50:9a:2d:30:1b:8d:cc:ac:1e:1a:c5:
80:ab:39:ed:a1:9a:66:a6:99:b4:30:5c:04:c7:e7:c8:18:ba:
b9:63:9e:94:c3:55:23:4d:ba:2d:3c:10:df:81:0c:c2:4d:ca:
37:9e:38:25:b1:fe:57:55:ec:d4:50:03:82:b2:8d:85:7b:67:
2c:e3:fa:9b:a9:a8:d7:c0:21:06:8f:50:0d:fc:9e:94:1a:55:
78:ba:5a:51:fb:d5:29:7b:11:ed:22:69:d3:a9:d6:6a:a4:c8:
c5:f2:fb:6d:6e:8e:d7:a4:ef:2b:80:30:ff:78:1b:70:6c:2a:
aa:30:b9:37:76:63:0a:82:c9:4d:99:42:ff:d3:9c:b4:ea:84:
dc:78:a5:06:e8:27:4b:9a:57:eb:af:5d:82:bb:9b:c7:be:aa:
79:c7:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:09 2026 by rpki-client