
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier: VRO0h9PnEmYXRmuYotlg/2w6GcQf0qlIwezuRehsUGM=
Subject key identifier: 39:32:13:45:EF:36:45:D2:01:98:CC:C0:70:10:5E:E0:AB:06:05:A8
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number: 44
Signing time: Wed 15 Apr 2026 08:04:12 +0000
Manifest this update: Wed 15 Apr 2026 08:04:11 +0000
Manifest next update: Wed 22 Apr 2026 08:04:11 +0000
Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: Q5EmZp/zoyv+bobUUylBJw+CB2RykCaAPWaCMGGdUiU=)
2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Validity
Not Before: Apr 15 08:04:11 2026 GMT
Not After : Apr 22 08:04:11 2026 GMT
Subject: CN=69df467c-3d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:6c:3a:3b:64:f6:2f:fb:7f:9d:c7:db:3b:
48:f7:6f:70:85:13:bc:0c:c8:28:f3:2e:16:d6:2f:
e7:27:b3:08:55:ab:b0:02:da:07:43:61:31:86:76:
cc:29:e7:11:6a:9b:4f:3b:56:4b:9d:fa:c6:41:1f:
07:04:65:19:bf:d6:4d:f4:28:6c:d3:77:4b:77:cc:
d0:49:a9:7b:2f:c3:04:d5:a7:6d:d1:13:6b:41:89:
47:43:08:62:16:6d:93:f8:d5:3d:11:fa:e3:18:34:
09:47:d9:b6:ed:a7:dd:7f:fa:38:f3:5c:05:ac:2e:
ad:25:8d:7c:ed:cb:15:f9:ee:b5:1d:dd:03:0a:9a:
6b:b6:52:22:7c:90:5b:a1:9e:dc:40:66:55:47:93:
c0:08:5d:aa:b7:79:5e:4d:23:df:9f:b7:59:47:f2:
e6:88:df:08:b1:04:db:6f:13:fc:37:2d:1f:66:04:
08:80:53:d3:d1:e2:48:91:8d:ee:75:70:f6:db:6c:
9c:ac:81:73:60:0c:29:01:89:a2:e3:e0:a8:24:ed:
8b:ae:40:f9:59:e4:b1:f5:23:91:15:bf:f6:0b:f8:
0b:fb:85:b9:29:2e:af:8e:39:2c:8f:69:7b:76:71:
63:ea:17:05:4d:8c:25:fe:29:a2:73:27:63:88:07:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:13:45:EF:36:45:D2:01:98:CC:C0:70:10:5E:E0:AB:06:05:A8
X509v3 Authority Key Identifier:
keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:69:f5:79:9a:2e:38:0a:04:10:a4:7b:a3:98:fe:0c:5f:4e:
2c:f9:2d:a5:b7:e9:a9:22:7f:2b:a7:2c:4e:88:c2:d1:86:c7:
2c:99:0b:08:af:77:23:64:1b:0c:f5:80:7a:a5:35:5e:c2:7b:
18:5e:a3:ca:a2:8f:ab:13:54:73:fb:26:d4:4a:e8:2c:f2:6c:
62:29:ab:d0:68:23:93:fe:26:ca:7f:7c:da:bc:39:5e:5a:da:
24:8a:27:21:48:f4:3d:31:4f:48:9d:0e:17:2f:a8:d4:3f:1b:
7a:a6:19:e3:ad:5a:3e:66:5d:63:2f:f5:10:af:bc:cb:e5:f9:
d1:14:a3:9e:2e:fd:72:44:5f:ba:6b:76:0d:bf:3b:e0:f2:74:
fa:f4:fe:41:49:9b:37:06:de:9a:e4:c6:f6:76:19:47:7d:0b:
5d:8d:09:47:e8:f8:49:2b:53:fe:88:dd:3d:06:6f:e0:30:4b:
3f:d8:91:b2:86:4c:38:95:c0:e9:24:0d:2a:0c:dc:e0:65:ef:
5e:00:02:83:32:ea:fd:3b:2e:22:7d:ba:32:2f:7c:b3:8d:de:
de:23:22:9c:b8:20:80:07:7d:ab:c8:2e:fd:8f:d1:e6:ec:6a:
7a:e7:e0:68:06:2d:a3:8b:b0:d9:68:8e:c0:80:70:7d:f3:22:
72:4c:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 01:27:55 2026 by rpki-client