
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier: BItJ+60KROyOzhElwEJOuHbLRjb5vj6NvBgYctDdXTA=
Subject key identifier: DA:0C:40:00:C1:BD:93:C3:EF:BD:3E:4C:86:B6:B9:39:EE:6E:B1:5F
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number: 01D1
Signing time: Sun 05 Apr 2026 03:16:10 +0000
Manifest this update: Sun 05 Apr 2026 03:16:09 +0000
Manifest next update: Sun 12 Apr 2026 03:16:09 +0000
Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: iepeZx1/qr1OZeRrargH4VsxRr+fj8TIPKxmx8biOF8=)
2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: Apr 5 03:16:09 2026 GMT
Not After : Apr 12 03:16:09 2026 GMT
Subject: CN=69d1d3fa-3f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:b6:22:67:14:5d:7a:4d:ce:25:23:38:d3:
c6:54:7c:fa:cc:01:c3:8e:f4:7e:17:2b:7e:80:28:
c2:57:d5:88:59:de:eb:b8:93:fc:12:a1:00:a3:91:
00:e3:39:40:09:08:3e:f0:32:51:6d:5a:9f:58:2d:
f5:c6:de:b6:99:54:4c:73:15:bf:ed:29:92:50:21:
99:95:8f:5a:b2:ea:af:cc:8c:05:6a:fb:39:df:d5:
99:2d:2c:95:4c:cb:59:28:b7:02:73:b3:a7:09:aa:
41:f1:0d:9c:39:e8:5e:10:16:2c:8c:94:c6:0f:30:
9a:53:e9:61:2c:8a:ab:51:bd:47:77:5b:2b:21:e6:
74:52:3c:76:88:ab:21:ea:c0:76:79:74:65:6c:71:
50:ae:69:57:ce:58:3e:e4:36:38:a9:90:dc:75:91:
ef:e9:fa:fd:7c:b4:75:63:c4:1c:fb:33:3b:0b:64:
17:fa:38:c0:67:36:0e:ef:61:7a:50:6f:90:cd:2a:
4f:2d:1b:8c:45:72:ee:ab:92:54:c5:8b:c6:c2:28:
44:ef:35:49:3e:4b:62:61:3e:2d:98:c1:3a:69:cb:
e1:e2:76:ad:01:54:2a:ff:58:79:29:71:d9:e0:72:
4c:d3:cb:d0:a5:1a:93:10:61:2c:3e:2b:90:1b:cb:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:40:00:C1:BD:93:C3:EF:BD:3E:4C:86:B6:B9:39:EE:6E:B1:5F
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:37:8f:ac:7a:26:1c:d7:48:c5:ea:4c:15:f5:e0:a5:84:
6f:da:27:a3:63:ca:49:69:90:3f:f8:d9:62:53:4c:6a:22:18:
95:f2:e9:57:f6:eb:e8:9f:7a:62:7c:84:16:0f:a8:78:ff:33:
a7:e0:74:c4:47:77:39:0a:a1:ac:51:d4:93:8f:39:52:16:1a:
68:fc:c9:f2:85:84:f3:da:65:23:ba:0d:45:ed:21:e9:92:2a:
c1:06:3c:f6:a5:e4:b0:8e:ae:a3:b5:d2:fa:cb:eb:36:3d:e3:
2f:35:65:2e:73:b7:48:79:ca:94:9e:4e:cb:ec:bc:fe:df:ab:
11:e1:ca:82:be:cd:2f:bf:04:26:3b:0b:fc:0f:6f:ea:af:c7:
02:6f:fa:e1:8c:69:e0:7d:72:f6:20:c8:9d:21:96:a4:d9:b0:
90:b2:7e:b3:91:ca:ff:06:4e:8d:70:f9:ef:67:4f:54:5c:46:
a0:dc:11:16:1f:ee:72:d7:49:b0:bd:0d:b7:69:ec:65:3b:ac:
b0:b0:e9:22:2c:90:35:cb:ec:20:cf:d0:12:40:6f:be:5a:9f:
53:f6:c2:1d:e4:fb:64:2b:a4:73:2c:06:f9:e7:a1:d8:66:7c:
c1:3f:f7:21:cb:33:55:c9:89:84:03:62:87:2d:7a:06:22:ab:
05:57:f3:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1
RkMzOTBEQzAwHhcNMjYwNDA1MDMxNjA5WhcNMjYwNDEyMDMxNjA5WjAYMRYwFAYD
VQQDEw02OWQxZDNmYS0zZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog62ImcUXXpNziUjONPGVHz6zAHDjvR+Fyt+gCjCV9WIWd7ruJP8EqEAo5EA
4zlACQg+8DJRbVqfWC31xt62mVRMcxW/7SmSUCGZlY9asuqvzIwFavs539WZLSyV
TMtZKLcCc7OnCapB8Q2cOeheEBYsjJTGDzCaU+lhLIqrUb1Hd1srIeZ0Ujx2iKsh
6sB2eXRlbHFQrmlXzlg+5DY4qZDcdZHv6fr9fLR1Y8Qc+zM7C2QX+jjAZzYO72F6
UG+QzSpPLRuMRXLuq5JUxYvGwihE7zVJPktiYT4tmME6acvh4natAVQq/1h5KXHZ
4HJM08vQpRqTEGEsPiuQG8t78wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoMQADB
vZPD770+TIa2uTnubrFfMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE
RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5
VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZEM3j6x6JhzXSMXqTBX14KWEb9ono2PKSWmQP/jZYlNMaiIYlfLpV/br6J96
YnyEFg+oeP8zp+B0xEd3OQqhrFHUk485UhYaaPzJ8oWE89plI7oNRe0h6ZIqwQY8
9qXksI6uo7XS+svrNj3jLzVlLnO3SHnKlJ5Oy+y8/t+rEeHKgr7NL78EJjsL/A9v
6q/HAm/64Yxp4H1y9iDInSGWpNmwkLJ+s5HK/wZOjXD572dPVFxGoNwRFh/uctdJ
sL0Nt2nsZTussLDpIiyQNcvsIM/QEkBvvlqfU/bCHeT7ZCukcywG+eeh2GZ8wT/3
IcszVcmJhANihy16BiKrBVfzCA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client