
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier: 9Ps6d2LzodoaObM5BTssX16uAVl5nKnpXYR1NCwHCH0=
Subject key identifier: F3:5B:0C:18:30:4E:EF:11:48:73:75:4E:98:DF:82:10:70:A9:BA:B7
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number: 0285
Signing time: Mon 27 Apr 2026 01:53:50 +0000
Manifest this update: Mon 27 Apr 2026 01:53:49 +0000
Manifest next update: Mon 04 May 2026 01:53:49 +0000
Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: KY8uHuHlaKb0wXo1HwWbxtm50g9RqR7zVLt4JjFBDWE=)
2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: 56OWJIaGJbU897Qsu8EsYt1ihb4Vo/hHqb3TZGrUjxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Validity
Not Before: Apr 27 01:53:49 2026 GMT
Not After : May 4 01:53:49 2026 GMT
Subject: CN=69eec1ad-020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:46:80:a8:bb:88:84:36:a0:70:6d:f5:3a:
8b:57:ec:3d:2a:63:f1:6a:b1:e7:aa:e1:15:cc:8d:
de:f6:9b:8a:7f:11:73:58:a0:c1:5e:a2:d6:02:b6:
cc:6c:52:60:7b:6f:93:60:9c:6d:41:8e:ee:f9:ea:
d7:0c:b2:78:c7:05:67:0e:fa:26:24:a7:55:f7:d3:
30:21:73:e3:5b:ef:82:33:53:bc:ea:8d:ab:fc:ae:
a6:41:db:62:1d:ad:bf:7c:d5:87:4a:16:5e:d9:ee:
b4:3f:48:95:8b:b6:41:b0:fd:13:85:9a:cf:40:a1:
c7:01:7b:4b:68:27:c9:41:eb:61:29:0a:e2:59:14:
45:ee:17:95:8f:3d:39:0a:15:df:33:99:53:70:8e:
a3:1b:e9:a0:4a:00:d1:6a:ac:1b:80:be:28:b9:87:
0a:e2:65:af:1c:76:36:4d:06:d3:72:5e:65:0a:83:
c5:3c:5b:69:6f:15:7b:41:74:22:3b:ad:a6:dc:46:
6b:e0:e7:6f:58:18:62:04:5c:78:21:a7:f4:b8:11:
f4:77:ab:e9:b6:c9:f9:15:3e:88:d8:ec:ed:94:17:
e4:b7:db:9e:84:93:c7:f3:15:07:b2:c0:5c:c1:ed:
07:ce:e6:c3:d7:5e:7a:67:66:ba:4e:87:c5:cf:93:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:0C:18:30:4E:EF:11:48:73:75:4E:98:DF:82:10:70:A9:BA:B7
X509v3 Authority Key Identifier:
keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:22:d9:d4:ff:bb:d1:d1:29:9f:f3:49:f5:d8:4b:a0:58:
7c:5b:c0:33:49:45:fd:97:22:6e:c4:20:06:d8:7f:e8:7c:b2:
ff:b4:6c:48:0f:5e:c3:88:e8:29:a2:b8:56:cd:7a:e4:75:db:
eb:78:70:27:8c:97:83:a7:19:d9:a4:4b:5c:a2:54:ec:f3:09:
6f:23:0d:fa:e1:bb:7b:fa:28:d7:01:2b:6b:c6:5b:e7:a1:5d:
66:47:f3:9d:bc:34:36:2c:9d:e7:02:c8:86:dc:57:ca:30:65:
b4:5c:36:e3:56:20:47:72:19:15:1b:10:cd:bb:8f:df:29:c8:
60:a8:1c:a7:87:a6:4d:fb:36:82:4e:98:4b:75:b4:e0:24:45:
44:5f:a4:65:72:2a:7a:0c:aa:43:a3:40:30:17:d3:86:ef:97:
7f:0c:96:c4:bc:63:36:da:ae:e0:b8:35:69:3a:d7:38:3b:eb:
8c:f5:f0:30:7f:f5:6d:90:32:92:29:ea:c8:47:e6:86:f6:21:
6f:5c:95:cc:84:9c:f0:23:a6:14:70:83:91:af:80:10:f9:13:
b4:bf:39:bf:a8:7c:d9:e9:8e:ec:9b:9e:d9:64:69:b2:fd:d7:
37:5a:e6:a2:f5:e1:0a:44:27:8e:ff:a9:d0:f0:5e:60:4c:53:
f5:29:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:24:16 2026 by rpki-client