
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json)
Hash identifier: Gbqo0q2oCHY+b1V2xQ3EJGO+3tX5UjhKRj7fZG6VZGc=
Subject key identifier: D6:E5:13:5E:F8:82:B1:05:59:6B:2C:FA:31:2E:E0:85:E2:2D:A9:29
Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
Manifest number: 0125
Signing time: Thu 21 May 2026 05:49:46 +0000
Manifest this update: Thu 21 May 2026 05:49:45 +0000
Manifest next update: Thu 28 May 2026 05:49:45 +0000
Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: rlt8/LVVPed/RygIPRY1vRjKHnv6aH3fcvnQlIQJNYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Validity
Not Before: May 21 05:49:45 2026 GMT
Not After : May 28 05:49:45 2026 GMT
Subject: CN=6a0e9cfa-9ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:12:58:00:f2:d9:fe:46:95:e3:a8:86:fa:
83:64:41:34:61:c4:ef:f5:f8:74:5e:18:ae:f9:36:
38:29:cb:cc:4f:ab:e6:35:17:03:5f:29:1d:66:ed:
d8:39:fe:09:09:e8:2c:82:cd:69:1c:9d:9b:18:74:
48:07:2e:95:78:b0:cb:f2:84:ce:21:b7:c7:66:09:
f1:d4:f2:dc:7e:bb:c4:b8:01:4d:90:02:2a:21:5b:
75:dd:e0:20:c2:96:b8:71:72:cf:78:72:72:d6:b1:
12:ca:bd:4e:d2:a5:bc:79:d3:ea:ff:9c:38:05:57:
93:cd:d7:b4:1a:6d:e7:31:c9:3e:5e:55:e9:5c:fc:
b0:98:47:2f:c5:6d:2f:6b:0e:f3:57:8b:99:72:90:
1a:a9:0f:cc:cb:e4:b9:47:33:0f:92:3f:6f:1d:35:
a4:34:6e:2a:97:2f:71:25:e4:ba:76:8f:9b:4a:be:
2d:fa:b1:8c:94:d9:7d:38:72:d7:39:11:81:02:b8:
5a:00:80:08:c2:2c:cd:16:72:02:cb:24:e3:8a:9a:
19:88:75:18:53:2e:d5:e3:b0:b3:6e:81:8f:12:10:
18:16:a2:0c:dc:4f:a1:9a:d7:3b:65:26:75:0a:82:
77:6d:1c:6c:19:f1:dd:92:5d:ac:41:06:f6:32:16:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:13:5E:F8:82:B1:05:59:6B:2C:FA:31:2E:E0:85:E2:2D:A9:29
X509v3 Authority Key Identifier:
keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:a6:53:2b:55:21:16:0b:84:c4:9f:a1:a9:c8:4c:cb:97:
90:df:74:13:12:52:3b:0b:8a:99:7d:da:6c:a5:f2:a6:0f:59:
5c:50:f4:a3:b3:9c:04:5f:c5:fb:e4:7b:26:14:13:09:18:3d:
8f:2a:98:18:11:c5:8d:c1:4b:d5:23:22:f1:92:bc:4a:1d:f6:
29:fb:41:aa:91:11:58:1d:64:c5:79:fc:4a:33:9f:95:a5:e9:
b1:3a:54:44:04:94:b4:f7:85:d4:08:6d:8b:d5:45:83:98:33:
af:b5:88:61:73:69:70:53:cd:62:ce:58:d7:1a:92:5b:f5:3b:
5f:84:69:ce:c5:d9:d5:2e:40:08:e7:eb:94:be:a2:db:8c:6c:
b0:70:1c:05:7e:b1:95:b6:ed:d3:f2:79:5e:88:b7:56:79:59:
ba:dd:29:81:46:79:a2:80:5d:8f:d9:f9:a4:b3:07:16:ef:96:
bc:79:cb:1d:31:43:20:5d:e3:81:64:3d:70:6a:5f:f8:4e:bb:
ef:81:39:8b:af:32:75:65:c7:5d:62:05:3d:2d:43:a0:75:1e:
7a:78:17:bf:e6:7d:32:67:a1:ae:1e:78:77:66:58:99:ae:19:
97:a2:fd:3e:40:7e:c8:9b:fc:eb:b9:6b:d0:8b:ac:43:f7:11:
0d:97:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:44 2026 by rpki-client