
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json)
Hash identifier: h0KidTYH2lNmzSXa2a0rVwAKbwjpmNiwwgBQoKunKsU=
Subject key identifier: 52:DB:8A:DF:E3:E4:1E:C7:A4:70:0D:FC:38:66:CA:AD:6F:C7:50:5C
Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
Manifest number: 0153
Signing time: Wed 19 Aug 2026 05:51:23 +0000
Manifest this update: Wed 19 Aug 2026 05:51:22 +0000
Manifest next update: Wed 26 Aug 2026 05:51:22 +0000
Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: Dg1ldo4EAKW4ruf+VRDlCjCe9Lw2ko9sC41k8xgn0Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Validity
Not Before: Aug 19 05:51:22 2026 GMT
Not After : Aug 26 05:51:22 2026 GMT
Subject: CN=6a85445b-1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:5f:13:e4:99:d3:64:08:36:da:e5:2e:0d:
13:5c:dc:22:7a:8f:d7:f4:08:41:bb:8b:76:51:88:
34:89:61:24:7b:48:d6:09:26:36:77:23:0f:bd:e7:
8a:79:77:18:4b:6a:88:f3:2a:15:1b:a4:a6:85:d2:
3e:bd:af:85:f0:84:5a:18:86:7a:88:6e:99:25:94:
49:8f:40:d8:b4:de:fb:6d:de:a0:c0:d2:a8:6e:85:
e4:7c:00:40:68:a1:d7:57:e2:ab:2a:2f:8c:ec:ee:
9a:2a:0c:96:14:d7:99:ac:3c:55:6b:18:40:f8:30:
b2:84:d6:71:fb:c0:7e:09:dc:3a:82:9a:19:7d:40:
92:fa:d3:42:91:fe:68:d6:6b:a0:55:ea:f5:81:dd:
46:91:05:39:06:35:09:9d:e5:8d:8b:68:33:d6:22:
87:49:3c:27:98:db:7d:9f:2e:8c:ae:ee:ab:bc:bd:
96:57:b2:94:70:82:c6:dd:d9:4a:b7:5b:0f:ba:2a:
20:c1:22:38:64:34:48:ac:31:b0:de:22:56:bb:f8:
84:5a:85:c5:c7:3b:a8:76:a0:f6:57:13:ee:16:92:
81:fa:ef:88:33:be:69:65:7f:e9:d6:27:6f:33:6e:
12:69:77:b2:59:98:62:51:49:4e:3b:2c:67:cb:6d:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:8A:DF:E3:E4:1E:C7:A4:70:0D:FC:38:66:CA:AD:6F:C7:50:5C
X509v3 Authority Key Identifier:
keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d1:73:89:5c:a2:42:41:f4:bb:c5:79:7b:e6:04:2c:65:76:
54:4e:6a:92:e0:62:cb:86:f2:14:fc:5e:2e:e5:9b:c0:24:1d:
b8:78:03:f5:a5:83:09:b0:63:90:e3:91:c6:ea:ce:c1:c7:c4:
81:04:09:c2:30:bb:ab:96:37:2f:52:f5:9e:8c:b3:7a:81:78:
68:8a:97:b9:94:4b:a7:1e:2a:49:af:f2:0c:f9:7b:f6:be:c6:
ba:49:c8:8d:8a:7b:da:da:a9:17:bd:e1:ea:73:28:85:ab:c9:
d2:9d:1e:29:9e:ca:2e:fa:be:c0:b5:6e:d8:b1:d8:d7:ff:77:
9b:a4:d8:11:66:57:6b:7f:2d:36:96:25:92:73:d4:6e:78:9f:
42:66:45:fe:89:14:1d:19:a6:5e:7f:42:6a:6c:41:9a:e8:06:
39:67:7f:d3:10:8c:a8:33:85:6f:b0:91:d4:15:59:5e:8b:47:
cd:c2:27:65:13:55:0c:a8:a1:97:c1:c6:3a:c6:2b:01:d1:28:
bd:63:93:a6:41:96:21:53:7b:5b:c8:8e:68:f8:3e:34:16:c7:
c7:8c:a7:95:c0:ef:cf:0c:3c:84:79:03:02:39:f2:ff:85:39:
a6:81:41:51:51:60:55:73:bf:9b:56:64:94:be:ad:44:b8:4d:
9b:b8:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:50 2026 by rpki-client