
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json)
Hash identifier: HZdM2mZ/u8JnJ9vxACGMOHyXBFyKtQ704fyj5QVV9C0=
Subject key identifier: 2E:19:1D:24:71:23:E7:4C:8A:AC:A3:64:2E:19:C4:F4:B2:3D:64:43
Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Certificate serial: 0CC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
Manifest number: 0CC0
Signing time: Sat 04 Apr 2026 18:15:30 +0000
Manifest this update: Sat 04 Apr 2026 18:15:29 +0000
Manifest next update: Sat 11 Apr 2026 18:15:29 +0000
Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: dt/x8DIoqka1W5tH4zF+xWf2+6P84at0FpgrhJwxQjA=)
2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: NdHvCz04ygMhEdy3te9H+OifuIBwvEnTvTRWLq7jQEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Validity
Not Before: Apr 4 18:15:29 2026 GMT
Not After : Apr 11 18:15:29 2026 GMT
Subject: CN=69d15541-0cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:12:53:1f:8b:3b:9b:9d:4e:89:64:e3:3b:
e1:ce:d7:6c:4b:cd:64:e8:92:c9:26:c8:66:57:ab:
9c:05:92:4b:a5:02:59:13:d6:b9:8f:05:db:1f:1e:
fd:e8:c3:b8:e7:4b:50:c1:38:12:2c:ef:22:51:e7:
e5:eb:ea:a9:f1:95:21:a6:3c:4d:d7:66:4b:ee:2d:
89:ef:eb:2e:3f:c3:e7:d5:29:08:0b:f0:4d:79:1a:
f7:0a:49:1c:e3:ea:ad:38:9d:b1:8f:ac:3a:ac:05:
0d:a9:87:0d:4d:65:20:30:f0:14:90:62:36:04:dd:
94:ec:94:1f:d9:34:56:f1:6c:99:00:46:74:71:d1:
6d:fb:de:98:ac:e3:8b:b9:24:fa:ff:81:0d:0d:84:
41:da:96:33:04:9f:99:2f:53:ee:d0:54:e5:29:f3:
8a:4b:c6:42:80:32:35:cd:97:8c:66:b0:44:56:9c:
8b:cf:6a:f6:9a:b6:5b:71:cd:cd:cb:d5:82:b7:fc:
be:0b:25:8a:3c:ce:ba:7b:20:b0:b1:ab:71:e5:59:
ae:0c:cc:b6:2b:9e:8c:86:0b:ac:23:c5:4d:52:7d:
e7:49:10:b6:a0:39:83:b2:a5:0b:38:3a:d3:1d:e5:
e7:66:a6:95:3b:41:06:a3:96:de:cc:00:63:72:d7:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:19:1D:24:71:23:E7:4C:8A:AC:A3:64:2E:19:C4:F4:B2:3D:64:43
X509v3 Authority Key Identifier:
keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:b7:55:c3:d5:64:dd:99:da:d2:ee:f4:a0:68:92:d7:26:
12:23:19:6e:a4:ec:29:97:a8:03:67:56:06:a7:ad:6d:ec:bf:
37:eb:27:6e:9c:9f:31:b5:d4:a4:06:52:93:d2:e8:ec:79:da:
88:15:0f:75:4e:e4:18:96:0a:6b:04:bc:35:03:30:be:a3:00:
a9:60:44:85:b8:e9:7c:a4:3e:26:a0:02:ee:da:56:d3:0e:46:
f3:09:2a:33:09:38:57:3b:96:75:a2:47:94:7e:5e:67:86:89:
4c:4a:83:7f:c3:8b:d3:63:ab:00:ab:8c:db:07:62:50:cc:64:
10:64:9e:39:d2:10:fb:26:cc:1a:b1:c1:92:d4:79:cb:5b:1a:
0e:df:ae:5a:7a:bd:c8:2f:0a:fa:b2:f1:f9:ae:2e:c1:a3:b0:
66:6e:17:45:b1:51:06:f0:92:13:b7:1a:2f:85:59:d1:0f:92:
64:46:75:e9:c3:c0:fb:0f:0d:76:1e:94:75:f2:5e:06:70:6d:
af:52:12:f3:3b:8a:ab:27:29:7d:dd:37:41:89:97:2b:33:ec:
1a:7c:1e:70:b0:66:85:84:df:8b:fc:8b:d3:3f:84:05:9c:c3:
cb:76:6f:db:84:73:99:b5:2e:da:d9:33:b2:eb:e0:e6:28:2d:
31:17:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client