
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: CaUA8nfI3D3aokaubs7k2AsqpY5AGkBf3PBLO3oGTH0=
Subject key identifier: A5:BF:0B:2D:27:0C:21:32:E0:49:97:82:4C:8D:DC:85:07:CF:28:DB
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 02CA
Signing time: Thu 29 Oct 2026 01:50:15 +0000
Manifest this update: Thu 29 Oct 2026 01:50:15 +0000
Manifest next update: Thu 05 Nov 2026 01:50:15 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: bhZGvDLByzMysGl5ohV4xeZJ5ya9kIZQAsTKuu0Cb3A=)
2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: 4uTpTxxOKcFpix9VMs0QMyQDPqJHXQEnQ2Lc7hCfmwQ=)
3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: HMh0PudeObId9zudYejPSA5f+N2qiPXxo4G9qeOgkD8=)
4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: Yq+XkZnFsUBeEQv24fQGoEmIq0pC6YGTxLPonEh4+Us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Oct 29 01:50:15 2026 GMT
Not After : Nov 5 01:50:15 2026 GMT
Subject: CN=6ae2a657-36d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:04:fe:20:9f:27:50:a5:80:03:51:c4:57:
f3:5e:a7:f6:9d:28:f1:f5:fb:b9:53:86:48:c6:33:
b3:0c:d3:ee:3c:c8:e7:ee:52:6d:80:08:13:ed:24:
6a:6e:7c:a4:23:15:42:d1:e9:f9:29:e7:c7:89:9f:
3c:3c:af:9b:80:20:62:c6:e5:c4:d8:7b:d6:46:10:
d1:2f:ec:91:1e:92:8e:54:62:f7:d6:9b:dd:d3:b1:
93:20:13:7f:b8:52:9f:00:5f:68:5c:63:94:81:96:
6b:d8:f5:82:a5:84:9c:a5:81:1a:8a:7f:74:62:fa:
f2:2d:61:68:ff:84:60:4c:f7:53:5c:ba:2f:09:da:
ec:8f:21:4b:c5:b7:90:f7:26:bb:fd:64:bc:7c:d1:
37:ac:b0:25:a2:0b:01:e6:0f:61:04:1d:a7:70:c9:
f7:5e:09:8e:f2:73:cf:4e:3d:a5:09:fa:26:61:46:
d2:67:3b:1a:03:66:b4:1c:ec:36:14:cb:a2:a6:80:
65:b6:a3:ac:c4:3e:84:97:fb:e3:cf:ea:08:d4:63:
fa:07:25:28:a4:cb:a5:8d:63:a1:70:43:0a:db:52:
de:ed:0e:be:c1:de:75:f4:08:75:84:7a:cb:bc:24:
67:89:02:2e:bc:b8:e0:a3:46:d8:71:c5:32:81:25:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:0B:2D:27:0C:21:32:E0:49:97:82:4C:8D:DC:85:07:CF:28:DB
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:46:ff:3c:a4:76:5d:35:85:49:65:c6:05:32:29:07:2d:2f:
3e:da:d0:54:0d:c5:6d:71:0d:89:d2:c7:26:35:3c:69:55:2a:
f3:ca:47:db:6a:fe:98:35:5e:81:1d:81:75:77:35:71:7e:0f:
cf:27:96:bc:f2:9d:fc:52:bb:d3:8b:48:67:41:ae:26:fc:44:
14:98:69:79:bd:70:38:72:b6:f5:d0:33:3c:91:81:42:f6:3f:
2f:e1:d0:60:cb:74:19:bd:1b:c6:2d:30:08:b9:29:34:21:1d:
76:7f:a8:65:7f:33:1b:eb:1f:36:5a:0b:43:37:9e:36:9d:7b:
48:11:f9:7b:f5:83:b1:73:ef:c8:f7:6e:bb:f5:79:76:e9:70:
2f:8a:03:9f:88:28:bf:2b:8a:87:ab:61:b8:99:88:f9:b2:df:
86:eb:d4:ee:03:c9:80:63:d2:35:21:05:0b:28:a6:73:e6:3c:
91:19:9c:42:ab:30:a6:dc:a1:f1:d5:bb:84:49:72:48:35:0e:
05:ec:db:02:a7:07:73:f4:8d:6e:c7:8b:64:9e:03:6c:78:1d:
5f:9e:b0:0c:e8:9b:bf:bd:66:24:f5:6a:36:23:e9:32:b3:23:
cf:a9:24:27:ad:5b:88:73:11:28:5c:ea:f6:00:9f:f8:50:23:
c6:28:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:16:18 2026 by rpki-client