
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
File: 1RCJONILodf7ySo7qZ8tafyPSog.mft (raw, json)
Hash identifier: 5luDCi30p94h/Uaqjkrk/v9zzi2q70kb90opN9/pIu8=
Subject key identifier: 2C:F3:D0:FE:2D:07:A2:55:01:F6:5F:BC:25:B9:90:A2:AC:E4:B8:78
Authority key identifier: D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88
Certificate issuer: /CN=A91836D8/serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
Manifest number: CD
Signing time: Sun 19 Apr 2026 06:26:37 +0000
Manifest this update: Sun 19 Apr 2026 06:26:37 +0000
Manifest next update: Sun 26 Apr 2026 06:26:37 +0000
Files and hashes: 1: 1RCJONILodf7ySo7qZ8tafyPSog.crl (hash: wlbZ5RvgeB3JDBx5wUS86RyJ75NIBQN36C9xvyQSPuo=)
2: 2A0F594C07B911F0B93D3034C4F9AE02.roa (hash: qf3qhlRNvEM99Ok4wewGzdhglWBUntUIKoOHLraiiH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl
rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836D8, serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88
Validity
Not Before: Apr 19 06:26:37 2026 GMT
Not After : Apr 26 06:26:37 2026 GMT
Subject: CN=69e4759d-4674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:91:a9:b2:05:09:85:75:f3:60:c9:26:0c:
37:2b:98:b1:fc:44:b0:e4:9f:6b:eb:0e:b8:e3:61:
e3:98:de:32:24:32:82:93:ea:17:6c:8d:bf:79:fc:
4d:af:df:2b:9e:7e:94:71:09:1a:7c:3e:6c:96:a2:
b5:f1:63:93:01:9c:9a:dd:68:28:87:9e:38:ab:e2:
4e:8c:a8:0f:c9:ef:de:24:05:cc:38:14:d0:ce:2d:
e5:d3:2a:24:58:be:91:b0:f7:fb:7b:bb:d1:2f:4a:
36:ba:8e:a6:d2:83:b4:dc:89:d1:73:c3:75:75:4b:
01:78:90:c1:ac:47:50:89:20:f0:8c:91:43:94:0f:
6d:07:6e:c7:3d:8e:d7:45:45:d3:16:5f:ec:7e:58:
88:e3:b3:b7:f5:17:a0:31:1f:32:56:11:08:7e:72:
5f:53:29:18:60:de:65:43:d3:f4:65:c8:54:f1:23:
e8:eb:71:72:d9:08:19:59:b1:14:ea:ef:ac:31:ee:
f5:06:cd:4f:f0:c9:d9:7b:88:d2:30:b2:2c:50:6c:
fd:1e:f4:b6:24:2b:54:ad:1e:0f:36:e1:06:33:fc:
86:de:9e:c8:df:ac:9e:8f:8c:91:0d:20:81:ac:e1:
89:f7:79:65:1b:d4:a0:e8:6a:29:ef:1a:d3:fc:d4:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:D0:FE:2D:07:A2:55:01:F6:5F:BC:25:B9:90:A2:AC:E4:B8:78
X509v3 Authority Key Identifier:
keyid:D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:04:06:9c:6b:f4:02:38:8e:f6:96:38:5b:8d:d6:98:2f:d4:
54:bb:b5:04:52:cf:9c:0d:33:f3:1b:91:2c:43:97:c0:c9:06:
e0:c3:1e:85:92:31:37:bb:fe:34:13:73:dd:61:ef:90:de:5f:
4e:c7:cb:0b:fe:e8:e1:2b:6d:16:89:83:e7:df:56:40:bb:23:
34:2c:86:8c:b5:a0:75:93:fd:e6:26:fd:88:a2:3a:9c:5d:d2:
8b:8a:de:b6:62:ac:87:88:c0:73:e8:51:fa:5b:a5:d3:ab:f5:
71:85:50:af:4f:53:d8:e3:d2:34:0e:39:a7:7a:41:9d:83:5d:
e6:85:21:e5:48:0f:b2:1c:71:a7:d2:e6:4c:51:09:99:7e:f0:
da:7b:4e:6e:7c:0c:68:ac:20:57:1b:a8:1f:01:e7:8c:97:2a:
fd:c1:75:28:b2:23:5c:e3:38:cf:1c:22:cd:46:d3:58:39:24:
92:a0:1e:ab:96:9a:ae:29:8e:44:c9:db:e3:61:f1:87:34:cc:
59:ec:21:55:75:f8:2c:2b:c5:03:65:09:f3:5e:6f:81:9d:c1:
f8:33:cd:e1:de:36:0f:23:ee:bf:11:28:b0:ea:e1:a6:b8:eb:
07:70:ad:65:f7:ec:b2:cf:6c:4c:72:24:06:a3:00:86:0e:ab:
54:e1:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:31 2026 by rpki-client