
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier: GMKs8A9k4JcKSfM2KxTPEXQ2qP05jAfBAW919hyGwas=
Subject key identifier: AD:71:CD:21:13:D5:19:47:4C:A6:55:FB:21:7A:73:F2:97:2D:6A:5A
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number: 0229
Signing time: Fri 17 Apr 2026 02:25:50 +0000
Manifest this update: Fri 17 Apr 2026 02:25:49 +0000
Manifest next update: Fri 24 Apr 2026 02:25:49 +0000
Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: X1yDs2G1NQNEJj3f/VlTVA4gqHIErtlURZtR5NlQMb8=)
2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: YHaOMGN1bGK+r6itlpUXyRbyQUqBHPRfz33sAi+A7Pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Validity
Not Before: Apr 17 02:25:49 2026 GMT
Not After : Apr 24 02:25:49 2026 GMT
Subject: CN=69e19a2e-f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:32:56:92:58:5d:84:c5:32:db:37:ba:29:
55:e1:36:f5:00:93:6a:7f:e7:0c:8b:e8:f7:80:19:
a7:58:ba:e8:e9:ee:2e:23:06:9f:c7:e4:3f:f7:66:
7d:91:a6:83:2f:5c:eb:b8:f8:9a:07:cf:fb:ed:98:
89:6e:c6:1d:0c:e0:4d:6b:8d:15:40:de:40:5e:c6:
f0:ae:48:3f:86:1c:50:88:26:41:14:d7:52:bf:d3:
d6:7c:0e:41:8f:10:84:ef:c3:4e:c2:83:cf:c1:21:
06:3e:ba:e2:e3:6e:7b:da:84:f3:ea:15:04:ec:92:
3a:af:9f:01:da:f6:e6:5e:4c:2d:a1:a4:02:17:80:
4d:6c:6e:48:0d:93:9e:c6:a6:c2:27:58:e5:96:fb:
bd:cc:db:79:f5:6c:91:d6:a0:65:43:da:53:7f:cf:
ef:a3:8b:c7:8d:a1:8d:e6:f0:f8:0c:90:1b:f3:d2:
5b:18:8d:97:a9:79:c1:1f:97:2a:36:4d:e1:8e:e2:
4d:26:f1:1e:af:26:78:41:d6:f6:ee:ba:37:33:86:
cc:65:a6:f7:a7:6e:7e:91:29:e5:ba:bb:37:0c:a3:
c0:75:21:87:e3:b2:d5:ce:cc:fc:1d:d4:8c:f3:42:
83:3d:95:bc:2b:2a:9b:17:c6:d5:ca:b7:37:7e:2f:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:CD:21:13:D5:19:47:4C:A6:55:FB:21:7A:73:F2:97:2D:6A:5A
X509v3 Authority Key Identifier:
keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:c9:4a:d4:54:d0:99:13:a6:20:4e:b0:da:d3:5d:43:4c:
24:a4:99:f3:a9:9d:7a:ac:ec:d6:9b:03:ac:1d:46:55:0a:e6:
f6:77:18:70:1a:09:a4:c7:a9:03:f0:66:1f:20:df:fa:ad:17:
02:d8:df:14:92:cf:77:e6:80:0e:23:1b:e8:79:0d:8c:4c:90:
c8:ce:41:a3:80:70:76:b1:48:34:a4:2e:9b:7c:4f:76:6c:c2:
60:1c:cb:d7:7a:70:24:30:23:cb:44:3b:aa:5a:10:82:cc:80:
99:11:2c:6d:f5:01:7f:db:4d:b1:c6:7f:15:11:72:5a:79:a0:
94:0b:4b:cc:ad:02:3b:64:b9:ff:11:64:71:09:0c:19:64:de:
41:d3:1d:54:c3:4a:e0:d4:a4:b5:99:46:50:65:ed:71:b6:db:
cf:23:03:c5:26:04:00:38:ff:58:c0:48:be:96:76:27:dd:73:
e1:08:e7:6e:95:9b:c7:9b:c3:35:14:65:ce:fd:2b:a0:24:5b:
26:d9:e7:26:f1:34:bb:c9:89:bc:c4:f9:da:7a:13:9b:2d:37:
4a:5f:e6:aa:1d:86:ca:7c:2b:9a:61:a1:6d:33:f3:de:01:71:
dd:7f:b0:30:3c:fb:6b:91:d5:0a:af:45:9e:c2:ea:bb:b0:12:
00:eb:8c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:42 2026 by rpki-client