
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier: OnwnIz1FmP7Ba+x1qZA7CGM73V+VviQPtn5Gn10WIaI=
Subject key identifier: F1:9D:50:DD:EF:EF:69:49:95:DA:23:BD:D8:76:36:E5:12:41:F3:6F
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number: 0143
Signing time: Mon 02 Mar 2026 14:58:18 +0000
Manifest this update: Mon 02 Mar 2026 14:58:17 +0000
Manifest next update: Mon 09 Mar 2026 14:58:17 +0000
Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: aV/BLi/ycd971HmWPs+gHKiImMrLvjaCR1EVd2/qrDg=)
2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: Ig/wbZdh4jHG/0RZspeIPFlmWVtGZIemOVk+yYX06AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Validity
Not Before: Mar 2 14:58:17 2026 GMT
Not After : Mar 9 14:58:17 2026 GMT
Subject: CN=69a5a58a-2aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:cc:b5:56:58:c1:25:38:ab:ae:69:57:79:
28:50:b6:d9:fc:c7:db:60:da:2b:28:1e:82:38:5d:
ee:e6:da:d0:69:c7:01:a3:f4:73:8c:e9:ce:ab:b2:
ec:d8:49:ed:d6:72:76:38:1d:e2:2a:e6:54:c3:f4:
b6:9e:3c:c8:96:5c:04:55:fd:4a:f9:fb:de:3b:3c:
6a:7c:d2:e3:f7:1c:41:c6:47:09:a0:27:be:e8:ef:
e8:f3:ae:e3:06:2e:5f:55:ef:b6:ae:11:2a:4a:e8:
d5:64:b2:e4:93:9d:ff:ed:7b:58:dd:23:e9:8d:28:
0c:26:3e:1c:de:98:d3:f3:7a:87:35:ba:18:76:1b:
fc:fd:c9:54:57:73:fe:6a:28:94:d2:16:96:7c:d2:
89:83:1d:51:60:c7:ae:43:f4:35:48:b7:03:f4:79:
b1:bd:9d:5b:8b:58:cf:ce:c8:97:39:56:1f:9a:49:
69:1d:20:4b:ed:d0:fa:15:b0:f7:c8:2e:87:00:ef:
c3:e7:64:09:38:e1:8a:41:9d:3e:00:df:16:96:3f:
ba:0c:49:a9:54:ea:db:31:5c:7b:71:44:1a:40:42:
4f:a2:80:3b:ae:fc:5d:3e:89:6b:a9:b7:b7:e1:0d:
d4:43:d5:6e:fe:9e:ce:e1:2e:e1:e0:a0:e3:ff:c3:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:50:DD:EF:EF:69:49:95:DA:23:BD:D8:76:36:E5:12:41:F3:6F
X509v3 Authority Key Identifier:
keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:53:6e:0c:62:d9:9b:1a:6e:72:f4:01:0c:93:c0:1e:35:
08:81:a9:6b:54:98:cb:c6:67:bd:3c:cb:3a:21:52:5b:66:9e:
9d:5a:bd:f0:ff:82:23:8d:e6:f6:98:7e:5d:23:89:ef:e5:fe:
7b:ca:95:db:59:a3:e9:63:11:3d:fc:b8:b3:44:0b:08:71:7c:
8e:b2:aa:6a:b2:6b:60:50:3a:bd:fe:61:68:5b:66:72:08:e4:
f1:2f:54:83:a5:01:9b:46:f5:fc:d7:bb:1a:42:a1:af:49:55:
af:03:fd:4c:c7:ef:ba:ee:1d:10:c4:3c:ca:ff:92:2c:fd:1a:
7e:d1:d5:db:15:ed:32:3f:9c:3b:5c:db:ba:c5:b6:d5:32:86:
44:38:7d:7d:44:84:eb:1b:28:57:86:01:d3:41:e1:65:f3:c4:
e3:6e:e6:0f:7c:cc:3b:79:f6:68:84:0f:64:da:07:14:7d:a0:
56:ab:20:1b:e6:09:7f:4e:25:5d:bf:a5:30:e2:7a:78:7d:c7:
5e:dd:e1:ba:16:38:0a:45:c2:9a:89:e4:e0:b7:bf:27:4e:05:
3d:c7:de:0e:d2:54:68:5d:e9:d4:5f:b6:22:c3:af:38:98:eb:
e7:31:99:13:42:f0:9d:8e:4b:8a:62:30:38:1f:d9:fb:c7:99:
c8:9f:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:28 2026 by rpki-client