
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier: dSkqs4aSGk+a0TlXRn5Ns6BfxvQRumsE3cSH2SSBmpI=
Subject key identifier: A2:63:BE:04:6F:94:2D:AA:99:6C:1F:62:89:1F:56:3F:C5:8D:DF:D1
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number: 015D
Signing time: Fri 17 Apr 2026 04:44:21 +0000
Manifest this update: Fri 17 Apr 2026 04:44:20 +0000
Manifest next update: Fri 24 Apr 2026 04:44:20 +0000
Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: EVp2gfMu61OcPAsmN78BLdrC+2pk4CKSgQFHoytKRrw=)
2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: BpixEa/JuFiCLMxqdvIYTJdkS4M3EeEjH0jQFqgcvxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Validity
Not Before: Apr 17 04:44:20 2026 GMT
Not After : Apr 24 04:44:20 2026 GMT
Subject: CN=69e1baa5-47a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:f9:12:22:46:37:24:c5:b1:80:93:8f:4a:
07:23:06:e5:45:b0:c7:4f:da:ca:bf:2b:b8:8d:d6:
ee:0b:fd:0b:c2:3f:82:5a:d8:29:53:90:dc:52:38:
59:7e:26:ca:78:7c:18:7e:2d:4c:73:e9:1e:98:53:
98:f7:67:d3:e7:08:a5:7d:21:e9:84:2a:04:b1:c5:
86:38:a6:ea:b8:47:59:22:4e:b0:b4:ce:0c:15:47:
ca:8a:75:66:06:c1:cd:7e:a9:c8:bd:72:a5:e1:ed:
12:39:ee:c2:62:89:e3:60:50:02:8d:59:3a:25:9b:
c9:f9:e6:7d:13:f5:e6:b2:2e:1c:c0:2f:3e:32:fc:
ee:a6:be:78:3c:3d:d6:db:51:f9:35:85:bd:51:a4:
75:72:1c:d9:17:23:5c:d0:e8:b6:64:0a:e5:93:43:
7f:ab:67:d3:1f:b2:b0:5d:e3:ce:d8:f3:f5:ac:51:
0b:44:47:4f:5e:ce:c5:ef:cd:8e:82:66:85:ca:4d:
26:3b:9b:62:39:ca:13:ce:bd:df:5b:42:58:52:8f:
80:8a:be:83:47:64:be:79:a3:c2:19:cf:1a:66:ff:
69:c8:17:f5:ee:ad:f7:c8:5d:0f:c5:79:27:f5:cd:
84:db:f6:f0:d1:22:18:89:45:23:68:87:0b:9d:4f:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:BE:04:6F:94:2D:AA:99:6C:1F:62:89:1F:56:3F:C5:8D:DF:D1
X509v3 Authority Key Identifier:
keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:98:05:a0:83:10:ef:ac:41:48:74:54:41:fa:6f:98:af:41:
a4:24:b3:b2:78:77:4d:15:d6:d6:9b:3c:ce:13:43:a4:26:67:
97:9e:b5:1c:a2:e5:6a:84:99:24:a9:c8:a6:dc:f6:b3:36:b7:
0c:fc:1e:e6:1c:12:69:ad:c5:33:73:97:62:30:8c:78:8c:7e:
f5:e5:28:04:ee:40:16:30:49:6e:ed:5e:74:f9:a3:2a:a8:d9:
b7:38:a9:0e:ea:59:b6:c9:86:12:47:eb:73:79:fd:88:8b:19:
d1:e7:04:fd:21:05:05:03:d6:00:94:04:ba:4e:15:0a:7e:f1:
7b:e3:83:ac:44:ad:f0:78:70:5d:c2:f9:a6:0e:a0:2f:5a:74:
0c:f8:81:d7:9e:83:c0:60:6f:50:b3:82:c2:96:1f:59:73:f9:
fb:fa:5c:f7:15:c0:b1:3a:ec:05:51:5e:fc:54:11:b4:06:53:
0c:8c:b3:1a:8f:8b:7c:ff:04:83:cf:24:c4:a9:7a:6f:1a:61:
75:1c:f7:8c:d9:69:58:76:2a:ab:ee:5c:5c:bc:85:d8:16:b8:
97:b1:d1:1a:c5:fd:dc:14:20:5d:f6:81:b1:c7:83:28:fb:8f:
93:8d:39:e7:01:13:9e:e2:a1:de:1a:7c:0e:f2:88:4e:d4:f7:
26:77:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:27 2026 by rpki-client