
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier: rcJ0G5B1ysU1/je47xh84h9O/PsYRyMAt2QMeCZaD5s=
Subject key identifier: BB:16:CC:8C:67:45:B7:A1:63:7D:D3:B5:F7:9E:F3:F1:19:2E:6D:56
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 0521
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number: 0516
Signing time: Thu 16 Apr 2026 23:31:26 +0000
Manifest this update: Thu 16 Apr 2026 23:31:26 +0000
Manifest next update: Thu 23 Apr 2026 23:31:26 +0000
Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: sybnixeDv8r2FTj8ceFJoxXcOBKHT7KDVMqPaB/oQuE=)
2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1313 (0x521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: Apr 16 23:31:26 2026 GMT
Not After : Apr 23 23:31:26 2026 GMT
Subject: CN=69e1714e-518b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:6d:e4:ad:e0:42:8e:e1:3c:61:92:6d:df:
c4:ed:62:1e:c1:42:7d:07:1c:79:6d:e6:ae:b8:a6:
f2:28:3d:e7:19:45:9a:78:9f:62:29:8b:1f:88:73:
45:e0:50:3e:4b:8c:3c:f8:fc:55:9e:22:51:4f:1b:
7d:d9:07:ae:96:9d:48:14:1c:94:66:41:f0:c4:e4:
6f:5d:53:75:e2:a8:48:33:6b:e8:2e:e9:9a:91:da:
e2:9f:98:4b:27:ea:fd:12:3d:f3:80:81:6a:68:04:
3e:ed:44:c2:b3:8b:cd:c8:f1:30:32:f8:dc:55:f8:
a4:f7:f2:c6:a9:ac:be:80:ca:91:c9:5b:a5:14:5f:
90:9d:d6:5a:7b:fd:f9:f6:cd:68:dd:8b:7b:9c:f8:
b4:19:b9:ec:fe:7f:1a:c4:1c:ce:b9:e8:d7:95:28:
4a:ea:02:9c:6c:cf:8b:82:4d:70:59:ba:f4:b0:aa:
f5:1e:93:0a:6f:c8:cc:34:58:81:c1:77:72:55:42:
b1:be:ff:87:a9:a6:1a:f3:55:ea:23:9d:58:1f:5b:
b3:fe:bd:a4:64:e5:3e:e2:4b:af:e5:22:24:b9:b5:
f9:3b:38:8f:48:8c:7d:50:68:40:c1:55:86:8e:1d:
d1:3d:ea:b4:2c:c1:6f:82:1a:88:4e:b3:6c:0a:1a:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:CC:8C:67:45:B7:A1:63:7D:D3:B5:F7:9E:F3:F1:19:2E:6D:56
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:2b:e8:ed:20:ef:ac:15:d7:90:9b:b1:9e:35:cb:05:97:
d5:31:89:9d:3d:be:39:67:86:69:f2:c5:dd:a2:81:99:11:2b:
4e:1b:2d:a9:52:65:24:ad:66:bd:db:75:f4:48:14:34:0a:e5:
33:46:2a:18:a3:32:9b:eb:32:6e:92:4f:d4:c6:18:24:fc:5e:
83:c4:27:2a:ba:a2:29:3a:98:a4:18:9c:b7:aa:bf:b9:8e:36:
b3:99:4c:e4:30:7f:76:fd:c2:73:7d:43:8d:a7:19:f9:24:39:
4b:2f:7e:0a:fb:66:61:9d:59:ac:62:ba:5e:1c:dd:97:fd:9a:
8b:be:21:52:e8:c9:7e:1f:3d:b1:85:e9:41:af:04:fa:00:07:
1a:90:54:4c:83:7f:88:fa:91:17:5f:b1:13:8d:4d:13:0f:7f:
0d:80:61:63:5c:80:f6:35:59:23:1c:70:94:d2:ae:80:08:92:
54:94:a3:e9:a0:81:c8:6d:1a:84:f3:56:69:74:ef:1b:e8:fa:
53:a8:3a:45:58:26:fc:86:a6:28:e7:bf:e1:4e:43:98:df:e6:
ae:f5:22:32:41:69:e5:ed:ee:36:9d:7f:d9:d3:4c:c0:1a:1a:
63:1f:86:57:7b:db:53:f5:24:70:a7:fe:83:1b:46:60:d8:b5:
12:d8:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:27 2026 by rpki-client