
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier: HCrO6JmbnZTyAOmVE7yHwmWCqcL+tv/zdGHDyi3ImDI=
Subject key identifier: F1:84:43:3F:67:D1:BF:8A:E8:8A:ED:D3:F3:60:A3:F3:62:A2:0D:79
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial: 0C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number: 0BE6
Signing time: Sat 28 Feb 2026 19:08:48 +0000
Manifest this update: Sat 28 Feb 2026 19:08:48 +0000
Manifest next update: Sat 07 Mar 2026 19:08:48 +0000
Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: +XPp06FpfQ4pbj2RWQkW1VvlbtYkOE3U2R4J0WowLPw=)
2: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: sUNhVHyOe44XuZX42JmQcZiwNX4jR9EHOz4OhMMUATU=)
3: 3061122413AA11F19379690F023D8C67.roa (hash: P9dvlIkcYwotQk+ycxXp+9aVMXWAC/WoGeRU1aPoQfA=)
4: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: OG3oYepv5jinbrTIqLnKVnsyRhVbKiJfo0/1FedLH6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Validity
Not Before: Feb 28 19:08:48 2026 GMT
Not After : Mar 7 19:08:48 2026 GMT
Subject: CN=69a33d40-5d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:ae:36:38:b0:81:c0:d7:9a:69:02:c6:28:
87:ca:a9:64:87:23:c3:18:ad:be:48:73:0c:eb:d1:
e8:b6:78:f0:1a:a7:19:07:74:28:55:4b:c3:b4:79:
71:3b:33:58:c7:6c:83:3d:27:8d:95:a3:af:ee:f8:
89:d6:6f:44:cf:1b:b7:d2:03:e2:f9:c8:b9:e5:92:
07:55:9c:48:35:a2:fb:39:f8:fc:5a:77:44:73:db:
dd:0e:8a:9f:e4:cd:47:de:67:bb:4e:78:b6:b6:ab:
d1:3f:ac:10:c4:44:88:89:48:8c:aa:27:8b:20:de:
e8:d5:90:b1:b9:bc:f4:69:77:51:77:3a:6c:42:44:
00:4d:b7:91:d8:77:65:dc:ab:8a:72:2b:56:88:28:
29:64:a0:31:86:ca:9f:b4:4f:4b:dd:40:6d:17:2a:
d8:e4:f9:9b:40:f2:b8:33:05:04:1f:36:10:4e:8d:
19:f1:3f:7e:9b:ed:d4:92:61:db:36:b1:ec:d0:78:
90:cf:02:24:ea:36:fe:3e:2d:d1:5e:16:9a:92:6d:
9b:8a:4a:26:20:7e:5e:f9:26:b1:9c:2a:18:72:c9:
05:1e:d4:e9:2a:2a:d6:de:48:34:b0:0c:b8:04:9d:
07:e3:f8:e0:93:a2:ae:8f:61:01:17:0d:ad:d8:f6:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:43:3F:67:D1:BF:8A:E8:8A:ED:D3:F3:60:A3:F3:62:A2:0D:79
X509v3 Authority Key Identifier:
keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:3f:59:34:19:57:d6:96:9f:9f:2f:ed:bb:f1:0c:3d:2c:
5d:01:58:f8:41:02:ee:fb:a1:7c:5c:dd:89:ae:4a:19:16:55:
dc:f7:1e:bd:c3:88:58:c5:a9:e3:f7:14:a1:58:7c:e1:65:3c:
07:92:1a:d4:ad:d5:da:f0:b2:27:54:46:a5:7b:62:ad:7c:a5:
93:f9:77:fa:6e:a3:ad:e5:1c:7f:57:fe:e6:13:a9:0f:9f:97:
40:bf:ae:0d:38:f8:0a:28:e4:17:72:b0:0d:3e:39:31:41:88:
e6:2c:63:89:74:ae:fe:8b:6f:0f:58:9e:ee:cd:2b:dc:f0:2f:
b6:f4:2c:ff:40:8b:99:9f:ab:26:45:34:25:9c:94:a1:ad:6a:
57:b0:22:c8:5e:f4:27:4f:d0:fa:0b:e4:b9:de:09:7c:76:c3:
35:d7:9e:b9:ca:77:94:eb:5d:53:80:bd:34:ad:33:9d:9b:39:
e9:24:27:cf:ab:83:69:42:f4:bd:e8:02:c1:d0:fb:3b:df:0f:
53:5f:32:4a:4d:b2:83:5f:8b:33:3c:e7:0d:19:e3:b6:d5:c9:
cf:21:f5:4c:e8:0a:27:76:30:7a:01:a7:98:54:df:51:50:a1:
9e:4a:55:03:1e:2c:42:5e:94:1a:66:45:30:41:ec:88:83:a6:
39:46:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:17 2026 by rpki-client