
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File: Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier: BbAF0EERtkthnMHXz042i/hxg9CWuwa02OBCeAN3nJ0=
Subject key identifier: 92:E2:F9:85:7C:C5:B3:2E:A7:5C:C5:7A:04:3F:23:57:19:BF:8B:3A
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer: /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number: 08
Signing time: Sun 01 Mar 2026 10:42:27 +0000
Manifest this update: Sun 01 Mar 2026 10:42:26 +0000
Manifest next update: Sun 08 Mar 2026 10:42:26 +0000
Files and hashes: 1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: b2z7hWVotK5ugaQED/hNqyA3hGrbn4CVjy1kLYQK8GU=)
2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Validity
Not Before: Mar 1 10:42:26 2026 GMT
Not After : Mar 8 10:42:26 2026 GMT
Subject: CN=69a41813-8cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:0d:d7:06:38:e1:7e:d9:1c:45:20:63:07:
9d:bc:8f:d3:99:32:76:a0:27:9a:b1:03:9c:6f:22:
b6:1d:09:58:47:6d:b4:b9:a1:a0:11:67:a1:38:bb:
0c:59:b5:b7:a6:31:d5:57:53:23:05:d6:5b:42:63:
09:bb:13:09:84:5f:9b:0b:58:9f:e0:2a:3c:ea:a2:
e5:ed:da:5f:eb:44:2c:ea:20:a5:a2:09:7c:eb:4f:
fd:54:8a:ea:00:4a:3e:df:78:84:08:0b:b2:76:6e:
9a:7e:7b:b8:70:29:01:d5:18:b7:80:8d:c3:47:9a:
53:40:c9:26:b2:34:c5:8c:f2:75:4f:8f:c9:76:1f:
ba:23:35:aa:09:01:ed:fd:6c:55:5f:4a:d1:34:48:
17:8e:35:04:4b:b1:da:bd:a7:07:e7:4b:55:53:78:
b7:d1:36:4b:74:d1:55:db:66:8e:22:e9:83:a6:98:
9e:35:d4:9b:6b:71:5d:5f:cc:13:b0:24:5a:a8:76:
92:c4:6c:14:c5:12:39:04:7c:37:73:e2:94:5a:38:
42:3e:c9:fb:ff:f9:20:f1:1d:8e:26:d3:9f:92:67:
41:f6:29:41:ac:bd:88:64:2c:ad:24:2a:ca:ee:36:
af:8c:f7:aa:c3:2c:19:cb:ba:5a:9b:7b:42:c6:23:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:F9:85:7C:C5:B3:2E:A7:5C:C5:7A:04:3F:23:57:19:BF:8B:3A
X509v3 Authority Key Identifier:
keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:ea:ef:ae:5b:1a:65:69:dd:f1:32:4d:d8:93:2d:62:78:
3b:ba:4c:e6:2c:c7:3d:bd:fb:c0:61:57:ec:cc:12:d3:8d:42:
26:a4:e4:2e:9d:f3:10:57:39:48:fd:2d:13:e6:36:18:e7:be:
72:ef:78:0e:9f:84:d4:c5:4d:b7:ba:60:09:0c:d8:3b:29:aa:
85:62:1b:c7:39:06:a4:17:1d:32:85:85:1f:dd:ac:f1:b7:ec:
41:ac:2f:27:4a:0e:df:ea:f0:3d:06:71:54:7d:f7:a1:97:ca:
d2:19:0b:d1:10:7d:47:4f:21:72:40:ad:15:89:64:f0:dc:bc:
bd:da:2b:48:cc:3e:4e:0c:90:91:93:79:47:a5:2c:9e:75:27:
1b:3b:0e:36:db:ec:6a:55:f9:8d:fe:ff:b4:24:24:87:28:eb:
dc:25:1c:6a:a2:e2:53:ba:05:3f:57:8a:82:8f:84:b5:18:f8:
b0:ee:d1:0b:86:12:2e:04:86:2f:f8:b4:a2:62:ae:fc:96:ba:
af:93:1a:cf:5e:30:bb:b8:bd:38:32:66:4b:7e:ee:3d:d2:3c:
9e:a9:b7:fb:da:38:d8:f3:e0:fc:3e:c1:2b:42:04:25:f5:d4:
29:7a:5d:6d:cc:1e:6e:4e:c1:cf:f9:de:15:7f:f1:9c:35:bf:
e4:20:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:05 2026 by rpki-client