
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier: FFaVYACkW3FPDvDILxhICG3y8VtILO7DgBTlk5WkMZQ=
Subject key identifier: 65:B5:34:3A:01:4B:9A:2A:31:A4:99:C2:DA:9D:35:3E:BE:3E:54:9B
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number: 2D
Signing time: Sun 01 Mar 2026 10:15:37 +0000
Manifest this update: Sun 01 Mar 2026 10:15:37 +0000
Manifest next update: Sun 08 Mar 2026 10:15:37 +0000
Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: GnEk2hj6AjJ8AIqTLyXzdGicHm7EY60jhXhKXWAqYBA=)
2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Validity
Not Before: Mar 1 10:15:37 2026 GMT
Not After : Mar 8 10:15:37 2026 GMT
Subject: CN=69a411c9-2aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:1f:20:36:6d:b2:c8:f0:16:41:a9:43:86:
fd:06:4f:dc:1c:45:9d:d4:95:c3:1b:56:f9:a6:82:
8a:b9:6f:f0:8e:05:2c:32:ce:70:ff:77:b7:8d:71:
b0:6f:bf:e4:90:9a:54:02:05:b7:b1:bc:be:3a:46:
bf:a6:e1:51:d9:ef:70:09:99:6b:a7:5d:0b:f8:3d:
72:07:22:65:8a:8e:86:8a:c1:53:f2:eb:42:50:89:
bf:17:f8:6a:1d:7c:18:51:9c:05:03:3f:28:50:f2:
4a:e5:01:1d:51:5f:9d:ef:07:0b:23:5a:12:4f:22:
63:11:e1:2c:85:8d:55:93:b9:79:5c:d3:e3:74:ff:
8e:34:21:59:a6:13:15:d4:26:0d:49:e2:72:b0:62:
ef:36:fc:21:62:93:0e:1f:d3:75:62:24:9c:88:46:
54:46:af:c1:cd:c0:44:e1:1e:3c:f0:b3:4f:dc:dc:
d6:d3:7b:f3:f2:5f:39:f8:d0:4f:3a:be:59:ef:e7:
4c:1a:d0:b2:ed:f0:03:e0:3a:bb:57:55:e1:ad:14:
3a:d7:8e:ae:27:76:54:5d:3d:90:a8:11:01:01:01:
64:a6:88:8b:b8:dc:d7:fc:e2:9a:97:22:d1:37:ec:
eb:2f:c8:bc:44:58:3c:bf:a4:69:0e:77:f3:64:3b:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:34:3A:01:4B:9A:2A:31:A4:99:C2:DA:9D:35:3E:BE:3E:54:9B
X509v3 Authority Key Identifier:
keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:58:f0:dc:96:bc:fd:33:57:86:f9:cc:e3:73:dc:40:27:
7a:99:29:05:dd:e6:f3:7f:e5:fc:98:5c:89:44:6f:36:e5:48:
9c:e0:03:b9:00:e4:15:c2:a2:f2:2f:89:f9:b6:55:21:c9:cb:
12:68:62:47:82:3b:49:81:d1:b8:88:cb:40:6f:43:5d:6d:c6:
4a:78:47:6b:fb:b8:93:f3:78:a5:57:a2:21:b5:8e:8e:f9:51:
b0:e0:94:b0:08:6c:5b:88:d8:99:de:a0:2d:63:52:e9:f8:17:
48:29:20:45:ba:2a:fc:79:c8:bb:a8:3a:fd:a6:46:aa:66:7a:
94:ac:a4:a7:01:9b:04:75:4b:b4:a0:d2:27:63:9e:1e:07:70:
d6:b9:c4:bd:05:41:7f:ba:17:d0:66:6b:70:61:3b:22:8e:ac:
41:39:fb:b6:a8:71:28:8d:68:8d:5c:45:f7:ee:0a:82:b3:b5:
44:04:c9:de:28:38:d4:15:da:21:82:46:45:8c:7e:56:bc:b4:
1c:04:65:7f:cd:e8:40:40:27:05:15:c0:81:a8:4e:e3:06:70:
47:d6:94:97:aa:ea:82:b6:01:c8:e4:a6:2a:51:22:6a:a2:69:
ce:57:d0:5e:9f:78:8b:b3:73:5e:97:1b:aa:fa:0b:9e:0a:d9:
a5:1e:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:39 2026 by rpki-client