
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier: RiQdlaHCG9iDXXVuieWmTneZz+ZuGf9fr4V7EJAVuu8=
Subject key identifier: B5:CC:D9:74:91:82:77:3A:60:CC:7D:87:88:36:74:6E:83:BF:72:70
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial: 0B71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number: 0B66
Signing time: Sat 28 Feb 2026 19:24:59 +0000
Manifest this update: Sat 28 Feb 2026 19:24:59 +0000
Manifest next update: Sat 07 Mar 2026 19:24:59 +0000
Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: nzUUQOmo9oxzVJs+Zp/QYhZ4oH8to3RexHPqMr9VXl4=)
2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: TavcsNbKSaSDXkcGP72u+jTcP48G3Su8SEY/uwppPwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2929 (0xb71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Validity
Not Before: Feb 28 19:24:59 2026 GMT
Not After : Mar 7 19:24:59 2026 GMT
Subject: CN=69a3410b-a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:2b:d0:86:fd:88:03:fe:04:31:d0:09:d2:
3b:1c:9e:a7:51:c1:0b:eb:9a:27:78:a4:fb:18:a6:
b1:fe:61:6c:0d:af:da:8b:c0:a7:41:b7:b3:5d:44:
f0:42:ae:f8:ff:89:63:27:c9:6f:66:a6:b9:1c:d6:
a7:0b:36:3c:86:7d:a3:0d:72:71:fe:4c:f7:56:7d:
18:59:6f:5e:d7:27:b2:91:3e:a3:f1:5a:18:23:46:
ac:42:0e:68:98:df:12:09:4a:b5:54:d5:09:d9:22:
23:d3:ae:7f:27:e0:90:fd:b2:da:7e:b7:f2:14:0e:
18:53:d4:f1:c2:c4:98:9f:37:73:69:9f:90:b3:ec:
41:f3:93:86:00:4c:2b:48:0f:b2:65:35:49:82:a5:
88:2e:2b:dd:ea:db:f2:ef:f8:c9:a5:08:21:33:78:
21:31:7f:bd:42:ce:72:fb:2f:e9:47:12:d4:cb:21:
6e:56:42:a1:a8:e3:a9:65:2b:58:96:ed:f8:af:cf:
e2:b8:61:02:c0:d8:f9:59:19:fe:f2:14:36:fa:7c:
81:de:11:12:07:63:47:7c:aa:83:37:46:6f:90:83:
ec:9e:c4:31:6e:e4:fc:d8:c3:a2:74:64:d7:8f:8b:
a9:61:c4:5d:fe:ac:07:6f:a6:8a:04:04:06:c5:05:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:D9:74:91:82:77:3A:60:CC:7D:87:88:36:74:6E:83:BF:72:70
X509v3 Authority Key Identifier:
keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bf:17:a6:ed:c7:2b:90:92:43:44:7f:3a:57:ff:6b:8b:28:
8b:df:5b:5e:a5:35:05:12:8d:75:e7:f5:a6:27:2a:86:a8:61:
ba:02:63:55:0b:34:a9:30:b0:5a:b0:ac:2b:ce:0f:31:b7:72:
9f:a3:5b:27:77:16:69:a6:20:a8:a5:f1:40:4c:e8:68:c5:aa:
f3:df:f1:08:75:1a:77:61:c5:1d:81:4f:c0:63:f7:1e:60:f3:
5e:5d:58:af:b5:64:db:93:a1:bc:3d:f7:d4:5a:7b:78:d5:30:
6d:cb:9a:0c:d4:d0:c1:b5:4f:e0:7c:36:1d:1e:ba:58:d9:9b:
01:80:75:72:45:fe:cf:48:db:65:f9:69:90:9e:cb:1a:9a:a1:
b5:45:8f:6e:ea:bf:42:cf:7d:26:8b:70:cb:7d:82:c0:52:8a:
88:39:a2:9a:b0:32:7e:e7:91:75:5b:89:b0:fb:0c:33:86:05:
ef:e8:ac:36:92:23:e2:22:b0:89:1c:96:7f:97:6f:c6:bd:1d:
22:50:fa:c7:a8:0c:61:66:32:ae:ae:9f:2a:41:17:d4:76:07:
ea:ad:bf:6e:c0:3c:65:d9:7e:e2:2b:b2:ba:4d:ce:48:2e:ce:
7f:cd:f7:9c:f7:1f:95:03:70:98:8f:97:39:17:d8:93:3b:5b:
23:5a:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:26 2026 by rpki-client