
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json)
Hash identifier: FfZy6irYe6s0ZvhiNWcMes5mo+rXVZi6xMBQwW4fzpY=
Subject key identifier: A6:46:92:69:A3:D4:F3:56:4A:6F:4A:8E:73:1B:44:E8:30:87:F0:DE
Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
Manifest number: 011F
Signing time: Fri 17 Apr 2026 05:30:32 +0000
Manifest this update: Fri 17 Apr 2026 05:30:31 +0000
Manifest next update: Fri 24 Apr 2026 05:30:31 +0000
Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: +6Zn4UvkUn/sUjL4BN/A5XWTboefYUwRuEmKd/o7XJs=)
2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: l5WwokX0ZI8Y9CP6TgDkOcP9plGfuJ8GmKuV1BnPJZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Validity
Not Before: Apr 17 05:30:31 2026 GMT
Not After : Apr 24 05:30:31 2026 GMT
Subject: CN=69e1c578-802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:27:18:34:13:6f:4a:72:b4:db:f3:58:04:
a1:b0:1b:1e:1f:7b:a7:a2:24:1a:4d:4b:38:c7:c9:
01:b2:89:d4:01:82:6d:9f:d8:91:26:b8:79:d0:43:
02:e8:f0:d6:1f:9e:0c:21:32:7e:1d:40:e3:68:98:
f5:71:f7:a0:e2:6c:b5:aa:8a:d8:6f:c8:56:35:6d:
73:4b:c5:9c:3d:60:a0:9f:60:a4:fd:c4:a4:68:2e:
ba:05:5c:f1:0f:66:f4:27:d5:d1:28:73:c8:ca:50:
52:27:88:a6:90:ca:ab:6d:b6:c5:93:47:f0:ff:df:
92:9b:ec:73:7f:ce:fe:19:df:be:0e:ac:d5:af:94:
33:74:c9:38:83:fc:92:37:06:0a:f2:26:fa:e7:d6:
21:16:93:5b:04:c2:44:50:b1:7f:2b:93:18:83:72:
30:54:04:cc:55:f1:ce:73:6a:78:cf:40:d6:97:79:
72:86:87:19:5c:66:04:05:ae:3a:ff:a9:54:4a:e6:
46:90:fe:1a:a9:00:12:8f:90:7b:e0:49:09:64:29:
0d:99:83:bd:35:59:3d:30:71:dc:66:80:46:28:0d:
07:8c:17:b1:92:db:02:af:a1:25:b1:ce:0d:a4:09:
55:5f:35:41:d8:6d:0c:7f:a5:ec:9b:b5:0a:ff:8d:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:92:69:A3:D4:F3:56:4A:6F:4A:8E:73:1B:44:E8:30:87:F0:DE
X509v3 Authority Key Identifier:
keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:38:7f:82:d4:0e:b9:58:a3:14:5a:9a:43:76:4a:8a:f5:
96:96:72:01:3a:31:fa:64:51:02:54:93:17:73:ed:06:10:dc:
23:4a:c7:67:ab:a0:a8:4f:40:69:6f:be:3c:c1:51:68:54:c8:
9e:80:13:a6:4b:ef:d8:8e:39:cb:93:6f:c1:93:0f:a5:d3:2a:
a4:34:e2:1b:45:d0:0e:a2:18:0a:f8:ed:90:70:15:98:ac:61:
5a:03:24:90:9e:99:7b:3d:c8:c3:a1:2a:0f:9e:e9:54:78:de:
5f:de:ba:64:5d:c3:89:6c:59:a1:dc:92:cb:56:03:8a:da:b6:
64:41:52:3b:f1:39:d9:60:a7:f0:6b:8c:7d:7f:96:11:86:df:
c1:b7:68:c8:21:f3:ab:f0:1a:62:82:aa:87:e1:04:fd:c5:c7:
b0:9e:be:53:64:e5:f8:5a:64:cc:a8:67:e6:38:55:7a:b8:e2:
da:d2:be:c3:4a:bd:c1:2d:f5:b2:0f:6b:6b:81:41:54:e6:7d:
10:c4:3f:af:6e:da:7f:d1:b4:4e:2c:68:28:70:81:02:dc:fd:
06:0a:2e:48:8b:f9:9f:8e:9f:70:7c:82:fc:a3:39:d0:23:ce:
46:e8:1f:26:59:b3:c7:37:28:b2:19:18:05:ff:f4:86:54:65:
22:47:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:56 2026 by rpki-client