
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier: xkxDLDlPvaJjL8fkCEzRi4YNeunLsuvYTvojbS24fKk=
Subject key identifier: 00:82:C4:3D:82:A6:71:64:EB:17:74:CC:A5:68:6F:42:F5:E9:29:07
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number: 0228
Signing time: Mon 21 Sep 2026 02:54:24 +0000
Manifest this update: Mon 21 Sep 2026 02:54:24 +0000
Manifest next update: Mon 28 Sep 2026 02:54:24 +0000
Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: g2UZkk4cl81sZntRZ8HiiwSm7LvjVuu9NWudG9RwaOw=)
2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: x3N43LNHpCNmmbJ4oepJrzKxjOa5Xqqq2QK4fNAveZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: Sep 21 02:54:24 2026 GMT
Not After : Sep 28 02:54:24 2026 GMT
Subject: CN=6ab09c60-4ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:89:fa:73:ab:e4:ce:8c:53:47:e7:66:e4:
68:08:9a:78:a0:0f:ef:4f:e2:4e:03:49:62:0b:6b:
83:5d:9c:89:53:7b:2c:8b:e7:52:36:cf:3d:9e:de:
9e:83:16:0e:74:ce:a7:8d:37:c8:5d:bd:7d:a7:10:
47:03:4e:5f:11:45:9d:b3:7d:88:86:a5:7a:38:c7:
db:27:5c:65:25:39:ea:3f:45:72:2d:30:7a:22:8f:
31:5b:bf:76:5b:58:27:95:01:7b:8f:88:46:c4:6a:
d1:dc:2c:49:62:bf:3d:95:96:d9:c4:e5:0b:27:30:
82:a6:37:b6:5e:af:0c:ec:fb:65:03:84:ae:ff:38:
5c:5e:40:fe:8e:5e:71:38:cf:9f:7f:68:6c:4b:be:
a8:28:31:a2:b4:e8:2d:b5:b8:f5:64:33:d2:13:2e:
14:dd:d0:bc:e3:d9:e1:3c:2f:4d:1d:e3:ab:94:20:
54:a6:19:c1:b7:51:54:53:8b:ec:9f:b6:66:62:10:
90:5e:99:c9:48:d0:08:ba:16:e5:7c:a8:5b:af:8d:
7d:c7:eb:83:a0:79:ab:9e:13:c1:d3:b4:65:22:02:
02:68:bc:ac:bb:eb:6e:43:c7:3e:5d:2a:ae:57:31:
c5:0a:5a:3d:63:74:0b:68:db:9f:e6:15:f5:3c:8f:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:C4:3D:82:A6:71:64:EB:17:74:CC:A5:68:6F:42:F5:E9:29:07
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:52:90:1a:56:89:60:f6:5a:67:35:e4:0b:6a:81:e0:f1:6a:
99:f1:2b:6a:76:9f:9f:dd:05:e5:06:90:85:16:16:83:0d:cd:
46:04:1d:dd:e9:4f:f0:9b:93:87:18:44:44:22:9c:e2:24:1e:
6c:ec:87:01:c5:5a:1a:55:9f:8e:94:87:7d:71:40:db:6c:ef:
96:65:49:42:88:1d:04:9c:c6:d3:7d:40:65:a9:b1:ed:10:ad:
63:4e:d4:bc:b7:65:11:1e:5d:aa:de:a8:02:d4:4e:cb:72:ac:
7d:22:53:a1:70:39:3e:b1:e9:32:be:96:6b:58:34:1d:6d:8c:
26:12:3a:60:99:46:6c:5b:a3:49:55:a7:ab:d1:9e:6e:1e:66:
f9:b9:24:bc:08:df:b0:26:43:5f:fc:90:f6:de:26:b7:6f:92:
0b:12:e6:85:2c:82:73:e7:c4:79:bb:fd:9d:ce:1f:32:34:09:
d7:ae:a3:57:2f:74:7e:94:54:7c:8b:96:85:62:52:6c:65:88:
e1:7e:98:cc:96:3b:c8:5a:01:0e:2c:8e:76:80:a6:64:e3:16:
1f:c4:90:69:ed:6e:c7:59:85:b5:25:2f:74:55:99:69:29:6a:
51:1f:8b:c0:eb:e0:19:ab:ac:a3:55:19:97:27:ad:f2:9b:ac:
b5:0d:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:02:57 2026 by rpki-client