
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json)
Hash identifier: A1ua0bNSYrhMQ815/b22dksvbd3ECFcvHTqkPqTKC2c=
Subject key identifier: 8B:50:14:9D:9D:60:5B:66:1C:AC:BB:AA:5E:C2:07:68:9C:32:67:2E
Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
Manifest number: 13
Signing time: Wed 15 Apr 2026 08:36:23 +0000
Manifest this update: Wed 15 Apr 2026 08:36:23 +0000
Manifest next update: Wed 22 Apr 2026 08:36:23 +0000
Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: JMsKJqGLqT1cO0Owl5MRSDakEJYKFuHW0lFY2Xy8W/A=)
2: 39CF61B81E3F11F196621670303D8C67.roa (hash: zPRyj4utwiTX5jFvUWAD+F2yXKjyPz2qiUDVnqyk25k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Validity
Not Before: Apr 15 08:36:23 2026 GMT
Not After : Apr 22 08:36:23 2026 GMT
Subject: CN=69df4e07-d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:4c:dc:3c:c2:74:ef:c2:c8:0d:76:9d:25:
72:af:df:ad:51:14:67:c2:0c:d3:9e:ae:ba:e6:89:
fa:46:b2:4f:bf:52:d4:6e:85:85:71:13:30:a0:ba:
5e:dc:1d:c3:c4:5e:74:bb:68:6a:52:22:1e:fd:13:
2e:fc:84:00:7d:a8:80:0e:ca:78:e8:02:47:59:51:
1b:ec:f9:52:b2:33:86:4b:46:af:31:c7:fe:e8:a2:
3c:59:23:6b:0a:72:ec:33:c4:78:3b:34:63:b0:74:
4c:37:30:75:86:6c:2d:b2:8e:a1:32:b4:2f:88:88:
67:da:8a:61:d2:b8:d2:5b:94:56:2f:ca:39:eb:a4:
8c:cd:42:a8:20:14:b2:1d:08:c4:01:4d:1a:bd:ab:
e0:f3:98:32:a3:63:b6:d8:e0:94:e8:32:83:0d:7d:
e3:e5:83:15:79:2e:d7:49:d8:89:f5:8a:52:2d:7a:
21:ef:c5:fd:8f:e3:81:31:48:4b:ee:e7:a4:be:14:
66:38:72:66:68:7b:e2:87:a0:c5:7d:ef:74:ff:1c:
86:95:b1:77:95:ac:ac:8c:e1:7f:53:0e:7b:f6:f7:
f4:f5:56:f6:4d:07:e5:19:e9:af:c4:57:5e:5b:3f:
9a:35:cc:2c:bc:ef:43:b6:db:ff:15:60:03:c5:da:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:14:9D:9D:60:5B:66:1C:AC:BB:AA:5E:C2:07:68:9C:32:67:2E
X509v3 Authority Key Identifier:
keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:8b:fb:19:1b:60:7d:06:03:39:74:40:a9:1f:60:c4:5b:
a8:d0:43:f4:64:9d:08:3c:da:85:fb:2d:75:fd:55:e3:f4:9d:
1d:a0:79:45:65:e9:97:b8:bd:69:05:c2:c1:3d:5d:bf:90:3f:
41:11:18:fd:5f:92:cf:44:ea:05:2e:86:dc:f2:b2:95:ba:57:
81:d4:a7:8f:15:d5:cd:3d:ff:89:59:42:c4:ee:92:27:55:17:
65:59:cb:1e:4e:90:80:36:b7:a9:e6:14:e4:72:ae:e5:4e:e6:
3b:8a:b2:01:e7:1a:b5:47:d7:ff:de:03:de:e9:c6:12:81:fa:
57:11:c5:19:97:de:ed:ab:93:2b:7c:1e:9a:ce:0f:f0:5f:e1:
9e:02:82:33:c8:75:97:ee:93:b9:65:b0:4a:b6:79:bd:88:40:
9d:ca:e6:d6:76:01:07:64:e4:56:87:4e:37:59:35:54:35:69:
f6:7b:5b:cd:37:c1:a5:40:cf:e7:67:4b:4d:9b:d3:b0:d0:0e:
ae:59:e6:de:2a:9c:7d:8e:ff:ce:a3:b6:41:0b:8f:49:33:30:
63:83:77:3a:5f:aa:a2:79:6f:c4:a0:86:81:0c:15:7e:27:96:
dc:a5:81:bb:fb:d6:93:f6:33:c3:e7:95:72:f6:17:cf:a3:94:
c2:8f:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:22 2026 by rpki-client