
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier: AQ1PBsgAJXHLgjNFb6doGihIfdqSyrjMFBJseuLDgIU=
Subject key identifier: C6:34:44:A9:FE:7A:7C:6F:CC:66:55:48:BF:54:92:59:38:3E:D1:AE
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number: 01C6
Signing time: Fri 17 Apr 2026 03:32:22 +0000
Manifest this update: Fri 17 Apr 2026 03:32:21 +0000
Manifest next update: Fri 24 Apr 2026 03:32:21 +0000
Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: pUBEVMVmH2Z6Dke/nO3GnjwN8Fg0u67BUFc8vhnu+hk=)
2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Validity
Not Before: Apr 17 03:32:21 2026 GMT
Not After : Apr 24 03:32:21 2026 GMT
Subject: CN=69e1a9c6-47e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:93:3b:e8:e3:af:e8:b3:4a:6e:e6:ca:9d:
df:92:93:c7:66:f6:c2:1b:4e:f7:e6:61:8e:c1:a9:
cc:76:dd:7a:4e:ee:fd:08:45:16:5c:5b:5a:e3:dd:
16:6b:d5:5a:65:2f:1b:d7:fb:a3:72:d3:b2:14:7e:
c0:15:96:ab:3a:eb:ca:73:e2:3f:dd:ad:36:14:bb:
4b:12:e4:68:ee:2a:ac:2f:62:82:e7:f6:c7:57:b4:
8e:ae:9c:0a:2e:c7:25:ea:8a:8a:6a:8d:dd:82:97:
b7:97:5d:b5:80:85:29:be:c0:76:86:80:02:2b:26:
a1:c1:80:e9:18:0c:24:1f:18:1a:0f:18:65:ec:c6:
95:ac:ce:de:7c:98:2a:b8:8e:e8:52:6b:ea:43:17:
8e:ce:42:9a:da:c5:cf:b9:36:40:28:9c:c0:31:a1:
71:b5:01:58:db:d8:9e:d8:38:fd:fb:3f:82:2b:38:
e1:8f:ad:9d:eb:12:f2:45:a9:c9:bf:b0:5f:ff:da:
d8:d5:f8:2e:14:b2:40:79:32:21:ad:35:f7:c6:1d:
8d:ba:dd:ec:38:63:df:9b:e4:dd:89:0d:84:f2:d4:
9e:40:8f:c3:46:15:29:2f:ad:ad:a7:92:b2:5b:cd:
39:c5:eb:10:7f:53:87:63:1d:3b:70:22:64:bf:da:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:44:A9:FE:7A:7C:6F:CC:66:55:48:BF:54:92:59:38:3E:D1:AE
X509v3 Authority Key Identifier:
keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:c9:9e:b5:6c:bd:69:42:bd:96:07:68:98:8b:89:3d:fd:
c3:2f:54:9e:f6:50:72:9b:fa:f2:ae:f1:90:8f:5a:68:87:a7:
5d:ef:c6:fa:99:8d:03:e1:88:93:83:62:71:d3:c7:b3:3e:83:
ec:2a:84:61:2e:0f:7f:77:17:65:bb:82:15:12:3e:a3:65:da:
7a:9a:3f:14:2d:76:ad:65:2a:c3:bc:ff:74:f5:3a:bd:50:69:
5d:41:4c:a3:87:23:6f:a9:1e:e3:b6:48:e0:7e:e3:21:81:3c:
6a:97:50:3d:eb:7d:64:20:ef:11:f5:67:3e:2d:a0:30:ae:ac:
ad:96:20:cf:01:21:8a:26:3d:83:ec:4e:28:1d:79:24:aa:96:
db:24:40:61:b8:2b:b1:54:ad:82:4a:95:9b:69:01:4e:b5:e2:
38:6a:f0:c2:d6:4e:77:63:eb:cb:88:5a:8f:9e:0a:48:72:00:
81:2f:62:7d:3f:8b:e9:e6:50:ba:fd:86:5c:bb:16:36:d6:eb:
ea:f7:19:ac:99:18:d7:f5:51:99:d2:66:06:4f:ed:69:24:48:
c8:4d:b6:56:4c:95:f8:0b:d6:49:cd:60:a3:c7:c6:a9:d2:6c:
1a:0d:cd:a9:92:db:2a:4f:5a:e1:5b:d4:d6:0f:9d:51:b7:87:
fe:c0:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:24 2026 by rpki-client