
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
File: bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json)
Hash identifier: SpJesinRDorrSDDGybmxkpF0O9SPq/htIpdAr97ygMA=
Subject key identifier: 3A:9C:C8:65:A5:F9:A8:EE:69:B7:97:03:04:34:99:74:5D:7E:52:5B
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
Manifest number: 05BC
Signing time: Thu 16 Apr 2026 23:02:28 +0000
Manifest this update: Thu 16 Apr 2026 23:02:28 +0000
Manifest next update: Thu 23 Apr 2026 23:02:28 +0000
Files and hashes: 1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: tKlv9ukw7gDKALmYUgA333uH6DEEJT5T6KIl2aNrY48=)
2: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: jxu/gvi4k+hs5AI7Co9TbSEubfmA4La8wA/FQaJkuj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Validity
Not Before: Apr 16 23:02:28 2026 GMT
Not After : Apr 23 23:02:28 2026 GMT
Subject: CN=69e16a84-e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:97:5b:56:bc:2b:47:46:b4:23:d6:60:66:
6b:a3:f4:d8:50:81:0b:4c:69:74:92:1e:9b:07:97:
64:d9:05:da:3e:f5:83:f3:fe:ea:3a:3c:b6:8f:b4:
69:48:ea:04:42:6a:00:c2:4c:af:92:d8:40:e4:7a:
9c:a7:ca:9d:78:e5:6c:d9:6a:05:7f:f4:f6:a7:6b:
b1:78:34:0e:18:56:33:02:7a:8f:9f:a6:ba:49:a7:
d6:a1:8e:da:f4:e2:b7:2f:97:16:2f:63:68:01:11:
b0:8f:1c:1b:3f:76:39:3b:fc:23:36:2f:b9:67:12:
a9:88:06:ee:33:e6:f4:e2:c7:b2:2d:8e:66:3f:f7:
77:5c:80:d5:2f:39:e6:d8:f9:b6:9a:84:b9:1e:60:
f6:db:b3:e2:88:1e:07:e4:e1:45:0c:19:9a:47:81:
ae:3f:b7:57:69:92:e4:29:9f:5b:a4:fa:1a:65:e6:
99:44:ee:8f:02:85:ad:f4:c4:c4:a9:10:7a:cf:0b:
b9:ee:71:7c:bb:bc:f9:f8:ce:47:b7:1a:f0:79:bf:
f3:01:94:5b:01:2a:4c:d7:c6:32:04:0e:65:75:3b:
0d:40:fb:95:a1:b2:ec:90:c9:9b:50:4f:46:53:a9:
0e:be:d7:9b:be:57:df:24:c7:6b:f6:f1:37:34:5b:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:C8:65:A5:F9:A8:EE:69:B7:97:03:04:34:99:74:5D:7E:52:5B
X509v3 Authority Key Identifier:
keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cf:9a:62:14:d8:ce:f4:c1:2e:64:bc:49:39:4e:cf:16:ad:
49:da:80:2b:9f:1e:4c:e4:2f:7f:e4:38:88:14:40:08:ca:95:
4e:f5:0b:9e:78:80:7d:f5:4c:32:ef:82:59:26:2e:e3:a8:d5:
b1:d4:3c:e6:28:53:f4:ec:03:b6:1c:40:c1:43:5f:59:36:0d:
60:04:39:5f:36:8c:f5:6e:8c:65:84:aa:8c:85:99:d7:f5:b0:
d9:0f:bb:33:ff:8b:88:60:3c:07:f7:8c:67:18:91:88:e6:48:
db:6d:1f:3f:8c:90:d1:b6:31:23:8a:45:4d:aa:5e:6b:9b:3f:
b5:c9:12:2a:e6:22:f5:4e:ff:55:00:84:07:ba:e3:ed:b6:da:
e3:28:9b:ba:51:52:ba:41:3f:62:9f:5a:03:55:c1:9e:6e:1c:
d8:0b:1d:92:24:36:28:f4:5d:2f:c2:e4:b6:d1:0b:85:70:29:
6d:86:53:7e:ce:5d:fe:35:bc:fc:ff:8d:00:b0:08:fa:16:79:
ac:57:48:87:03:bf:ef:b0:6a:f0:53:40:f7:f3:20:89:f6:0c:
cb:66:72:4b:6a:68:7d:96:47:73:d5:03:78:79:63:1d:49:00:
91:42:e5:15:ff:09:16:7f:a0:af:ab:6a:39:2c:86:02:b9:c3:
e4:ee:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:52 2026 by rpki-client