
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: Gb3ZfuaM4Q9Iwd5f/L4tVOxsskcHsiyfNvyc0VZ+9SA=
Subject key identifier: CD:83:1B:12:93:15:67:C6:85:A9:FD:13:B3:55:DE:82:62:D0:60:F0
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 0282
Signing time: Sat 13 Jun 2026 01:56:02 +0000
Manifest this update: Sat 13 Jun 2026 01:56:02 +0000
Manifest next update: Sat 20 Jun 2026 01:56:02 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: o4dQ0kmMgLupHXWMfeLyztdjV0GEpQOkrHfCKiCGUPs=)
2: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=)
3: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=)
4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Jun 13 01:56:02 2026 GMT
Not After : Jun 20 01:56:02 2026 GMT
Subject: CN=6a2cb8b2-b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:f4:45:15:6b:4f:69:40:70:ad:e7:c5:08:
5b:a9:6f:f5:30:cf:54:3f:4d:97:98:61:92:e5:5f:
05:65:0a:24:ea:6b:7a:89:61:44:7f:98:11:16:23:
38:27:0f:89:00:74:87:7c:51:f9:b2:59:85:a2:d6:
a5:7f:53:22:54:01:a5:de:c0:ba:a9:38:49:3c:34:
8a:8f:4c:30:12:fa:bb:fd:6f:fb:78:61:4f:af:36:
23:e0:fa:58:6a:4e:d8:c3:73:cc:2b:f7:96:a4:d9:
b3:d6:b0:da:d0:65:33:6d:48:7f:7b:5a:9d:54:bd:
18:7e:7d:4c:b6:c9:42:b6:09:dc:f4:07:f5:b0:57:
0e:33:d8:9d:86:8d:02:00:55:31:8c:ab:45:fd:07:
c0:d1:d2:3b:aa:a1:5a:4e:68:28:f3:ff:21:a8:9a:
a1:b0:4d:20:e7:92:98:3d:7c:98:ce:42:43:8f:28:
f4:3f:6a:cd:46:4a:62:e5:fe:be:f3:dd:a1:da:0d:
09:2a:5c:75:ea:62:16:a1:b8:a8:05:d8:cd:5c:0a:
bc:e6:e9:65:80:52:23:c7:8c:2a:61:38:55:a4:b4:
7d:5b:05:ed:65:ab:8b:b9:88:e5:6c:be:ef:00:40:
5b:2c:b1:d8:85:f4:d6:61:37:3b:07:0e:56:0b:4e:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:1B:12:93:15:67:C6:85:A9:FD:13:B3:55:DE:82:62:D0:60:F0
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:97:51:18:16:a3:a9:91:33:95:f9:36:a5:74:91:98:9d:79:
f7:14:bf:90:2e:eb:44:4e:3a:e3:42:ef:b9:3e:c0:f9:9c:c1:
07:92:9e:50:e2:a0:03:4a:b7:ef:be:45:d3:4c:84:96:ab:2e:
b6:fc:f0:2f:a1:d4:23:70:81:67:d2:59:b4:d6:a6:cb:29:0d:
f5:51:bc:e2:87:09:4d:51:75:3a:95:3d:39:97:59:c6:09:e6:
e1:4f:07:ba:3a:56:5c:55:f3:07:c5:35:fa:5a:43:db:42:f7:
b9:51:94:7c:c5:49:4a:fa:09:ed:29:bf:82:28:68:7b:8a:ae:
bf:c7:0d:ee:ab:9f:6f:74:ac:8b:20:48:84:3e:5e:a4:d8:f6:
03:7d:58:95:e6:91:f6:d4:d8:5c:e4:17:fd:08:28:4c:68:5d:
68:cb:c6:93:eb:83:d8:6e:2a:1a:d1:d2:e1:eb:9f:0f:ee:0d:
a8:b4:c8:0e:9a:41:e8:ca:d6:5d:ce:62:34:ed:b4:75:e1:9b:
cc:23:4a:cd:a8:37:0b:3e:de:19:56:7f:9c:02:70:8d:68:ed:
a6:6e:db:d3:ca:5b:47:6c:02:23:23:c7:00:14:d6:c4:d7:56:
da:11:74:8c:5a:d7:1b:80:44:4e:b9:c8:9d:63:d0:fe:7c:ff:
ac:c1:41:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE
MkFBRUU0QjkwHhcNMjYwNjEzMDE1NjAyWhcNMjYwNjIwMDE1NjAyWjAYMRYwFAYD
VQQDEw02YTJjYjhiMi1iMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdj0RRVrT2lAcK3nxQhbqW/1MM9UP02XmGGS5V8FZQok6mt6iWFEf5gRFiM4
Jw+JAHSHfFH5slmFotalf1MiVAGl3sC6qThJPDSKj0wwEvq7/W/7eGFPrzYj4PpY
ak7Yw3PMK/eWpNmz1rDa0GUzbUh/e1qdVL0Yfn1MtslCtgnc9Af1sFcOM9idho0C
AFUxjKtF/QfA0dI7qqFaTmgo8/8hqJqhsE0g55KYPXyYzkJDjyj0P2rNRkpi5f6+
892h2g0JKlx16mIWobioBdjNXAq85ullgFIjx4wqYThVpLR9WwXtZauLuYjlbL7v
AEBbLLHYhfTWYTc7Bw5WC05AMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2DGxKT
FWfGhan9E7NV3oJi0GDwMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2
MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD
cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYJdRGBajqZEzlfk2pXSRmJ159xS/kC7rRE4640LvuT7A+ZzBB5KeUOKgA0q3
775F00yElqsutvzwL6HUI3CBZ9JZtNamyykN9VG84ocJTVF1OpU9OZdZxgnm4U8H
ujpWXFXzB8U1+lpD20L3uVGUfMVJSvoJ7Sm/gihoe4quv8cN7qufb3SsiyBIhD5e
pNj2A31YleaR9tTYXOQX/QgoTGhdaMvGk+uD2G4qGtHS4eufD+4NqLTIDppB6MrW
Xc5iNO20deGbzCNKzag3Cz7eGVZ/nAJwjWjtpm7b08pbR2wCIyPHABTWxNdW2hF0
jFrXG4BETrnInWPQ/nz/rMFBhg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:00 2026 by rpki-client