
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier: WAXrG7WazQYPYFm3X8tSLYuRNqcpLzEKUOasBJewBSY=
Subject key identifier: 58:37:41:BF:A2:E4:33:8E:62:15:64:E2:7C:ED:DE:7B:7E:48:B9:59
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number: 028D
Signing time: Sun 05 Apr 2026 01:25:17 +0000
Manifest this update: Sun 05 Apr 2026 01:25:17 +0000
Manifest next update: Sun 12 Apr 2026 01:25:17 +0000
Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: c0F9QFFpUxX8hvTIALylYr7sPd5xCWb6XvkD6PcKnWU=)
2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: 1Glvhcf7GkoJCunHDpP45q9GMuetf4Sccyte1OOh3sM=)
3: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: QY2VRet4P+YKz9oxq3Ig+v1EAPIpWMaBqPXmBJ+0Whk=)
4: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: jnvYSXUOzZRSAh+pOehb/z7FrmRMGdKIIgdSaHoUN6w=)
5: 1327E728C4D611F08E87F351C4F9AE02.roa (hash: /l48LAkNHuepo2DJso1xJGbWtc8nuhZ1o3uM7TpB9uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Validity
Not Before: Apr 5 01:25:17 2026 GMT
Not After : Apr 12 01:25:17 2026 GMT
Subject: CN=69d1b9fd-6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:1e:af:54:ad:31:9f:09:b4:36:6a:a2:34:
50:d0:73:28:b2:f2:c9:49:81:a3:8f:ed:5f:e4:ba:
26:b0:98:ef:04:d0:f4:f6:52:54:5d:d2:08:78:53:
57:9e:3c:e9:cb:15:62:3a:18:c1:25:59:22:6b:a9:
13:7c:71:0a:a4:5d:ee:0c:d8:6c:78:40:b3:82:00:
cf:a8:1e:d5:3f:c5:5b:af:d1:47:15:f2:55:7f:81:
69:13:f7:3b:34:f3:55:ed:a1:c6:81:b8:27:4f:56:
a2:2b:9b:8b:45:0a:4d:46:e0:e6:33:b0:4d:3c:9f:
eb:36:86:8f:c4:8d:d5:19:67:73:d6:3d:bb:c7:f6:
18:b1:94:0a:12:c4:b7:d7:d8:54:7a:7a:73:85:39:
27:6d:d5:2b:f2:e1:50:7d:15:e9:11:1a:7a:07:df:
40:87:66:92:5d:a0:f0:1c:b1:89:00:01:b6:58:e3:
cf:14:41:ca:83:fa:d9:17:66:94:9d:05:b9:0e:f7:
5a:22:7f:fa:d9:97:7e:0e:06:71:99:55:54:6c:d8:
0a:22:6e:01:d9:b3:c6:3d:06:63:89:c3:cd:22:e2:
4c:89:d5:b3:fe:29:d2:09:5a:3c:da:05:de:2d:ca:
b8:2f:77:ed:32:39:a5:9d:93:41:fd:ce:e2:15:32:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:41:BF:A2:E4:33:8E:62:15:64:E2:7C:ED:DE:7B:7E:48:B9:59
X509v3 Authority Key Identifier:
keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:b3:eb:d4:71:92:94:67:c7:2b:e1:28:d3:db:ae:55:9c:20:
37:d4:36:e7:df:51:78:35:c4:62:7b:a2:57:7f:fe:5b:d6:dc:
50:e0:ba:7d:81:da:d0:65:54:38:79:f5:3c:13:92:b9:41:f5:
61:a6:23:ed:be:ef:75:0a:67:06:bb:75:d1:89:a5:f9:a1:cb:
03:ba:51:73:64:89:23:55:64:2c:6e:87:2f:a5:62:85:35:0e:
0e:a3:92:38:6c:c7:db:a5:06:10:14:49:17:a6:91:aa:6a:aa:
6b:04:dc:60:7a:0e:01:ad:97:5f:97:cc:d2:a6:2a:68:ea:c4:
9e:59:b1:c4:e1:c4:06:6d:f5:e0:13:58:95:fe:ea:61:b2:11:
60:0a:bc:a5:9d:b7:4c:66:41:b8:55:21:c0:d8:d7:19:71:10:
76:02:b4:52:52:cd:59:76:43:6c:42:31:cb:0a:a8:87:fd:1b:
81:38:d3:b9:2a:cb:f2:8c:0c:4e:2d:3e:ec:d7:45:d7:6e:5f:
5e:da:2a:96:cc:ca:1e:63:f4:c7:1d:10:18:37:84:21:55:f5:
f7:f3:db:f3:39:d8:01:0b:54:f7:d3:74:31:35:df:5d:44:38:
10:c1:29:b5:df:bb:68:48:c8:6e:05:2c:b3:26:6f:fa:16:e8:
42:ab:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:07 2026 by rpki-client