
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: jDyS7JbQZ1BasdzWzUJkIMzF50PCDtum1hel0tF0wKc=
Subject key identifier: F3:AD:D8:A6:C6:B0:E5:65:13:A3:8D:06:DB:0F:EC:6E:04:E1:AA:F6
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 01E5
Signing time: Sun 05 Apr 2026 02:55:37 +0000
Manifest this update: Sun 05 Apr 2026 02:55:36 +0000
Manifest next update: Sun 12 Apr 2026 02:55:36 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: UKzGwg8lHsszM/LvrpWIziQc/Mi75dFkE1bs0HxskvE=)
2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: O33e2x2bsJnVnZYzmgRVq6OSe4Uls0Q88mgSA9qXJfc=)
3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: PoM2r//Vc5483ybqcOELC8XLItw50pda51BtS9kgSIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Apr 5 02:55:36 2026 GMT
Not After : Apr 12 02:55:36 2026 GMT
Subject: CN=69d1cf29-5944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:07:a3:82:ec:89:af:77:a5:66:d8:6b:86:e2:
0b:60:75:29:8d:de:33:d7:a9:10:6e:ac:a6:23:72:
e8:56:87:c5:b4:98:1c:e1:44:69:6d:8a:6b:09:a2:
36:8a:3e:2f:50:d5:f3:83:5b:ba:c3:fc:41:11:b8:
8c:fd:12:48:23:b5:e5:d6:92:a8:a0:aa:8f:2e:33:
5f:61:3b:49:fc:62:8b:20:ec:e4:f2:67:90:39:9d:
0b:67:15:49:30:03:55:28:38:e0:6f:ee:b2:cb:64:
53:a9:2b:e8:73:67:b3:16:86:0e:8d:05:8b:3c:18:
44:91:54:d9:3d:47:ac:c5:d6:b7:3e:37:be:5e:85:
a4:ab:f4:d7:87:e2:5e:db:17:0a:b9:de:29:72:3e:
1a:3d:61:37:0d:01:b5:ac:22:38:5a:fa:90:24:95:
89:fd:64:32:0a:21:27:84:71:be:14:2d:16:5c:a0:
e1:97:29:07:61:50:03:d9:6b:72:86:55:33:93:48:
2e:d2:f5:5c:dd:24:0e:66:db:04:f3:59:3b:92:ed:
fc:71:2f:35:6b:ee:a1:06:a0:60:bc:53:a0:94:20:
19:ff:b1:47:1a:3c:cf:1d:9e:2d:67:9f:8a:01:1e:
c2:fd:c6:31:2d:0c:e9:5d:6e:52:68:08:a8:a4:43:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:D8:A6:C6:B0:E5:65:13:A3:8D:06:DB:0F:EC:6E:04:E1:AA:F6
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:19:14:a3:7a:30:ec:d7:c1:e5:4f:c2:5c:ce:a1:cd:18:
54:42:e3:dc:f6:0d:a7:52:4a:fe:40:d3:40:b4:f8:aa:a2:a6:
e3:d0:86:5e:5a:d8:13:c8:58:12:33:1d:e9:fe:f8:2f:2b:d4:
6a:99:09:ba:16:2a:34:ce:cd:be:a3:12:b3:da:92:a9:0c:7b:
d9:24:1a:aa:be:38:86:b2:57:3d:87:f1:87:90:91:14:04:c3:
0c:45:f6:a9:d8:f9:96:6a:02:05:cb:de:d1:bf:53:b2:2c:50:
52:f6:61:85:90:6e:a0:01:13:53:d8:8a:70:09:c2:59:78:9c:
ec:71:04:e6:01:96:9e:ee:f4:2d:aa:66:f0:26:19:f2:f1:c8:
d0:0e:64:56:47:1f:ed:d9:b1:62:2d:f4:70:cb:7e:2c:7c:4a:
41:7d:36:bf:bc:c7:40:ab:ac:29:14:dd:a1:f5:40:70:5d:25:
f1:2e:f0:d0:8b:fc:44:e7:2a:04:d4:a5:18:4d:79:67:0a:49:
5f:ba:3e:9f:f4:1b:2f:4f:7e:09:01:3f:ef:2b:de:1b:18:f5:
71:55:03:25:d0:9e:d0:fc:93:44:14:95:5d:ee:94:25:21:33:
65:6e:47:c8:45:b2:52:fd:63:16:4f:75:b7:fc:7d:2d:fe:5c:
e0:a7:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:54 2026 by rpki-client