
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: pqknyHT7Gll1ISrlb1BTrn1t1RmhI2189cY0rZaTzk4=
Subject key identifier: B0:FB:5E:59:E6:F5:69:45:48:9C:D1:77:E4:91:EF:AF:08:83:00:8A
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 072F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 0724
Signing time: Mon 06 Apr 2026 21:39:28 +0000
Manifest this update: Mon 06 Apr 2026 21:39:28 +0000
Manifest next update: Mon 13 Apr 2026 21:39:28 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: Ybe7wxDkFLoQyOTad0GOinqdzaAuXLucvDOIzDjM0VU=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 21:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Apr 6 21:39:28 2026 GMT
Not After : Apr 13 21:39:28 2026 GMT
Subject: CN=69d42810-f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:23:81:bb:82:86:79:0b:6f:55:5c:d7:a3:
05:e2:91:71:6f:52:15:b5:28:54:4c:01:31:18:c3:
18:0f:3f:1a:3a:29:e7:cd:e0:7b:b3:82:6e:88:ed:
b9:b0:d7:ea:9c:24:5a:5e:7e:be:3e:e8:33:44:fe:
82:1d:af:db:6f:2c:0c:7d:79:af:73:d1:d5:0a:a4:
a8:60:cc:0c:aa:0e:52:6e:af:ed:62:36:41:40:8a:
08:64:33:87:d6:c7:fa:67:bc:31:4c:5e:0b:83:d3:
db:b7:36:ea:64:a1:49:51:3b:b3:a2:33:15:ed:48:
0c:a3:72:81:16:84:38:5a:39:1b:5e:0c:0b:1d:b8:
88:8c:5d:03:3e:e0:c6:9b:c7:57:ec:7e:88:81:77:
8e:5f:59:e4:bc:4e:9b:18:21:3c:26:5b:4e:be:42:
15:ba:2f:b6:84:42:94:67:6e:17:2c:e3:2e:84:67:
69:e9:e9:05:64:d2:2b:ac:de:c5:af:f4:ce:47:c1:
d8:cb:ef:d0:90:4e:a6:ee:ac:64:81:a9:02:9b:6a:
c7:0a:cb:85:6f:66:f9:84:a4:19:3d:67:30:a2:7b:
a2:94:63:23:7d:a7:eb:54:49:72:61:7b:60:3c:bd:
63:74:63:77:b3:09:12:83:d1:12:ce:ed:5a:6a:00:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:5E:59:E6:F5:69:45:48:9C:D1:77:E4:91:EF:AF:08:83:00:8A
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:0d:1b:de:60:99:5d:e7:6a:4e:fa:b3:c5:d4:25:8a:da:
97:ca:4e:64:b7:72:bf:10:0c:82:17:57:11:55:ee:39:20:6e:
e2:f6:99:cf:62:82:b4:80:21:af:0b:dd:32:f6:3e:17:5a:a2:
22:61:ba:e7:f2:63:3c:59:7d:e0:f0:5c:99:5b:82:09:aa:e6:
0c:86:f7:47:72:a5:5f:8a:7e:16:59:0a:07:4e:c7:40:a6:17:
14:79:87:e1:83:15:31:d7:a0:37:98:fc:c2:94:03:ff:f6:0d:
36:bd:d6:f6:2a:d3:66:c4:d7:d5:a5:61:79:82:21:04:93:34:
ba:e3:e3:88:f8:91:01:4d:a5:ad:c4:60:da:4a:b1:3c:fe:34:
69:2d:1c:14:c0:70:d6:09:7b:54:86:3f:af:a6:a4:7f:8b:84:
34:20:77:7d:3c:72:7a:40:3b:de:c1:62:9e:2b:32:43:e5:09:
9b:ec:5e:c9:dc:57:56:8f:9d:76:5f:9b:98:2e:c1:a9:07:d4:
27:29:91:2b:00:c8:fc:4a:c5:f8:59:6e:20:88:e3:69:e8:c4:
a8:7d:18:09:6c:95:1e:d4:d6:91:eb:fa:16:95:c7:c6:dd:fb:
60:ba:8a:de:61:6d:ea:f5:f9:dc:4a:97:7f:a0:5c:48:b7:5f:
d0:73:79:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE
QzMwMTg0RjIwHhcNMjYwNDA2MjEzOTI4WhcNMjYwNDEzMjEzOTI4WjAYMRYwFAYD
VQQDEw02OWQ0MjgxMC1mMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQAjgbuChnkLb1Vc16MF4pFxb1IVtShUTAExGMMYDz8aOinnzeB7s4JuiO25
sNfqnCRaXn6+PugzRP6CHa/bbywMfXmvc9HVCqSoYMwMqg5Sbq/tYjZBQIoIZDOH
1sf6Z7wxTF4Lg9PbtzbqZKFJUTuzojMV7UgMo3KBFoQ4WjkbXgwLHbiIjF0DPuDG
m8dX7H6IgXeOX1nkvE6bGCE8JltOvkIVui+2hEKUZ24XLOMuhGdp6ekFZNIrrN7F
r/TOR8HYy+/QkE6m7qxkgakCm2rHCsuFb2b5hKQZPWcwonuilGMjfafrVElyYXtg
PL1jdGN3swkSg9ESzu1aagB7GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD7Xlnm
9WlFSJzRd+SR768IgwCKMB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD
Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzFDRS82QjA1NjA3QTdDQ0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5
RjZGZDJyaDBmRG5jTUJoUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUAoNG95gmV3nak76s8XUJYral8pOZLdyvxAMghdXEVXuOSBu4vaZz2KCtIAh
rwvdMvY+F1qiImG65/JjPFl94PBcmVuCCarmDIb3R3KlX4p+FlkKB07HQKYXFHmH
4YMVMdegN5j8wpQD//YNNr3W9irTZsTX1aVheYIhBJM0uuPjiPiRAU2lrcRg2kqx
PP40aS0cFMBw1gl7VIY/r6akf4uENCB3fTxyekA73sFinisyQ+UJm+xeydxXVo+d
dl+bmC7BqQfUJymRKwDI/ErF+FluIIjjaejEqH0YCWyVHtTWkev6FpXHxt37YLqK
3mFt6vX53EqXf6BcSLdf0HN5ng==
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:44 2026 by rpki-client