
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json)
Hash identifier: zbdztWCyWaLcazzvUbA1PcIU1eF9QtwKN+1/zZw07N8=
Subject key identifier: BA:3D:BC:DA:56:F3:B5:DE:89:82:56:64:DA:6A:14:57:E9:D2:9A:2E
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
Manifest number: 012D
Signing time: Sun 05 Apr 2026 05:17:37 +0000
Manifest this update: Sun 05 Apr 2026 05:17:36 +0000
Manifest next update: Sun 12 Apr 2026 05:17:36 +0000
Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: XRr7BrVa3+3adLySSz1+vvTUUs9ibyNrAp/1nEA90Z4=)
2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=)
3: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=)
4: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=)
5: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=)
6: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=)
7: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Apr 5 05:17:36 2026 GMT
Not After : Apr 12 05:17:36 2026 GMT
Subject: CN=69d1f071-53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:4c:30:75:a8:b0:3a:be:96:af:3c:02:c5:
82:50:78:e9:1a:2d:68:48:68:fb:01:a2:20:26:7c:
da:12:05:32:cc:eb:04:00:03:b1:91:3f:21:4b:e6:
56:31:1f:58:62:54:22:d1:a0:b8:44:e5:13:53:99:
94:61:5d:e5:47:5a:e4:c9:8a:d9:3b:d9:16:48:bf:
15:c9:e4:2e:f6:4b:3b:cf:c0:ee:04:df:df:a1:c0:
b7:97:be:eb:00:63:d9:1c:0e:1e:96:b6:c5:51:a8:
bf:a4:c1:1a:4e:17:b4:75:1f:ff:98:cf:13:a8:48:
f2:c8:82:82:0b:0b:73:a3:13:15:9e:42:b7:31:6a:
28:6c:3a:c9:03:cd:bd:0c:f4:79:64:85:5f:9d:85:
d3:7f:da:7c:e7:4c:2d:58:9f:56:06:1d:87:93:21:
1c:a2:7f:38:5c:4b:b8:51:80:88:06:46:80:5f:e9:
14:5a:36:6f:55:01:20:c7:3b:dc:b8:2c:2c:07:20:
b5:12:48:58:75:66:48:87:12:64:f8:06:3e:46:4f:
33:6a:43:82:71:91:de:d3:09:7a:aa:aa:88:14:26:
2b:2f:0d:f6:18:e4:bb:a8:4c:35:b5:01:f0:6f:69:
96:40:59:be:95:8f:12:1d:94:a7:77:6b:a1:a7:27:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:BC:DA:56:F3:B5:DE:89:82:56:64:DA:6A:14:57:E9:D2:9A:2E
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:84:91:23:ff:4c:4b:14:d7:bd:42:99:90:20:01:1e:e5:
7e:90:b8:6a:f1:fc:a2:1f:6a:55:a6:41:76:ff:22:cd:e6:35:
fa:d4:15:0a:4a:e3:49:99:03:71:cc:17:5d:0e:f3:be:0f:29:
0b:8e:c6:d3:d9:34:74:f6:2a:e6:8d:6f:b1:15:f0:64:76:3a:
e9:85:91:34:17:4f:b3:84:0c:9e:39:2e:d4:ff:99:75:50:13:
07:11:21:65:00:4e:59:f4:3f:27:d3:4f:53:5a:75:a4:16:ce:
70:fe:f9:f8:18:01:c1:6d:a2:98:1b:12:fc:64:8d:e1:59:47:
28:d9:81:d4:70:a1:62:fd:ce:de:8b:b0:54:f6:09:12:5e:f5:
a5:d5:a1:ca:48:53:49:6e:d8:95:b3:cb:1e:86:fa:72:a5:bb:
9a:38:c2:51:8f:c9:60:5e:a7:19:74:b4:c6:9b:34:01:09:05:
34:84:d8:10:7c:db:1e:d3:46:96:ef:62:70:60:54:1c:d9:56:
fd:af:ce:5f:ce:8d:aa:91:2a:05:c0:fc:ba:d9:a6:62:b1:e6:
07:d6:29:ce:16:05:a2:49:3a:af:88:e7:d9:9a:f9:85:55:07:
63:ee:85:48:08:f8:86:bc:72:bd:d5:98:e8:d3:c1:a0:19:b1:
8f:f6:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:04 2026 by rpki-client