
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier: 2FH++LWmV8Yzd60lwtmDqEz4V0CzcZB5FytHWEN+c7s=
Subject key identifier: F4:5F:DE:AD:CE:53:2C:EE:B7:9E:BD:46:5A:FB:8B:3E:3A:9E:AB:34
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number: 9F
Signing time: Sun 05 Apr 2026 06:43:04 +0000
Manifest this update: Sun 05 Apr 2026 06:43:04 +0000
Manifest next update: Sun 12 Apr 2026 06:43:04 +0000
Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: 9thhCnDPyq6c8YxDQDsNLyVyoF/a5F8QVWnIU0XN/zs=)
2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Validity
Not Before: Apr 5 06:43:04 2026 GMT
Not After : Apr 12 06:43:04 2026 GMT
Subject: CN=69d20478-9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:4e:d0:17:5d:40:84:ae:43:32:41:20:35:
78:46:e8:d5:a9:11:32:8c:a7:17:00:ec:c8:db:98:
93:5a:ef:62:9d:4d:87:b3:cc:3f:3e:9c:d2:9e:38:
ae:02:e6:47:46:db:3e:3b:a1:d8:3a:dc:6e:24:76:
42:d6:ab:df:26:c4:27:d8:8b:46:e1:28:2a:11:8c:
c1:50:f3:7a:7e:ec:5c:ad:91:fb:08:9e:71:8f:83:
bd:7c:9d:2f:05:e1:e0:11:4d:7c:6f:e5:6b:49:6b:
88:a1:b7:fa:67:89:d6:be:2a:0d:5e:71:76:94:7d:
95:f5:27:ec:d4:26:cd:da:e8:b3:7b:1e:c9:04:a7:
c7:04:c1:19:15:c5:0f:1f:69:eb:00:3d:21:fd:4c:
98:58:1a:b5:97:f6:ab:23:4a:ad:f5:f5:18:61:56:
26:10:b4:1c:c6:27:30:73:f4:e6:f5:16:e4:8f:04:
01:6a:b2:f0:46:94:22:6c:d1:30:e2:52:d2:98:5b:
99:3c:86:0b:b0:a1:d0:0a:c2:67:36:ca:ec:c2:e6:
1d:b7:f0:35:00:6b:3d:b5:77:df:8e:8f:e1:8b:43:
ca:29:7f:e1:ab:77:66:f1:69:9b:72:e7:f2:f5:43:
08:ae:22:e8:50:a6:54:45:d0:d5:5a:61:9a:ca:d7:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:DE:AD:CE:53:2C:EE:B7:9E:BD:46:5A:FB:8B:3E:3A:9E:AB:34
X509v3 Authority Key Identifier:
keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f0:2e:2e:d3:9c:89:6d:e4:22:01:a0:f8:93:23:88:84:f4:
33:dc:59:6b:5a:81:06:5c:77:92:54:b1:0e:d3:75:8c:3e:cb:
74:80:65:1e:92:15:68:57:90:93:fb:33:46:7a:6b:73:bb:e7:
98:68:01:92:e4:a0:f2:90:88:c8:b9:4b:bf:0e:cb:37:0b:76:
ad:79:29:66:fa:f6:6f:55:f5:c6:3d:6c:4d:00:ab:b4:73:a1:
b5:86:7c:a3:f3:7d:ab:1b:8f:fa:ac:62:5a:b1:8e:ff:ce:58:
75:be:e3:15:fb:a4:1b:ae:e7:31:00:c1:70:e3:ba:8c:7b:71:
4e:79:6a:0a:66:bd:ab:97:7d:9f:59:00:bd:c1:22:74:5c:4b:
93:49:c8:d4:37:33:27:22:0e:75:2d:ea:a3:14:50:4c:55:ff:
07:49:1d:95:17:48:67:15:e2:84:6f:ec:aa:37:7e:fb:ac:ee:
91:f1:c1:73:3e:57:4a:95:83:20:21:0a:eb:8b:0e:ea:16:21:
98:a8:bb:02:ca:32:01:c1:01:f2:ac:79:80:04:a2:7a:9a:1d:
56:14:cd:e9:14:c2:76:77:e9:6a:7d:da:83:a5:d1:51:c9:06:
c4:27:3b:4f:7e:ee:60:03:5c:8e:64:f2:e5:5d:f7:47:9a:0b:
e4:23:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:44 2026 by rpki-client