
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json)
Hash identifier: t2VvPjZ0uq5NVogw0c5Njlf+J5ROcHA/ad5yEt+ojNg=
Subject key identifier: EE:26:68:B1:2B:F3:1F:C7:28:CD:F9:C9:DC:BB:AD:8B:78:D0:38:E9
Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Certificate serial: 355F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
Manifest number: 353F
Signing time: Sat 04 Apr 2026 15:12:50 +0000
Manifest this update: Sat 04 Apr 2026 15:12:49 +0000
Manifest next update: Sat 11 Apr 2026 15:12:49 +0000
Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: eq2AnafNi/cC3yGa7O7EcSrSMmv7wKtl2WPeklM/2MM=)
2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: UymEhDbFwl3qCyCqScVFcdAOyk6J7jfC5aOKZBd8Zmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Validity
Not Before: Apr 4 15:12:49 2026 GMT
Not After : Apr 11 15:12:49 2026 GMT
Subject: CN=69d12a72-1e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:89:eb:90:5f:5d:17:b1:82:cf:60:eb:39:
91:2d:a8:ca:5b:73:66:cd:48:05:47:87:e1:6b:7c:
20:c1:ba:07:48:e1:36:54:6d:b4:ca:4e:be:c8:e0:
c3:b7:27:84:41:5a:cb:f7:08:1b:16:71:97:d2:c7:
f3:70:e1:e6:c7:70:9e:07:a6:3b:f3:9f:0f:b0:7f:
74:3d:02:78:71:38:f6:f0:72:b3:92:87:80:12:63:
d5:d0:30:6a:ed:16:69:95:66:ba:c5:34:5c:d3:5f:
37:77:3e:9c:0b:03:a3:9c:ae:a7:3b:bc:1b:cd:e4:
86:ee:26:fb:52:8a:c2:0e:08:1a:cb:f1:32:b1:25:
e4:97:3f:fd:89:88:02:c8:e2:83:db:a1:bc:a3:c0:
07:4c:36:7f:a8:0d:16:b8:f8:24:db:e7:8f:b4:20:
6b:7b:f5:39:ba:74:a6:f0:11:9e:c7:49:43:d2:36:
ce:e0:be:17:de:87:a7:bf:d3:50:b8:8b:2a:b4:09:
58:16:3b:5f:2b:ba:da:18:f7:c1:0e:6a:8a:4d:d2:
ce:b7:bd:39:d4:5f:ba:cb:dd:91:fa:83:c7:3b:c1:
9f:e9:72:c5:07:8f:21:d0:72:87:2b:8c:ed:eb:e9:
a9:01:f0:5a:af:c8:e6:af:d8:8c:83:af:d4:73:43:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:68:B1:2B:F3:1F:C7:28:CD:F9:C9:DC:BB:AD:8B:78:D0:38:E9
X509v3 Authority Key Identifier:
keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:8e:e2:10:87:ec:5e:b3:a9:d0:32:17:9e:6e:4c:bb:37:
ed:31:7c:67:5f:e9:52:f9:f9:15:c3:3a:cc:31:b0:05:e0:45:
aa:95:f3:af:26:e5:56:fa:b1:c6:9a:d4:f0:17:8b:46:40:a4:
27:92:95:9e:d1:e9:bb:84:9b:19:80:c7:35:05:91:64:bd:98:
15:3f:a4:73:79:83:8d:87:29:3e:ab:6b:40:f8:dd:5c:9d:1c:
53:e5:62:44:03:17:55:d6:b1:45:25:ad:ff:98:84:b4:f3:28:
8d:c1:2d:4b:8b:19:fe:ad:bc:9f:6e:7e:0f:e0:0f:03:3c:01:
9b:41:60:27:67:48:a1:a8:e8:db:47:6c:f7:b8:60:a6:b7:70:
96:32:3c:7e:e3:ef:fa:91:46:3f:96:fa:46:39:ca:b9:17:1d:
77:ee:24:3c:1f:45:cf:75:a5:44:81:3b:51:4d:89:d0:db:0b:
01:b1:c3:46:d9:79:8a:85:a0:50:98:64:46:63:62:b0:58:00:
f4:33:90:1a:96:09:7c:99:03:95:8a:e3:0d:53:dd:21:b4:f1:
73:57:29:be:e0:e2:77:c0:81:4c:bb:27:1f:8b:01:bd:29:c7:
e0:f5:76:8f:e6:08:1c:be:d0:02:19:a4:98:18:41:a8:6c:d6:
7a:ba:3d:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE
QjBCNEUwODYwHhcNMjYwNDA0MTUxMjQ5WhcNMjYwNDExMTUxMjQ5WjAYMRYwFAYD
VQQDEw02OWQxMmE3Mi0xZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZ+J65BfXRexgs9g6zmRLajKW3NmzUgFR4fha3wgwboHSOE2VG20yk6+yODD
tyeEQVrL9wgbFnGX0sfzcOHmx3CeB6Y7858PsH90PQJ4cTj28HKzkoeAEmPV0DBq
7RZplWa6xTRc0183dz6cCwOjnK6nO7wbzeSG7ib7UorCDggay/EysSXklz/9iYgC
yOKD26G8o8AHTDZ/qA0WuPgk2+ePtCBre/U5unSm8BGex0lD0jbO4L4X3oenv9NQ
uIsqtAlYFjtfK7raGPfBDmqKTdLOt7051F+6y92R+oPHO8Gf6XLFB48h0HKHK4zt
6+mpAfBar8jmr9iMg6/Uc0MQlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4maLEr
8x/HKM35ydy7rYt40DjpMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE
QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw
bXJCQUJrUWpxX1RiQzA0SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKp2O4hCH7F6zqdAyF55uTLs37TF8Z1/pUvn5FcM6zDGwBeBFqpXzryblVvqx
xprU8BeLRkCkJ5KVntHpu4SbGYDHNQWRZL2YFT+kc3mDjYcpPqtrQPjdXJ0cU+Vi
RAMXVdaxRSWt/5iEtPMojcEtS4sZ/q28n25+D+APAzwBm0FgJ2dIoajo20ds97hg
prdwljI8fuPv+pFGP5b6RjnKuRcdd+4kPB9Fz3WlRIE7UU2J0NsLAbHDRtl5ioWg
UJhkRmNisFgA9DOQGpYJfJkDlYrjDVPdIbTxc1cpvuDid8CBTLsnH4sBvSnH4PV2
j+YIHL7QAhmkmBhBqGzWero97w==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:03 2026 by rpki-client