
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json)
Hash identifier: CLRI31zEfVp7ObbL6oz43ag8eU41xF7TFOHZfw6DSeU=
Subject key identifier: 7E:27:BF:0A:30:D6:9B:3E:AD:90:03:3D:1C:BF:7C:EF:13:8A:C5:DB
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial: 06C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
Manifest number: 06B1
Signing time: Sat 04 Apr 2026 22:11:41 +0000
Manifest this update: Sat 04 Apr 2026 22:11:40 +0000
Manifest next update: Sat 11 Apr 2026 22:11:40 +0000
Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: GTJN2v7NcnZRMfT6XOHySriNqhqzyzrNe6IKBE1Baxw=)
2: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: yoloep24o1atFGZiIYVLvf8FRxTCxFgmWJlp5tBVJqE=)
3: 93E364468FC111EFA7695485C4F9AE02.roa (hash: odXs70QtmjQH39+qx/iFdYWwlstVgEGIxhy6jVeMzv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Validity
Not Before: Apr 4 22:11:40 2026 GMT
Not After : Apr 11 22:11:40 2026 GMT
Subject: CN=69d18c9d-e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:51:95:dc:34:f9:25:67:7c:e5:b9:50:a3:
01:4f:ed:18:50:e0:91:43:61:c9:dc:a8:62:71:f2:
b6:a7:b3:ff:56:03:ce:01:3c:69:19:27:64:d2:77:
b9:8a:88:82:04:14:2c:b2:1e:04:17:e6:89:28:48:
b6:0f:7c:f8:55:6e:fd:66:52:e5:64:21:42:f6:8a:
d9:0b:16:1e:8a:4c:d1:60:d0:9e:b0:e2:8f:52:2d:
02:3e:0f:d6:42:25:a7:b7:59:f3:8e:f6:2f:d7:18:
ea:5c:8b:11:6a:77:3a:b7:d2:e5:5b:e1:8c:38:9a:
85:d2:6a:a0:f0:b1:1c:83:82:1d:06:40:c3:82:31:
15:21:6c:06:01:63:13:2b:15:0f:d4:5f:94:14:58:
13:8e:0f:be:1e:87:af:6f:c8:0a:95:15:a6:c4:04:
93:ad:f4:56:ed:5b:9a:ad:b7:20:00:d4:b6:f4:aa:
9c:bb:8f:09:c8:11:49:57:02:22:e5:59:dd:a2:80:
86:52:c5:3b:4a:10:75:54:ae:20:6f:58:3e:67:2e:
38:39:74:68:7e:67:14:35:8d:a5:82:59:f9:dc:80:
73:c6:b7:86:5a:d2:02:57:d7:23:13:d6:2c:18:38:
44:c2:6b:e3:78:31:bd:42:75:cf:ba:84:5f:af:57:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:BF:0A:30:D6:9B:3E:AD:90:03:3D:1C:BF:7C:EF:13:8A:C5:DB
X509v3 Authority Key Identifier:
keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d2:88:4f:47:0b:d7:08:79:8f:a5:05:9a:e4:18:fb:c7:a2:
c1:c7:dc:de:f9:c1:34:42:68:97:8f:89:f7:a0:65:7d:45:b7:
ad:c8:2a:21:5d:38:87:23:c1:70:fd:07:0f:a9:88:cd:a5:98:
71:d7:75:57:f7:47:fd:7b:a1:43:87:d5:e9:9c:e3:72:12:0b:
60:ee:a8:b7:49:8a:64:c7:3b:14:48:d2:91:60:15:a4:35:41:
20:0f:a3:74:1e:71:54:7d:b8:40:57:e6:e7:6f:25:7c:81:09:
be:6f:c2:2e:b5:67:c5:9c:06:c4:cf:c8:af:31:fc:45:04:0e:
8e:e5:bc:75:05:19:2f:ff:b9:91:4e:8b:dc:5c:04:ab:45:12:
e6:aa:e1:6f:6c:1d:6f:b0:ef:cd:19:ec:4a:30:93:44:6a:23:
68:20:45:cb:b0:b3:60:7e:ac:26:20:f0:bc:5c:a7:44:84:25:
ef:07:67:d8:e0:8c:ca:8e:7e:2c:45:7f:36:c8:d3:91:70:7e:
ac:00:cb:a3:94:49:0a:2e:84:04:d8:a3:63:1a:e8:aa:80:6b:
97:d1:6d:8d:c9:16:90:52:89:29:86:df:82:80:ac:31:52:b5:
f0:69:fa:80:a6:f1:11:16:d9:f5:d6:1b:fe:9d:7f:fb:b0:32:
b7:ef:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:56 2026 by rpki-client