
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier: a95N5TJwZWZP0P07G7gaA7YXTxiJH28GSvxkWnazzec=
Subject key identifier: 11:1D:2F:80:55:CA:21:68:9B:87:66:A7:B5:6B:75:51:89:DB:59:48
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 0546
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number: 04BB
Signing time: Wed 29 Apr 2026 00:39:06 +0000
Manifest this update: Wed 29 Apr 2026 00:39:05 +0000
Manifest next update: Wed 06 May 2026 00:39:05 +0000
Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: SZAfOEUxHCxHCgGBXlpE9kunBpnPxd4W8HWVTp5nEp0=)
2: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: Wm1/eKkjwSdENyF9XhaIgMMIMyZWJ8FdprbIASCO2bc=)
3: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: 1yc+Fti6INTStmk0z+PF6B3gBIJd9xdIKHjdncMI12M=)
4: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: 63cio2MUFm7vWLjvaTxI8FgoeyjASbbb5Aorm9U3n2I=)
5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: ojYiriadBdeJ4BH7NXIPyFN9GoN0YxbKy4QT6N+XslQ=)
6: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: X9aul/hRgPk68N6AmoCtSGzTWlW5UtIGtVxtQ1hm0tU=)
7: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: hi3WlnCuIsVxYwmdTuFYuyRcQz4FIsMaP/7U8XUNfSM=)
8: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: AOZmmYeLnSI49490eoUMSsnulhK+wQ7Ylskf13YZSuA=)
9: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: zdcdiMbBZ6fnqhqtsh4JjSi3qiy0wngzFd6cDMXw3Q4=)
10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: jXGTnw/tsqcAu91xGU6v2HfXtRdayM9lNp5kbKAgr+4=)
11: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: jFHb2Xi2Zj1iFLL1Si72692s8uXbi8VyaCZ+u1E3ggk=)
12: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: yGbuX7djLfgfGdTsOwwr5o9SRyhKavrZbjHv3qaR1NU=)
13: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 5ei1Pf2BFe+GGZMzUH0jNMbQdUw4QmZ26uLjm4CIyKk=)
14: F563D916248D11EF93237035C4F9AE02.roa (hash: hBH+sTV1EiMubSY3WwYm2Uh2qOcd3e+lc/yMbXN25cs=)
15: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: mV2Ali2A9Nwpmh5pLmGmrns//aSQ4eK5cx9Smgvt4so=)
16: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: Vg+3UEU28kUVBfAjWiElgD4QvPYtjgOIKdHI6i8KBtw=)
17: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: Yhm1YFhiIa7R+q38Dt/6clsm6VHP6vg6ootMhjnocfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 00:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Apr 29 00:39:05 2026 GMT
Not After : May 6 00:39:05 2026 GMT
Subject: CN=69f1532a-68ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:0d:4a:14:93:4e:51:1e:65:1a:fe:60:3c:
82:bb:e5:5c:c6:f1:8e:0e:67:7e:a0:11:c5:9a:e0:
a8:53:7c:04:a1:63:5a:d2:ab:be:54:70:46:6f:18:
34:71:5e:93:ad:5c:63:50:f3:96:97:d9:b4:47:28:
d4:31:2a:a9:ed:46:cb:73:e7:3b:be:35:56:80:4e:
b2:67:26:f5:0a:99:62:26:15:1d:a2:1e:a9:3a:19:
e0:8a:9c:94:50:18:1b:37:f7:fd:27:7d:ff:bf:4f:
ce:5c:66:04:73:ad:b1:ce:69:ac:ef:49:63:51:7f:
2c:c4:0a:8a:4f:9e:9e:a0:4c:99:16:15:cc:5a:c2:
09:c1:d7:2c:ed:9e:51:6b:3a:81:9c:8d:d8:0b:38:
f9:17:a2:13:94:49:d6:ef:e0:53:f8:84:32:0d:6e:
e3:6a:e5:36:6d:3d:89:e0:c9:9e:64:15:e0:07:61:
03:d3:b4:8a:57:0f:c3:66:9d:fa:d1:b7:d1:15:0b:
b7:59:e4:a6:a6:bc:ad:63:5c:48:3c:b9:40:89:7d:
0c:44:bc:76:78:a7:2e:64:4e:ce:cc:28:5f:f8:c2:
09:69:3d:26:9c:1a:b3:b2:f3:96:34:36:a1:cb:82:
9d:a2:db:c6:5a:33:64:48:0d:6a:2b:24:66:81:46:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:2F:80:55:CA:21:68:9B:87:66:A7:B5:6B:75:51:89:DB:59:48
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:37:a0:33:a9:bc:7c:ad:c6:89:e3:38:24:6c:4d:60:8e:26:
d7:43:63:cb:07:ea:6c:f3:f3:c2:db:8f:be:b7:f4:87:d7:35:
9b:48:9e:91:65:c2:2c:2f:c8:95:0a:62:2e:ac:7a:41:f2:17:
eb:c1:cc:c7:3f:ef:e7:2d:78:a0:af:26:22:e4:a7:f5:01:b2:
ad:37:6e:e5:a8:09:83:17:95:99:36:3a:d6:18:be:78:0a:7d:
b7:9d:79:55:cb:7e:02:0e:61:8b:48:8f:a9:95:49:2c:ce:19:
66:60:c2:13:3a:1b:3e:f1:cd:46:11:2b:a5:a9:4b:b8:58:01:
17:e7:fc:15:c5:57:67:3f:89:a8:1d:e7:79:ae:b5:60:78:6f:
ec:e7:a1:d0:5b:20:8c:0d:f8:ee:c7:7e:6d:99:49:da:17:d7:
7c:c5:b6:c3:38:47:0c:4b:a4:8a:32:5f:a0:03:db:81:4b:8b:
04:39:ae:2e:b3:ea:c7:5a:24:b7:9e:e8:44:02:db:34:75:e8:
29:3e:3b:0d:06:82:ce:b9:20:bd:2c:72:98:ee:1b:3e:9d:d1:
e8:0e:79:7d:53:18:58:47:71:33:51:82:60:86:50:6b:ff:06:
ae:7f:f1:ac:9e:24:eb:ca:68:38:98:58:14:72:f2:43:77:8e:
80:62:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 09:11:02 2026 by rpki-client