
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier: Qta6R639j2NHLxh22CXNCjJFAx986YPBxRgaTxUFQc8=
Subject key identifier: 12:6A:85:24:D4:A4:34:15:B2:AD:DB:8B:80:03:36:E9:ED:F1:9A:42
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial: 3525
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number: 3525
Signing time: Sat 04 Apr 2026 14:52:44 +0000
Manifest this update: Sat 04 Apr 2026 14:52:43 +0000
Manifest next update: Sat 11 Apr 2026 14:52:43 +0000
Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: nPcdml+T5OMyApKBsFfs+KaIIUO7md0USqwHdQo1Xhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13605 (0x3525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Validity
Not Before: Apr 4 14:52:43 2026 GMT
Not After : Apr 11 14:52:43 2026 GMT
Subject: CN=69d125bc-8736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:9c:bc:e7:ff:49:a8:67:65:97:d2:11:bf:
db:f9:71:33:bb:f7:1e:24:56:5a:f8:e7:d9:6c:b5:
c5:59:37:30:2c:06:48:cb:48:10:f8:bc:65:4b:29:
50:74:f2:b5:ab:4f:80:d7:75:42:3a:78:b0:f9:e1:
eb:37:97:c4:9b:05:46:19:40:e5:6c:73:54:76:7c:
b1:e8:99:21:30:f4:64:c6:f0:22:7e:fd:b7:4a:3b:
9b:8f:98:d0:02:e0:d2:c5:31:79:0e:a6:b9:98:4f:
c5:0e:c4:aa:bb:ef:b1:ba:df:4b:88:3c:dc:b1:e0:
fb:b3:e5:10:a0:a6:bb:f2:27:2e:31:ae:04:4f:4e:
29:4a:87:ab:8e:36:6d:a5:07:c1:39:2d:9f:cd:e5:
85:13:fe:b4:41:75:20:5d:05:5f:85:23:28:11:fd:
ee:ab:eb:c0:94:6e:67:33:92:7a:69:6f:c8:4a:6c:
2f:c5:d8:dd:92:93:ee:5c:cf:b6:50:5d:f8:87:2b:
73:eb:05:50:0f:59:47:c1:7c:10:36:5b:1a:4b:b3:
3d:49:c3:5b:9a:c9:f8:73:1b:e8:cc:0d:1c:79:d4:
03:e1:1d:e8:e2:aa:ac:f2:53:8c:a5:48:e9:2f:ac:
45:a2:34:b4:79:d3:a0:20:a5:fa:ee:7d:8e:4f:ee:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6A:85:24:D4:A4:34:15:B2:AD:DB:8B:80:03:36:E9:ED:F1:9A:42
X509v3 Authority Key Identifier:
keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:28:2a:4a:83:87:30:86:f8:d8:7e:ad:54:bb:a8:e9:d2:
24:ff:bc:51:a4:fb:a1:bb:80:2e:99:d1:f8:52:06:79:a8:c4:
0f:0d:95:e5:10:64:61:5a:dd:86:82:a1:2b:47:88:d2:1f:39:
ea:05:b0:b5:d6:35:60:57:7a:ef:c3:c6:b4:59:cb:a6:c1:14:
11:35:82:a5:49:7d:65:5c:0c:e4:8b:f4:fd:e1:a9:97:46:19:
26:1f:8e:92:7e:93:ce:ef:a3:ee:f4:00:83:e9:06:a9:9c:30:
f8:e0:02:c6:a9:22:63:2d:df:99:5c:98:b8:eb:05:d9:63:9d:
b3:0d:21:f4:24:60:21:f8:c7:83:4b:f1:9c:40:eb:29:3e:2c:
08:70:bb:23:42:1b:af:f3:9b:3c:fd:a4:a1:a8:03:26:9f:5e:
28:8d:39:5c:05:9f:c1:6d:21:d9:0d:7f:a8:9a:6e:cf:68:a7:
e2:61:36:46:48:91:33:37:10:ae:6d:4b:c2:7e:3f:8b:e5:2a:
00:bd:ca:3f:58:31:99:7b:48:92:0f:48:37:d7:b2:91:6e:8a:
fb:58:06:50:b8:e3:eb:bf:e6:67:be:3b:6c:a1:19:ee:cc:6f:
f6:52:d2:e1:cc:63:0b:5c:1d:98:f7:fd:cf:5c:34:a4:bc:1c:
a1:87:fe:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE
MUU5N0RFMkUwHhcNMjYwNDA0MTQ1MjQzWhcNMjYwNDExMTQ1MjQzWjAYMRYwFAYD
VQQDEw02OWQxMjViYy04NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCicvOf/SahnZZfSEb/b+XEzu/ceJFZa+OfZbLXFWTcwLAZIy0gQ+LxlSylQ
dPK1q0+A13VCOniw+eHrN5fEmwVGGUDlbHNUdnyx6JkhMPRkxvAifv23Sjubj5jQ
AuDSxTF5Dqa5mE/FDsSqu++xut9LiDzcseD7s+UQoKa78icuMa4ET04pSoerjjZt
pQfBOS2fzeWFE/60QXUgXQVfhSMoEf3uq+vAlG5nM5J6aW/ISmwvxdjdkpPuXM+2
UF34hytz6wVQD1lHwXwQNlsaS7M9ScNbmsn4cxvozA0cedQD4R3o4qqs8lOMpUjp
L6xFojS0edOgIKX67n2OT+6ikwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJqhSTU
pDQVsq3bi4ADNunt8ZpCMB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE
OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96
VDFlWmdxTVhtMjNSNlgzaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi+goKkqDhzCG+Nh+rVS7qOnSJP+8UaT7obuALpnR+FIGeajEDw2V5RBkYVrd
hoKhK0eI0h856gWwtdY1YFd678PGtFnLpsEUETWCpUl9ZVwM5Iv0/eGpl0YZJh+O
kn6Tzu+j7vQAg+kGqZww+OACxqkiYy3fmVyYuOsF2WOdsw0h9CRgIfjHg0vxnEDr
KT4sCHC7I0Ibr/ObPP2koagDJp9eKI05XAWfwW0h2Q1/qJpuz2in4mE2RkiRMzcQ
rm1Lwn4/i+UqAL3KP1gxmXtIkg9IN9eykW6K+1gGULjj67/mZ747bKEZ7sxv9lLS
4cxjC1wdmPf9z1w0pLwcoYf+Dg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:50 2026 by rpki-client