
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier: OIcxBZdO2nbtGarbBWDPhnh+guzk2HtDDNRp822EMlY=
Subject key identifier: 2A:8D:5A:37:0F:2D:AC:DA:C9:04:77:37:69:3F:A1:36:BB:CA:78:B8
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number: 0231
Signing time: Thu 21 May 2026 02:42:01 +0000
Manifest this update: Thu 21 May 2026 02:42:01 +0000
Manifest next update: Thu 28 May 2026 02:42:01 +0000
Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: JQM9fIePSyTiVcpcKscvf/xmEko8H9fEVV3HPqLtHbM=)
2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: 9E0ybMJC/4hTirDP7PsTEfHbwzsW24pJ3Ey1HCuEb6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Validity
Not Before: May 21 02:42:01 2026 GMT
Not After : May 28 02:42:01 2026 GMT
Subject: CN=6a0e70f9-01b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:49:f6:ba:11:61:0d:e8:1c:73:6b:9e:ff:
a3:cf:b8:c3:47:e4:3a:30:0d:3d:61:6b:de:d8:f1:
7a:43:a5:01:60:11:97:98:2a:0a:df:0b:0d:31:ab:
56:3a:5b:79:26:72:0e:b8:77:79:64:cd:cb:8b:a5:
c0:36:1a:5d:c8:7f:ba:3e:6d:81:57:ab:0b:2b:a1:
f1:68:76:6d:3e:09:ab:43:1a:67:1f:e0:99:08:02:
32:4d:f5:48:e6:3b:95:58:c7:4e:7e:e4:fa:d8:10:
00:c3:05:d4:4d:48:f6:8d:f6:7a:3e:8e:bc:af:f0:
57:e9:8f:ab:44:2e:de:76:b2:48:ef:cd:e6:86:95:
78:26:64:99:03:8e:b7:4a:54:25:7f:94:41:28:db:
ac:cb:52:37:b8:26:45:b8:78:cb:e2:ea:74:84:39:
6c:79:02:06:f8:79:41:5a:90:16:c1:86:31:91:a5:
cb:5b:6a:36:6f:82:20:d7:f0:35:d0:bc:6e:47:fd:
22:5c:4d:54:c4:20:73:e0:ca:42:44:95:90:86:96:
2a:53:73:ad:92:8c:c9:89:94:42:b7:1a:c0:73:c4:
83:fe:c2:87:d4:39:b4:a0:d8:fb:1b:95:37:86:06:
cb:0e:df:3e:1b:e4:bc:0c:60:2d:74:00:4e:1d:8c:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:5A:37:0F:2D:AC:DA:C9:04:77:37:69:3F:A1:36:BB:CA:78:B8
X509v3 Authority Key Identifier:
keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:11:60:fe:6c:27:e0:c4:27:5a:9b:56:30:ba:30:56:b4:
92:f4:50:e6:e7:c8:4e:84:18:98:74:d9:ac:26:4a:c2:c1:90:
40:f2:59:c2:fe:81:d2:c3:44:7b:26:2d:72:67:70:f0:4e:48:
c1:b8:15:90:d7:c8:1c:83:87:e9:97:91:66:e9:6c:be:eb:db:
0c:c1:d7:88:aa:08:eb:2f:b0:36:8b:f8:82:d0:0a:b1:1a:75:
40:9a:e6:b0:0f:86:da:b5:b8:db:be:c6:fe:af:15:4f:2d:27:
98:a6:be:f5:66:78:2c:e7:0f:af:d1:50:8f:09:5e:76:f2:ef:
af:f2:07:0e:c0:64:f9:de:f8:43:c6:70:25:e6:b1:1c:5c:d2:
04:0a:c1:17:a5:5c:b7:14:d4:43:0f:b8:ed:51:b8:72:4f:da:
a5:3f:c2:df:47:cb:0f:ce:2d:c1:a9:36:12:f4:f7:30:b5:de:
99:66:91:ff:d3:e6:9d:75:64:0a:c5:e6:52:48:cb:6f:5c:ba:
41:59:10:27:bc:28:1f:8b:b6:91:d2:08:5e:d5:24:03:68:4d:
a7:05:39:e7:65:42:f9:4a:dd:b1:8a:62:86:78:4c:e2:e7:c3:
1f:e6:4b:fc:1b:d3:ee:ff:dd:a7:73:98:01:8f:e4:78:7c:ef:
9d:b1:07:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My
Q0E1NDU0NUEwHhcNMjYwNTIxMDI0MjAxWhcNMjYwNTI4MDI0MjAxWjAYMRYwFAYD
VQQDEw02YTBlNzBmOS0wMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0aZJ9roRYQ3oHHNrnv+jz7jDR+Q6MA09YWve2PF6Q6UBYBGXmCoK3wsNMatW
Olt5JnIOuHd5ZM3Li6XANhpdyH+6Pm2BV6sLK6HxaHZtPgmrQxpnH+CZCAIyTfVI
5juVWMdOfuT62BAAwwXUTUj2jfZ6Po68r/BX6Y+rRC7edrJI783mhpV4JmSZA463
SlQlf5RBKNusy1I3uCZFuHjL4up0hDlseQIG+HlBWpAWwYYxkaXLW2o2b4Ig1/A1
0LxuR/0iXE1UxCBz4MpCRJWQhpYqU3OtkozJiZRCtxrAc8SD/sKH1Dm0oNj7G5U3
hgbLDt8+G+S8DGAtdABOHYywhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqNWjcP
LazayQR3N2k/oTa7yni4MB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx
MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ
RFJWeFEzemZDOHdzcFVWRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm7ERYP5sJ+DEJ1qbVjC6MFa0kvRQ5ufIToQYmHTZrCZKwsGQQPJZwv6B0sNE
eyYtcmdw8E5IwbgVkNfIHIOH6ZeRZulsvuvbDMHXiKoI6y+wNov4gtAKsRp1QJrm
sA+G2rW4277G/q8VTy0nmKa+9WZ4LOcPr9FQjwledvLvr/IHDsBk+d74Q8ZwJeax
HFzSBArBF6VctxTUQw+47VG4ck/apT/C30fLD84twak2EvT3MLXemWaR/9PmnXVk
CsXmUkjLb1y6QVkQJ7woH4u2kdIIXtUkA2hNpwU552VC+UrdsYpihnhM4ufDH+ZL
/BvT7v/dp3OYAY/keHzvnbEHWA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:09 2026 by rpki-client