
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File: jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier: sxhbDa1vbPaX6FZ6a26ErlYPEyTDxVaumfbCKCfjO/w=
Subject key identifier: 87:FA:CE:D4:F6:D4:2E:22:3A:3A:1E:0F:9A:EC:19:32:46:C7:FC:B2
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number: FE
Signing time: Sun 05 Apr 2026 05:43:17 +0000
Manifest this update: Sun 05 Apr 2026 05:43:16 +0000
Manifest next update: Sun 12 Apr 2026 05:43:16 +0000
Files and hashes: 1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: S/QxcvgliTdA3AH+AbnhkyNxzgqXYsWSmr0negSMfR8=)
2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: PrWTL5usD2G+p37NAOHzpvbn2FCtmNcY07TLdtnld18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Validity
Not Before: Apr 5 05:43:16 2026 GMT
Not After : Apr 12 05:43:16 2026 GMT
Subject: CN=69d1f675-da42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:e5:40:c6:59:aa:76:45:ee:95:7c:66:7b:
6d:06:7a:95:65:6f:59:ab:51:bf:0b:44:f0:09:54:
18:dc:05:53:b6:c1:0e:7d:77:ff:41:db:6d:7e:43:
be:83:18:b2:88:34:51:c7:f5:27:af:c0:4b:81:b0:
2c:d9:e6:be:4c:1c:7d:62:52:32:f9:b0:00:97:af:
b1:71:05:e6:b2:f1:26:c7:9c:26:2d:47:fa:5a:74:
2d:21:fa:1b:17:1a:35:86:18:74:3f:27:ea:1b:49:
00:0c:d1:a9:60:63:7a:13:a7:c2:78:d9:ce:f0:54:
d5:ee:e7:47:e4:b8:fd:92:ce:bb:27:b7:ef:6f:e1:
7f:bd:a9:2b:40:13:72:8b:93:4b:e5:14:74:fa:ff:
d2:52:26:bd:e6:9a:c5:68:a0:59:fd:c8:34:9d:92:
3b:5a:66:9d:6b:a8:22:a2:07:25:f3:d8:1e:90:9e:
56:97:42:1b:88:a1:6f:7e:9e:ff:5e:a1:8b:15:18:
7c:2b:cd:a7:5b:03:d1:21:63:0c:bf:3b:06:26:ff:
40:8c:29:0a:73:3b:3e:a4:6f:88:ed:8f:08:42:3f:
1b:ac:b5:db:9c:7e:7a:c1:73:d0:fa:02:fe:84:2b:
9f:f1:d7:74:23:61:8a:1d:97:4f:3e:51:18:d9:21:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:CE:D4:F6:D4:2E:22:3A:3A:1E:0F:9A:EC:19:32:46:C7:FC:B2
X509v3 Authority Key Identifier:
keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:1b:db:6e:28:95:03:a7:88:4d:e7:02:d5:c1:83:bc:81:
3b:b0:69:53:7c:b5:84:a6:69:fb:3d:34:f8:05:63:3c:fa:56:
a0:57:e4:4e:ca:62:32:26:52:3e:cf:b9:27:45:5c:01:39:aa:
bb:07:26:d0:42:e3:c7:81:63:28:7a:9e:a0:d3:76:3e:d4:fb:
c1:32:c2:c2:a8:80:c4:99:f0:eb:e9:5a:90:48:7f:53:fe:28:
9d:1a:a1:cf:b7:21:ea:ba:a4:98:72:51:fd:77:bc:41:e1:d6:
89:e3:87:29:bc:e5:0e:fe:85:a9:82:31:ca:17:38:91:05:cb:
51:d9:11:c6:98:82:31:99:db:21:0b:0d:c3:5f:fb:56:d6:06:
3c:fe:d5:98:67:df:e9:28:2d:9e:eb:e0:f0:fb:03:e5:98:a1:
25:b7:fe:7e:a6:b0:5b:fa:cc:3b:cc:f6:e5:21:66:c3:31:de:
e3:18:c8:e3:35:53:45:9e:6d:2e:81:98:79:22:e8:3f:67:e1:
15:51:27:d1:81:c6:38:1f:c2:a5:de:3e:07:71:5c:4b:dc:bb:
ab:a9:da:60:05:52:3d:a5:9a:14:b5:bd:60:bc:a5:8b:0d:86:
e2:3f:7c:d8:2d:f1:17:89:a1:f6:47:3d:85:32:54:2d:3e:c9:
8a:c6:50:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5
MTM4MEI0QTUwHhcNMjYwNDA1MDU0MzE2WhcNMjYwNDEyMDU0MzE2WjAYMRYwFAYD
VQQDEw02OWQxZjY3NS1kYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkvTlQMZZqnZF7pV8ZnttBnqVZW9Zq1G/C0TwCVQY3AVTtsEOfXf/QdttfkO+
gxiyiDRRx/Unr8BLgbAs2ea+TBx9YlIy+bAAl6+xcQXmsvEmx5wmLUf6WnQtIfob
Fxo1hhh0PyfqG0kADNGpYGN6E6fCeNnO8FTV7udH5Lj9ks67J7fvb+F/vakrQBNy
i5NL5RR0+v/SUia95prFaKBZ/cg0nZI7Wmada6giogcl89gekJ5Wl0IbiKFvfp7/
XqGLFRh8K82nWwPRIWMMvzsGJv9AjCkKczs+pG+I7Y8IQj8brLXbnH56wXPQ+gL+
hCuf8dd0I2GKHZdPPlEY2SE3vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIf6ztT2
1C4iOjoeD5rsGTJGx/yyMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx
QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL
LUFIQnYyblloSUNST0F0S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdVYb224olQOniE3nAtXBg7yBO7BpU3y1hKZp+z00+AVjPPpWoFfkTspiMiZS
Ps+5J0VcATmquwcm0ELjx4FjKHqeoNN2PtT7wTLCwqiAxJnw6+lakEh/U/4onRqh
z7ch6rqkmHJR/Xe8QeHWieOHKbzlDv6FqYIxyhc4kQXLUdkRxpiCMZnbIQsNw1/7
VtYGPP7VmGff6Sgtnuvg8PsD5ZihJbf+fqawW/rMO8z25SFmwzHe4xjI4zVTRZ5t
LoGYeSLoP2fhFVEn0YHGOB/Cpd4+B3FcS9y7q6naYAVSPaWaFLW9YLyliw2G4j98
2C3xF4mh9kc9hTJULT7JisZQKg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client