
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: QhzNvszYramBt9CawWAsa9z5az/EQyaLmK587YmHCO0=
Subject key identifier: 98:3E:9F:FE:B8:79:C0:75:AF:D3:96:11:65:8F:C0:00:F4:6B:73:C3
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: E8
Signing time: Sun 05 Apr 2026 05:51:55 +0000
Manifest this update: Sun 05 Apr 2026 05:51:54 +0000
Manifest next update: Sun 12 Apr 2026 05:51:54 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: xkNgubMbGszBc8Mw/px5yMI/OBH+nyVvylE1tkjsBts=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Apr 5 05:51:54 2026 GMT
Not After : Apr 12 05:51:54 2026 GMT
Subject: CN=69d1f87a-1802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:42:19:fa:07:14:4f:56:fd:ef:6a:aa:9b:
c1:ed:cc:de:a1:39:46:a0:b4:42:e6:b6:79:62:28:
c2:17:ac:a5:6c:d9:4d:61:57:c6:ad:93:64:7f:b0:
b9:5a:27:b9:6b:be:61:cd:bd:3e:f0:15:2a:f1:73:
3a:bd:e6:38:a6:cf:02:7b:4b:ed:e6:c5:28:0a:99:
59:a6:75:a6:3a:22:5c:64:3b:fc:d0:97:7c:90:0c:
df:38:8c:fc:91:0e:de:94:13:6b:22:dd:21:85:50:
77:31:3d:43:bf:78:b4:47:52:e0:98:f9:bf:3f:cd:
d8:3f:f0:b6:b3:c8:be:18:1b:f9:4e:59:da:14:a9:
aa:79:51:18:34:40:8d:e6:cd:7e:c5:05:0e:3f:ae:
fd:c4:d4:c0:98:c8:a4:52:08:36:d3:b1:fa:a0:aa:
6e:4a:6f:b9:d0:40:ab:93:df:bf:a6:53:f8:63:cd:
ae:5e:11:0f:85:38:f8:54:00:e2:d6:03:64:33:ff:
fd:aa:d3:ac:80:41:de:11:80:25:f8:6b:19:a0:b3:
86:a3:d9:7c:e2:32:fa:69:4c:15:72:fd:8b:da:89:
a1:ad:21:d2:73:95:1e:e2:53:6e:24:5a:c7:3f:e0:
34:6f:48:72:9c:33:41:87:c7:a9:71:9f:15:9d:2d:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:9F:FE:B8:79:C0:75:AF:D3:96:11:65:8F:C0:00:F4:6B:73:C3
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:e1:c8:fd:30:26:9d:28:37:c4:a5:fe:55:c2:28:ca:98:
a5:05:ed:c0:b6:7c:1e:c6:d1:09:8d:d2:7b:94:84:31:cd:9a:
53:e2:46:52:3d:eb:3f:bd:a7:db:63:37:5d:a8:ef:12:cc:5d:
3c:e0:1e:21:18:ec:eb:42:3d:f2:30:69:95:66:08:e9:24:e2:
57:63:91:ee:7d:3d:a7:cc:64:b8:bb:51:f4:20:5d:e9:b8:6a:
7e:9d:5d:4b:83:7a:ed:aa:c4:fd:12:54:22:3a:96:1c:ec:56:
5a:b4:f2:a7:3f:57:3c:f7:a0:2b:99:8f:ae:78:f6:ea:a9:87:
aa:73:da:f1:99:57:5b:df:34:26:88:ba:e6:18:01:28:53:b8:
b5:18:89:02:33:1d:b9:8b:8c:c6:73:e1:be:c8:e8:37:13:fe:
71:d1:cd:5e:50:99:b9:0d:4a:2d:e2:37:69:b0:c9:31:e3:6d:
74:02:17:a3:1f:e0:f1:4b:30:73:3d:89:0a:0b:e3:91:b2:f8:
8f:42:70:0c:33:cd:b8:dd:2e:09:1d:3b:a9:0a:2a:26:c2:81:
75:cf:76:5d:4d:1f:69:dd:51:4d:e8:54:e0:27:4d:0f:df:fe:
9c:c6:f7:4a:81:3f:41:11:f6:25:91:5b:b8:21:f2:f2:17:27:
c4:43:54:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1
NjAwRDlBNTgwHhcNMjYwNDA1MDU1MTU0WhcNMjYwNDEyMDU1MTU0WjAYMRYwFAYD
VQQDEw02OWQxZjg3YS0xODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwv9CGfoHFE9W/e9qqpvB7czeoTlGoLRC5rZ5YijCF6ylbNlNYVfGrZNkf7C5
Wie5a75hzb0+8BUq8XM6veY4ps8Ce0vt5sUoCplZpnWmOiJcZDv80Jd8kAzfOIz8
kQ7elBNrIt0hhVB3MT1Dv3i0R1LgmPm/P83YP/C2s8i+GBv5TlnaFKmqeVEYNECN
5s1+xQUOP679xNTAmMikUgg207H6oKpuSm+50ECrk9+/plP4Y82uXhEPhTj4VADi
1gNkM//9qtOsgEHeEYAl+GsZoLOGo9l84jL6aUwVcv2L2omhrSHSc5Ue4lNuJFrH
P+A0b0hynDNBh8epcZ8VnS2hdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJg+n/64
ecB1r9OWEWWPwAD0a3PDMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy
MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj
ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo2DhyP0wJp0oN8Sl/lXCKMqYpQXtwLZ8HsbRCY3Se5SEMc2aU+JGUj3rP72n
22M3XajvEsxdPOAeIRjs60I98jBplWYI6STiV2OR7n09p8xkuLtR9CBd6bhqfp1d
S4N67arE/RJUIjqWHOxWWrTypz9XPPegK5mPrnj26qmHqnPa8ZlXW980Joi65hgB
KFO4tRiJAjMduYuMxnPhvsjoNxP+cdHNXlCZuQ1KLeI3abDJMeNtdAIXox/g8Usw
cz2JCgvjkbL4j0JwDDPNuN0uCR07qQoqJsKBdc92XU0fad1RTehU4CdND9/+nMb3
SoE/QRH2JZFbuCHy8hcnxENUvQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:52 2026 by rpki-client