
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: R5DGTkhFel6LyX9nQDlBAh055fhMBM8iXyI/N7hPZtM=
Subject key identifier: AD:9A:85:A6:A3:32:C8:75:DE:CF:B9:31:E0:D2:E5:C4:04:18:26:F6
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: 97
Signing time: Sun 05 Apr 2026 06:46:55 +0000
Manifest this update: Sun 05 Apr 2026 06:46:55 +0000
Manifest next update: Sun 12 Apr 2026 06:46:55 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: YXYy8R8Y4hxHP9khcUDG1yYyaXTHNZuUgyxbMmyW390=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Apr 5 06:46:55 2026 GMT
Not After : Apr 12 06:46:55 2026 GMT
Subject: CN=69d2055f-4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:99:89:8c:5b:91:66:79:02:8a:69:c2:89:
f0:37:aa:e2:1c:92:b4:08:42:6b:88:96:a5:93:d9:
2b:e6:c5:a4:95:be:d3:23:27:94:f6:eb:25:c8:bf:
49:bb:2c:64:75:0a:52:03:c6:24:ee:81:f0:0f:41:
0c:de:ab:23:4d:f6:99:f6:80:3a:0f:f2:1e:b6:39:
36:d2:5b:32:f4:4d:b5:6b:fe:41:7c:e6:39:22:de:
4a:59:da:12:ba:8e:5f:1e:67:d9:06:49:e7:f5:09:
b7:96:64:f5:5e:2e:9a:61:ec:e2:69:30:9a:ad:b7:
3f:d6:97:c5:05:bd:ef:81:2e:e1:b3:16:45:a8:2f:
ff:c0:23:c2:8c:6e:cf:ed:e4:35:50:07:b8:ad:87:
fa:ed:df:c9:61:b1:25:eb:ba:83:9a:f6:c0:0c:7e:
87:ab:da:8c:37:7b:bd:01:8b:72:ee:ca:a8:18:f7:
b8:e8:8d:52:d9:d2:4a:52:e7:01:fa:05:8b:f4:36:
20:86:27:e3:fe:4e:fc:90:13:d8:37:42:6a:26:8b:
ef:22:01:27:04:ae:b7:cf:59:67:ed:1c:ff:81:6c:
88:53:17:14:49:2a:66:6a:79:69:eb:e3:aa:e9:b9:
fb:a3:43:49:c9:35:92:30:c3:2c:d1:a7:99:30:72:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9A:85:A6:A3:32:C8:75:DE:CF:B9:31:E0:D2:E5:C4:04:18:26:F6
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:a1:34:3a:f3:04:80:ba:2e:43:cf:38:ee:1e:0d:49:f2:
05:1e:79:f9:78:b6:89:74:3d:a5:02:93:7b:5f:b3:80:72:1d:
f8:01:5a:d0:9d:3e:b9:23:35:bf:27:43:d2:c5:9c:51:92:34:
90:df:3f:19:7f:e7:72:0b:67:c4:fd:07:60:9b:01:fd:c8:51:
e3:17:80:09:4b:7c:6a:5e:a5:f8:56:2d:41:5b:94:b0:15:15:
de:a7:f9:90:6c:bd:5e:25:b9:75:b6:b1:11:e2:58:9b:8c:e5:
3b:02:74:34:53:12:40:0b:8a:8e:7f:cf:82:29:ef:34:db:f9:
8f:96:3f:cb:b3:e4:73:05:1e:3f:1f:fd:77:4c:8b:24:0b:59:
0f:a8:fa:41:30:4e:7d:57:62:12:9f:2f:9c:09:42:4a:f0:50:
77:e8:5c:2a:af:c6:97:db:cf:1d:19:b5:c8:d5:dd:55:2f:b8:
8a:0d:66:91:9f:6b:8d:66:d9:07:80:6c:b5:e2:9c:42:de:2c:
f8:4f:8f:fc:8f:4a:92:03:52:92:19:db:02:62:22:41:21:7e:
59:ec:a4:95:0e:de:57:a3:84:57:2a:46:cc:cf:e8:70:72:33:
03:22:39:9e:3e:e1:c1:96:69:5b:95:bd:c4:87:c3:73:90:56:
24:2c:19:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhBODYxMTAvBgNVBAUTKDI0NUZGNDVDMjg2NTJCRjcxNTY1ODVBM0ZEOUE3OTc0
RTUzNzVEMDMwHhcNMjYwNDA1MDY0NjU1WhcNMjYwNDEyMDY0NjU1WjAYMRYwFAYD
VQQDEw02OWQyMDU1Zi00MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynuZiYxbkWZ5AoppwonwN6riHJK0CEJriJalk9kr5sWklb7TIyeU9uslyL9J
uyxkdQpSA8Yk7oHwD0EM3qsjTfaZ9oA6D/Ietjk20lsy9E21a/5BfOY5It5KWdoS
uo5fHmfZBknn9Qm3lmT1Xi6aYeziaTCarbc/1pfFBb3vgS7hsxZFqC//wCPCjG7P
7eQ1UAe4rYf67d/JYbEl67qDmvbADH6Hq9qMN3u9AYty7sqoGPe46I1S2dJKUucB
+gWL9DYghifj/k78kBPYN0JqJovvIgEnBK63z1ln7Rz/gWyIUxcUSSpmanlp6+Oq
6bn7o0NJyTWSMMMs0aeZMHJCswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2ahaaj
Msh13s+5MeDS5cQEGCb2MB8GA1UdIwQYMBaAFCRf9FwoZSv3FWWFo/2aeXTlN10D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9CNjNGMzFBRTRC
MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi9KRl8wWENobEtfY1ZaWVdqX1pwNWRPVTNY
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pGXzBYQ2hsS19jVlpZV2pfWnA1ZE9VM1hRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEE4Ni9CNjNGMzFBRTRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi9KRl8wWENobEtf
Y1ZaWVdqX1pwNWRPVTNYUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgqmhNDrzBIC6LkPPOO4eDUnyBR55+Xi2iXQ9pQKTe1+zgHId+AFa0J0+uSM1
vydD0sWcUZI0kN8/GX/ncgtnxP0HYJsB/chR4xeACUt8al6l+FYtQVuUsBUV3qf5
kGy9XiW5dbaxEeJYm4zlOwJ0NFMSQAuKjn/PginvNNv5j5Y/y7PkcwUePx/9d0yL
JAtZD6j6QTBOfVdiEp8vnAlCSvBQd+hcKq/Gl9vPHRm1yNXdVS+4ig1mkZ9rjWbZ
B4BsteKcQt4s+E+P/I9KkgNSkhnbAmIiQSF+WeyklQ7eV6OEVypGzM/ocHIzAyI5
nj7hwZZpW5W9xIfDc5BWJCwZww==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:33 2026 by rpki-client