
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File: J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier: nRop1sB8et44Me4NVECaeOHVn3JHaivZ7enxCoqZHjk=
Subject key identifier: 9D:04:32:58:B6:17:4E:1B:27:9C:8D:BF:6A:A2:06:57:35:B9:B0:E0
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer: /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number: 0121
Signing time: Thu 21 May 2026 05:52:25 +0000
Manifest this update: Thu 21 May 2026 05:52:25 +0000
Manifest next update: Thu 28 May 2026 05:52:25 +0000
Files and hashes: 1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: dVtlxDGM++Y763f9kcVj/8EsNjxvR65H/7PGoPhyMns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Validity
Not Before: May 21 05:52:25 2026 GMT
Not After : May 28 05:52:25 2026 GMT
Subject: CN=6a0e9d99-1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:5d:51:8b:c5:f2:b8:98:a4:5b:0f:f3:17:
6e:7a:8f:bb:54:8c:13:9b:e1:2b:89:c7:95:c4:f1:
25:9c:3b:c4:13:b7:99:a6:b9:5a:85:40:1c:6b:11:
9c:2c:b8:9f:06:cd:8f:91:4e:9b:af:ce:c7:90:c1:
30:88:59:8e:eb:6e:19:d8:76:fe:86:ec:3e:b4:c9:
a6:7e:86:bc:d2:31:c6:92:6b:95:20:f5:0b:5b:b7:
42:7e:a4:90:2e:48:32:cc:f8:9d:79:86:81:97:75:
60:c9:1c:a4:81:00:9a:4f:1e:47:ea:cd:e9:54:48:
48:02:93:d4:d4:d5:2e:ee:ab:10:19:92:49:aa:5f:
68:a7:7f:9f:f5:d3:24:3e:38:b3:93:88:3a:db:80:
57:5a:42:1b:1a:9a:97:a0:fd:a4:29:7b:32:aa:38:
27:ea:2a:8f:1f:4c:e3:01:b4:2b:0c:89:35:c0:f9:
67:14:db:e1:94:1b:cd:88:6a:5b:de:50:ed:d1:7b:
d1:64:0b:2c:f4:9c:9d:e0:0d:de:e2:44:07:d0:e5:
40:ed:51:bc:9b:55:ac:62:01:8b:81:03:30:b4:f2:
36:95:e7:2c:9f:c2:7e:f9:46:12:94:a6:22:ab:6b:
2d:6c:a5:31:23:86:e4:a6:c5:e2:97:0e:d4:51:60:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:32:58:B6:17:4E:1B:27:9C:8D:BF:6A:A2:06:57:35:B9:B0:E0
X509v3 Authority Key Identifier:
keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:58:08:b7:93:0f:c0:ba:a1:fb:ad:41:53:03:46:2a:af:73:
7a:4a:dc:41:57:0a:4d:68:74:81:29:bf:09:0a:06:35:49:0e:
4d:a1:41:41:a6:d4:fe:3d:ab:12:c9:28:45:4d:4b:38:0d:c1:
01:42:4d:9e:57:0a:6e:12:77:51:ca:03:45:bf:d8:bc:8f:d0:
ab:5d:f6:3c:27:14:58:5b:36:2e:de:e9:87:69:cc:9f:3f:a4:
8e:49:4f:69:7f:06:b3:fc:26:85:9b:15:3b:ef:e4:01:a3:4b:
07:57:ee:c5:7a:d7:cc:ef:84:71:af:cf:e5:70:2f:dd:50:db:
83:ad:65:72:bb:a4:30:0d:36:87:dc:96:9d:cb:b1:07:07:0a:
a5:2a:76:88:93:61:da:b1:c9:35:92:09:d8:af:b6:d2:4a:a5:
df:9f:4a:4d:2c:74:a9:f9:c2:62:c5:92:19:fa:c0:22:72:50:
0e:58:01:d1:bd:e4:2e:ca:68:c0:ce:e4:e8:9a:20:4e:2a:dc:
0e:2d:41:cd:da:39:e5:7f:26:b1:e1:7c:6e:fe:26:96:e6:3f:
b4:82:39:61:73:e1:55:68:87:93:6d:55:48:bc:31:84:94:54:
74:14:26:80:87:0d:ff:fe:b6:7b:d2:b8:18:bd:0f:11:6c:de:
94:f5:f0:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2MTAxMTAvBgNVBAUTKDI3Qzg3QjVFMzBCMDNDMkMxNTBBMjJFNkM0MkE1RTA2
OTlDOTBCRkMwHhcNMjYwNTIxMDU1MjI1WhcNMjYwNTI4MDU1MjI1WjAYMRYwFAYD
VQQDEw02YTBlOWQ5OS0xMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA49BdUYvF8riYpFsP8xdueo+7VIwTm+EriceVxPElnDvEE7eZprlahUAcaxGc
LLifBs2PkU6br87HkMEwiFmO624Z2Hb+huw+tMmmfoa80jHGkmuVIPULW7dCfqSQ
LkgyzPideYaBl3VgyRykgQCaTx5H6s3pVEhIApPU1NUu7qsQGZJJql9op3+f9dMk
Pjizk4g624BXWkIbGpqXoP2kKXsyqjgn6iqPH0zjAbQrDIk1wPlnFNvhlBvNiGpb
3lDt0XvRZAss9Jyd4A3e4kQH0OVA7VG8m1WsYgGLgQMwtPI2lecsn8J++UYSlKYi
q2stbKUxI4bkpsXilw7UUWAaTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0EMli2
F04bJ5yNv2qiBlc1ubDgMB8GA1UdIwQYMBaAFCfIe14wsDwsFQoi5sQqXgaZyQv8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjYxMC9CRkQzRTkyRUEx
RTQxMUVGQjk4QjBDNEVDNEY5QUUwMi9KOGg3WGpDd1BDd1ZDaUxteENwZUJwbkpD
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4aDdYakN3UEN3VkNpTG14Q3BlQnBuSkNfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjYxMC9CRkQzRTkyRUExRTQxMUVGQjk4QjBDNEVDNEY5QUUwMi9KOGg3WGpDd1BD
d1ZDaUxteENwZUJwbkpDX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt1gIt5MPwLqh+61BUwNGKq9zekrcQVcKTWh0gSm/CQoGNUkOTaFBQabU/j2r
EskoRU1LOA3BAUJNnlcKbhJ3UcoDRb/YvI/Qq132PCcUWFs2Lt7ph2nMnz+kjklP
aX8Gs/wmhZsVO+/kAaNLB1fuxXrXzO+Eca/P5XAv3VDbg61lcrukMA02h9yWncux
BwcKpSp2iJNh2rHJNZIJ2K+20kql359KTSx0qfnCYsWSGfrAInJQDlgB0b3kLspo
wM7k6JogTircDi1Bzdo55X8mseF8bv4mluY/tII5YXPhVWiHk21VSLwxhJRUdBQm
gIcN//62e9K4GL0PEWzelPXwXA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:04 2026 by rpki-client