
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json)
Hash identifier: E8ByrjuP/ajtj62CnT4DaqeY7EyCJCyMNpdyfGh0dYM=
Subject key identifier: 98:8C:CA:AA:3F:BA:F0:D4:53:F0:80:93:C5:13:B0:F6:23:60:20:49
Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A
Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
Manifest number: A2
Signing time: Sun 05 Apr 2026 06:41:30 +0000
Manifest this update: Sun 05 Apr 2026 06:41:30 +0000
Manifest next update: Sun 12 Apr 2026 06:41:30 +0000
Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: dWWJYd1mgzmdtPxPg9JdlyZ0PYMaPa7lIo7m3+037Wo=)
2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: mrvsb1yUmpT+TPzg/icn7UEU7fIbAnYkrcZJuJgVboM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
Validity
Not Before: Apr 5 06:41:30 2026 GMT
Not After : Apr 12 06:41:30 2026 GMT
Subject: CN=69d2041a-c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:37:45:8d:2c:fe:e9:5a:7d:b1:ca:9d:19:
42:25:0c:b4:04:c9:e8:a0:91:da:78:ae:36:65:ba:
6a:48:51:15:86:f1:eb:c7:01:82:ad:04:9a:fa:bf:
62:9b:e2:6a:a1:3f:71:e3:14:75:63:5f:82:3d:10:
08:54:59:22:fc:58:66:93:13:ee:2a:9a:3d:fe:d5:
5f:64:7a:f0:97:0b:e5:0d:e1:10:3b:3c:07:a0:27:
3c:ef:72:9d:a8:85:37:4a:b3:ee:52:77:00:1e:6a:
ef:4c:97:c3:96:2f:84:c6:2a:cb:c5:62:43:41:82:
d8:0b:ef:af:6f:74:1d:54:d0:46:ef:75:8d:dc:f4:
22:13:83:6b:f9:03:33:f1:19:25:16:bd:b5:4e:62:
71:d4:4e:b0:29:82:b5:a9:f9:a3:cc:11:b0:7d:9f:
fd:49:be:a5:db:38:e2:08:72:a8:d0:54:e4:ff:a6:
45:98:1a:54:94:69:61:78:b8:67:dd:d8:8a:56:91:
c0:4a:8b:55:cf:7f:e1:98:d7:0f:1c:bd:18:84:64:
64:44:8a:87:fe:4f:8a:cf:17:b7:0c:be:9d:d9:27:
a9:f8:61:91:9a:4b:cf:30:ef:73:a3:3e:a2:bb:55:
fc:68:41:4d:bf:25:bc:67:1d:32:d9:f0:a5:5a:b6:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:CA:AA:3F:BA:F0:D4:53:F0:80:93:C5:13:B0:F6:23:60:20:49
X509v3 Authority Key Identifier:
keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:d7:f4:e7:42:7f:e7:73:3e:76:47:a0:ce:78:34:67:df:
27:2b:4c:3f:38:30:62:22:9f:d7:21:51:3a:b6:0b:ed:88:0d:
08:93:51:37:89:fe:73:6a:bd:c1:cf:34:23:78:6e:d0:d5:ff:
09:e8:52:f4:3e:16:63:55:31:b4:9f:c0:3b:cb:00:9a:41:ac:
1e:61:1c:95:ea:40:85:0a:d2:d4:4a:cd:69:ad:a0:63:bc:e0:
7b:7e:40:bc:3a:0c:20:f7:78:6d:5d:09:00:61:b6:c1:af:a7:
32:6e:46:2f:0d:78:40:f7:d2:9a:5e:54:14:2a:1f:cd:92:47:
ce:a7:dd:24:f0:54:db:d8:e9:61:ac:64:28:0d:e2:00:d9:c9:
2f:21:ee:ac:95:5d:a5:08:0f:22:71:f9:56:24:03:52:85:2c:
11:0e:ad:09:99:55:ab:50:9e:90:91:18:c0:c3:16:5d:ed:4d:
dd:f3:8c:a3:05:2c:e8:a1:54:2d:dc:f0:4d:0c:fd:49:d5:b8:
41:51:17:69:d9:bb:e3:80:89:65:81:30:f8:7b:22:ab:ac:00:
06:99:63:29:fe:e0:d4:6a:25:09:5f:f2:bc:21:e0:72:2d:32:
45:c7:60:d5:a0:22:fc:81:b8:12:02:39:a4:b4:b8:b5:d0:04:
5f:ec:88:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMzcxMTAvBgNVBAUTKDhERTlEMDc0RkYzQzhENTE1NDE1RUJGMEYwRTU2QUMw
M0VFQUREM0EwHhcNMjYwNDA1MDY0MTMwWhcNMjYwNDEyMDY0MTMwWjAYMRYwFAYD
VQQDEw02OWQyMDQxYS1jNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYI3RY0s/ulafbHKnRlCJQy0BMnooJHaeK42ZbpqSFEVhvHrxwGCrQSa+r9i
m+JqoT9x4xR1Y1+CPRAIVFki/FhmkxPuKpo9/tVfZHrwlwvlDeEQOzwHoCc873Kd
qIU3SrPuUncAHmrvTJfDli+ExirLxWJDQYLYC++vb3QdVNBG73WN3PQiE4Nr+QMz
8RklFr21TmJx1E6wKYK1qfmjzBGwfZ/9Sb6l2zjiCHKo0FTk/6ZFmBpUlGlheLhn
3diKVpHASotVz3/hmNcPHL0YhGRkRIqH/k+Kzxe3DL6d2Sep+GGRmkvPMO9zoz6i
u1X8aEFNvyW8Zx0y2fClWrZyXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiMyqo/
uvDUU/CAk8UTsPYjYCBJMB8GA1UdIwQYMBaAFI3p0HT/PI1RVBXr8PDlasA+6t06
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzNy8zRDhBQzU0NjND
QTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9qZW5RZFA4OGpWRlVGZXZ3OE9WcXdEN3Ez
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIzNy8zRDhBQzU0NjNDQTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9qZW5RZFA4OGpW
RlVGZXZ3OE9WcXdEN3EzVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACYHX9OdCf+dzPnZHoM54NGffJytMPzgwYiKf1yFROrYL7YgNCJNRN4n+c2q9
wc80I3hu0NX/CehS9D4WY1UxtJ/AO8sAmkGsHmEclepAhQrS1ErNaa2gY7zge35A
vDoMIPd4bV0JAGG2wa+nMm5GLw14QPfSml5UFCofzZJHzqfdJPBU29jpYaxkKA3i
ANnJLyHurJVdpQgPInH5ViQDUoUsEQ6tCZlVq1CekJEYwMMWXe1N3fOMowUs6KFU
LdzwTQz9SdW4QVEXadm744CJZYEw+Hsiq6wABpljKf7g1GolCV/yvCHgci0yRcdg
1aAi/IG4EgI5pLS4tdAEX+yIiw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:27:01 2026 by rpki-client