
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: Q4DT1+7M95J736ETX5N93v4iBt67sbblxI9qc9pqRP4=
Subject key identifier: F9:18:29:7D:85:84:32:66:2E:1B:F6:70:5F:11:0B:B6:7E:BA:70:2C
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0C05
Signing time: Sat 04 Apr 2026 18:40:01 +0000
Manifest this update: Sat 04 Apr 2026 18:40:00 +0000
Manifest next update: Sat 11 Apr 2026 18:40:00 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 7xt6/tzWsXqw+8lSi8wcq+z9DMUzwP2NvhqSd3UgVf8=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Apr 4 18:40:00 2026 GMT
Not After : Apr 11 18:40:00 2026 GMT
Subject: CN=69d15b01-154c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:d2:e4:d7:30:31:56:08:7d:31:39:b4:cd:
9f:ae:47:c9:e2:21:c4:dc:5a:0b:12:bc:a5:51:ca:
8f:de:8b:ca:4d:1a:69:69:06:9f:f4:db:54:a5:29:
49:43:e5:0b:d4:55:a6:a6:04:db:eb:33:74:50:a9:
70:90:33:d6:1a:e6:2f:14:3f:e1:39:ec:17:84:6c:
bd:cd:30:d4:8c:de:0c:50:86:2a:81:0a:1c:5d:39:
63:95:a5:6f:c1:e6:9d:a4:c0:b5:58:47:cd:f5:08:
31:73:69:d8:aa:15:c3:39:41:35:6d:11:f3:c3:8f:
d0:79:74:2b:22:d6:26:95:11:b3:f4:f4:56:4f:47:
a6:94:e4:e5:6e:fe:9d:6a:00:48:ca:54:56:db:ea:
fa:66:e2:04:7e:ff:8a:5e:08:09:72:5d:06:f8:be:
e8:04:8c:23:e9:0d:9c:0e:59:76:fc:b3:21:66:59:
3a:20:c5:da:53:6d:a6:62:ac:ce:48:27:e9:12:1c:
eb:d3:76:06:71:84:0c:b4:1f:c9:5d:15:36:97:a7:
36:17:3b:3a:a6:a8:d6:eb:84:5e:97:3c:3e:e8:cb:
08:b2:98:85:81:09:96:ab:91:04:ac:1e:0b:aa:ee:
b8:59:4f:f9:d1:39:3c:20:58:e1:8d:1f:c5:c0:ad:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:29:7D:85:84:32:66:2E:1B:F6:70:5F:11:0B:B6:7E:BA:70:2C
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:35:88:d2:5d:7b:4e:7b:1f:c8:28:9a:bd:91:64:64:4f:52:
32:97:e2:ae:af:a9:6c:70:9c:7c:99:4a:11:e5:54:d4:ed:56:
bf:4f:03:56:9a:ab:03:5b:71:4e:f3:5a:9e:98:6b:98:5e:af:
19:d1:e5:e2:45:a0:e6:b4:fd:57:51:d6:18:6e:8a:8e:16:18:
dc:c8:73:74:7d:25:57:34:b1:b6:95:78:e3:f2:80:72:21:bb:
c8:b0:19:93:78:6b:4c:42:b3:d1:9b:5c:5a:b9:9b:5b:0f:ea:
00:5b:33:fe:cc:cc:90:30:8d:cc:81:49:f2:bd:be:7a:13:54:
7b:4e:00:35:31:3d:b7:41:e5:d0:68:e7:ae:82:c1:c8:01:17:
d8:db:30:1b:6d:ae:17:9f:0d:1e:96:bc:d0:b4:83:51:7e:db:
32:1c:02:25:ab:cd:57:56:b9:6a:a3:c9:76:9f:c9:70:63:57:
d1:52:dd:6c:26:2a:49:23:06:7c:58:ae:8b:bc:50:15:2c:eb:
76:61:03:6f:6d:05:78:d9:01:15:45:23:ab:d1:49:fc:02:0d:
e4:a1:ec:6e:46:21:1e:73:f6:49:20:48:02:54:18:00:42:41:
4f:2a:0c:3f:3a:d5:4e:f7:66:ca:6e:1b:dc:43:a2:b3:11:0f:
23:ed:c5:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw
REUxMEY5QjkwHhcNMjYwNDA0MTg0MDAwWhcNMjYwNDExMTg0MDAwWjAYMRYwFAYD
VQQDEw02OWQxNWIwMS0xNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUPS5NcwMVYIfTE5tM2frkfJ4iHE3FoLErylUcqP3ovKTRppaQaf9NtUpSlJ
Q+UL1FWmpgTb6zN0UKlwkDPWGuYvFD/hOewXhGy9zTDUjN4MUIYqgQocXTljlaVv
weadpMC1WEfN9Qgxc2nYqhXDOUE1bRHzw4/QeXQrItYmlRGz9PRWT0emlOTlbv6d
agBIylRW2+r6ZuIEfv+KXggJcl0G+L7oBIwj6Q2cDll2/LMhZlk6IMXaU22mYqzO
SCfpEhzr03YGcYQMtB/JXRU2l6c2Fzs6pqjW64Relzw+6MsIspiFgQmWq5EErB4L
qu64WU/50Tk8IFjhjR/FwK07pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkYKX2F
hDJmLhv2cF8RC7Z+unAsMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx
MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3
d1pySWI4RTJFek1ONFEtYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEzWI0l17TnsfyCiavZFkZE9SMpfirq+pbHCcfJlKEeVU1O1Wv08DVpqrA1tx
TvNanphrmF6vGdHl4kWg5rT9V1HWGG6KjhYY3MhzdH0lVzSxtpV44/KAciG7yLAZ
k3hrTEKz0ZtcWrmbWw/qAFsz/szMkDCNzIFJ8r2+ehNUe04ANTE9t0Hl0GjnroLB
yAEX2NswG22uF58NHpa80LSDUX7bMhwCJavNV1a5aqPJdp/JcGNX0VLdbCYqSSMG
fFiui7xQFSzrdmEDb20FeNkBFUUjq9FJ/AIN5KHsbkYhHnP2SSBIAlQYAEJBTyoM
PzrVTvdmym4b3EOisxEPI+3FGA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:31 2026 by rpki-client