
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json)
Hash identifier: 9zrBTaxuXsnnhEDG5Z9aYJX9JvBbEQqOyHJS71oiX5I=
Subject key identifier: 26:56:EE:18:5D:14:8F:49:A5:1A:54:C5:93:C2:97:63:B2:2F:29:F2
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
Manifest number: 06B7
Signing time: Thu 16 Apr 2026 22:18:21 +0000
Manifest this update: Thu 16 Apr 2026 22:18:20 +0000
Manifest next update: Thu 23 Apr 2026 22:18:20 +0000
Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: dnq+4vzc97nLuuIGfXPOQi76ls3acwAID9XOKNjZTY8=)
2: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: yoloep24o1atFGZiIYVLvf8FRxTCxFgmWJlp5tBVJqE=)
3: 93E364468FC111EFA7695485C4F9AE02.roa (hash: odXs70QtmjQH39+qx/iFdYWwlstVgEGIxhy6jVeMzv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Validity
Not Before: Apr 16 22:18:20 2026 GMT
Not After : Apr 23 22:18:20 2026 GMT
Subject: CN=69e1602d-3df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:47:a4:91:7e:ee:eb:a3:16:7b:2e:3e:08:
32:24:af:5d:2f:15:de:bd:85:35:37:e2:ec:6a:bd:
98:6f:57:3d:ab:e4:11:e3:29:b4:43:f7:0a:50:f0:
b8:d2:3a:17:6c:fd:a4:c1:a5:e3:be:e0:b5:06:da:
a4:0b:0d:99:9f:0f:e8:c8:51:12:88:3b:37:84:17:
4e:5e:99:c9:20:a9:15:7c:7f:d7:db:eb:09:61:1a:
48:6d:70:76:cc:db:08:f8:6c:22:e3:a7:09:20:dc:
6a:d6:c0:88:c5:6c:5f:2b:f2:24:55:65:fb:74:2d:
95:b2:5a:c8:33:d4:28:bc:95:7d:7e:5d:bb:5d:dd:
1f:fb:f9:cb:bf:b2:4d:65:c9:cf:a0:40:61:3c:fe:
f0:62:70:d0:6b:b4:cc:2c:61:23:66:44:d4:cf:85:
14:c5:eb:7a:dd:d1:c3:8f:d5:3e:c0:5e:f7:49:68:
c1:4f:27:41:f8:a7:77:34:dd:10:05:85:c3:ba:9e:
31:97:eb:f1:f7:fa:89:12:96:4c:9e:31:5c:4f:50:
45:ef:7a:c8:ac:2b:f7:18:b9:1f:53:dd:c9:b6:93:
bb:6a:6f:f0:23:3e:4c:8f:aa:72:9c:02:78:bc:3d:
0a:75:06:35:28:ab:96:39:21:dc:fa:7a:a8:c1:22:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:EE:18:5D:14:8F:49:A5:1A:54:C5:93:C2:97:63:B2:2F:29:F2
X509v3 Authority Key Identifier:
keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:52:8d:39:de:93:4a:72:7f:e4:99:04:c7:93:ba:fb:9c:
e6:a0:37:52:02:33:72:33:ba:ac:d4:41:04:fd:86:46:85:1c:
af:93:89:8d:b1:ca:00:69:98:5d:f7:39:b7:b3:17:c7:d6:1b:
1b:30:cd:1f:73:bd:8b:40:f0:b1:b2:14:d6:16:58:0c:75:a5:
a0:6e:fe:95:d7:43:13:cc:ec:6a:4d:62:1f:8f:c4:86:55:aa:
b9:5c:20:55:09:86:e8:c8:48:c8:e6:a9:12:06:8d:1e:31:44:
d2:1f:e4:6c:be:e8:44:f8:36:c9:4a:6c:53:01:94:e5:68:17:
2e:87:ad:e7:5a:58:2e:09:65:14:0e:da:89:26:9e:24:aa:18:
70:69:1a:45:57:a1:b2:25:22:15:d4:f3:47:04:29:f3:39:cc:
99:05:0a:69:de:fa:b1:f4:44:ee:a5:66:79:f5:7d:88:75:8b:
95:e2:dd:5f:f5:82:bc:8d:a3:07:02:a0:82:85:a6:8e:05:da:
93:ac:81:fc:cb:ee:7a:7c:42:62:1b:29:06:c6:8b:d6:ff:ef:
c1:c4:5c:fd:99:66:e4:05:fd:ed:ba:72:d2:3b:fd:52:b0:9a:
f8:7d:04:01:b5:d9:1c:d5:14:dc:de:51:b4:ff:1d:16:7c:e3:
b2:1f:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:30 2026 by rpki-client