
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier: daJIlx5L+ovmg8z5Scm/Bp8A1W1tud5Hr56sRR9ZwW8=
Subject key identifier: A6:34:91:B3:8B:EE:4F:F6:28:93:17:DE:B7:E5:BC:48:8D:7C:26:CD
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number: 43
Signing time: Fri 17 Apr 2026 08:07:28 +0000
Manifest this update: Fri 17 Apr 2026 08:07:27 +0000
Manifest next update: Fri 24 Apr 2026 08:07:27 +0000
Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 0LvTnyS0LGZRqXexuu/SIvFHgj8Zzhwg3Wybb0AywhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Validity
Not Before: Apr 17 08:07:27 2026 GMT
Not After : Apr 24 08:07:27 2026 GMT
Subject: CN=69e1ea3f-7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:1b:0c:40:a3:89:44:57:47:21:8d:a4:a3:
0f:d4:5b:ff:6f:d1:72:af:0e:32:81:3b:c7:8d:e1:
55:c0:09:9e:44:4b:e5:8f:55:9c:92:e7:3b:b5:61:
e7:58:63:2b:8c:26:6d:32:81:c9:14:a8:54:04:07:
c8:11:c9:71:c0:13:d4:11:84:7e:de:38:29:91:9f:
89:2c:f1:19:71:1c:26:18:c7:c0:ed:10:7e:59:29:
32:8d:d9:e6:b8:71:41:57:0c:5e:21:20:42:74:35:
50:5a:c6:19:1a:4a:ae:83:d6:e0:90:c3:e6:49:ba:
97:ef:04:86:ce:4f:d9:b4:99:2e:0b:3d:72:6d:a6:
da:b0:fd:93:73:5b:1a:4c:69:c9:1e:dd:ff:15:64:
35:ff:12:9d:d5:87:d4:4b:01:1e:69:0a:6b:66:6c:
d2:61:15:b1:53:3a:bf:37:cd:fb:87:37:d6:37:23:
50:64:cd:7d:97:66:86:53:88:d8:45:f5:eb:6b:c1:
07:a6:79:58:41:a2:9c:1d:75:01:cd:b3:ba:e1:89:
8e:3f:77:a1:bc:a3:ae:25:4d:78:20:dd:81:a9:b8:
93:6b:e7:15:fa:52:26:41:19:6e:d1:ea:11:4f:ef:
59:5b:19:9f:8e:98:b5:06:ce:ed:c6:9a:b8:b0:24:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:91:B3:8B:EE:4F:F6:28:93:17:DE:B7:E5:BC:48:8D:7C:26:CD
X509v3 Authority Key Identifier:
keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:e7:a6:3c:73:7b:6f:41:68:39:f9:d0:26:3a:f1:4b:17:
22:3f:6b:34:ba:58:69:a4:6c:14:24:80:56:c3:c8:3b:50:c8:
8a:25:bf:be:48:3b:ed:45:66:d9:d0:73:ea:fe:cd:23:99:5b:
a0:04:f9:fc:29:a5:74:f1:c1:5f:44:5f:ba:b6:50:00:fa:b0:
0b:1f:9d:ce:49:3c:5d:8a:73:d2:25:ca:2c:2f:ca:ea:fc:53:
3d:7d:81:15:79:e9:56:60:47:2c:e1:f9:f2:65:35:44:a3:f2:
49:b1:5a:b6:fe:b0:00:8b:e8:25:d7:94:63:13:06:da:49:02:
16:5a:eb:1d:5e:2b:ca:e5:11:a9:d8:67:4a:f6:10:3c:03:43:
ae:95:9f:3e:8b:40:1e:4f:f5:0c:b6:b9:72:3e:61:31:25:fd:
31:6d:d4:97:e8:cf:c2:21:e0:07:0b:e1:79:30:08:37:c5:e2:
3f:ef:aa:54:d3:b1:54:88:b9:75:24:a1:09:5a:7f:4b:80:e9:
3f:13:f7:29:63:19:bc:c5:ce:b2:f1:66:cc:af:60:b6:fd:cf:
47:98:bf:d2:e2:68:40:ea:bc:24:1f:9e:58:fe:57:18:73:0b:
2f:40:db:3b:04:52:fd:35:20:2e:23:32:90:37:ea:f0:7d:4a:
d4:69:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:54 2026 by rpki-client