
$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File: MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier: swo5GAWtThpUp66XmmtIHJdJGXL4QftJsGDJ+e+/N78=
Subject key identifier: 5A:C1:F1:88:9F:15:4C:97:BE:F8:27:70:52:7C:96:C4:8A:49:22:F4
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer: /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number: 52
Signing time: Fri 17 Apr 2026 07:48:41 +0000
Manifest this update: Fri 17 Apr 2026 07:48:40 +0000
Manifest next update: Fri 24 Apr 2026 07:48:40 +0000
Files and hashes: 1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: 0H0PUNle7WDIDVQCudGv5+b463EvG1VbulqjjDjEEbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Validity
Not Before: Apr 17 07:48:40 2026 GMT
Not After : Apr 24 07:48:40 2026 GMT
Subject: CN=69e1e5d8-9f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:9a:41:f0:a7:38:18:da:79:2a:d4:d8:df:
a3:85:fe:fc:e4:06:b6:f1:a8:c9:ff:79:00:fe:fe:
ef:f1:9b:43:0f:c4:17:1d:31:4d:e2:88:9d:79:11:
ec:1a:da:47:ff:23:b5:33:d7:0e:3f:2a:26:0a:85:
22:bd:18:fc:11:1a:9c:c9:ca:86:5e:d5:52:e3:b7:
c4:c0:ff:28:4e:93:e4:fb:da:77:a0:aa:d3:f9:2a:
d7:c7:ca:01:1a:2b:7c:3a:75:49:d1:57:05:fe:5b:
4b:b4:54:e7:53:b7:ab:2c:8e:91:5e:a4:57:32:6b:
9a:4a:81:37:fa:52:30:dd:74:3c:2b:79:e4:97:a0:
68:ca:47:c5:50:77:59:34:ee:65:45:ed:07:6f:29:
e0:78:c5:03:78:33:ad:0b:f8:dc:78:1d:85:b3:39:
f6:bd:49:8e:f3:35:69:77:ed:e2:1c:59:84:2d:95:
82:f9:82:d1:4b:69:bb:fc:8d:2c:9e:1d:ec:cd:b2:
11:ce:2d:92:c5:3c:26:fa:36:11:b2:04:e8:cd:96:
36:57:9c:1e:d9:71:13:54:6c:9e:5a:65:14:a6:4b:
6e:9a:17:1c:43:9b:96:ca:8d:4e:aa:71:36:9d:99:
83:11:fb:5a:bd:84:b1:b5:30:c3:21:ae:28:9d:b3:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:F1:88:9F:15:4C:97:BE:F8:27:70:52:7C:96:C4:8A:49:22:F4
X509v3 Authority Key Identifier:
keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3a:3c:7c:d3:bb:c2:b6:5b:70:69:7a:d5:ba:d2:f0:7f:bd:
14:0f:21:cd:dc:90:33:e8:01:57:47:a8:ca:8e:9e:4f:16:d1:
26:e7:5b:e0:68:ec:f5:e7:eb:8c:0a:5e:d4:3f:70:76:49:38:
f9:d5:e1:44:15:52:0d:ad:b2:d8:12:97:c0:6c:29:8d:59:e3:
bb:d6:00:ed:c4:5a:90:82:3c:44:09:1e:03:d1:ed:e3:c1:71:
7b:e9:ed:8c:f2:11:df:56:5d:b5:51:ca:84:fc:09:1a:85:67:
91:65:84:18:65:07:ea:ee:1f:6c:b1:d8:b3:5f:d6:29:00:1b:
5d:65:bd:d9:8d:bf:37:d5:44:da:7c:67:d1:3c:d0:8e:75:6b:
0a:dd:0a:90:2e:1b:fc:08:e6:aa:bb:1f:13:64:84:2d:01:23:
2d:11:ea:51:bf:58:d5:8a:46:ea:03:0a:18:7a:46:4c:2b:30:
ff:da:06:19:f2:19:5b:05:b7:bc:08:44:78:b1:77:1c:bf:07:
07:b3:74:9a:d5:99:ea:da:51:1f:b8:24:1c:bc:d1:65:a6:02:
84:7f:7c:bf:f8:3b:34:5e:3f:b5:67:7a:69:76:6b:f2:ef:7b:
ca:39:a5:04:98:cc:9c:82:c2:48:91:71:ad:3d:1a:0d:ca:09:
6e:8a:f7:e9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDU5RTExMC8GA1UEBRMoMzIzNDAyREE2RjVBNTIwODIwMjEzQjJFRENCRkVDRUMz
QUM5MTA0NTAeFw0yNjA0MTcwNzQ4NDBaFw0yNjA0MjQwNzQ4NDBaMBgxFjAUBgNV
BAMTDTY5ZTFlNWQ4LTlmMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1oJpB8Kc4GNp5KtTY36OF/vzkBrbxqMn/eQD+/u/xm0MPxBcdMU3iiJ15Eewa
2kf/I7Uz1w4/KiYKhSK9GPwRGpzJyoZe1VLjt8TA/yhOk+T72negqtP5KtfHygEa
K3w6dUnRVwX+W0u0VOdTt6ssjpFepFcya5pKgTf6UjDddDwreeSXoGjKR8VQd1k0
7mVF7QdvKeB4xQN4M60L+Nx4HYWzOfa9SY7zNWl37eIcWYQtlYL5gtFLabv8jSye
HezNshHOLZLFPCb6NhGyBOjNljZXnB7ZcRNUbJ5aZRSmS26aFxxDm5bKjU6qcTad
mYMR+1q9hLG1MMMhriids2FtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWsHxiJ8V
TJe++CdwUnyWxIpJIvQwHwYDVR0jBBgwFoAUMjQC2m9aUgggITsu3L/s7DrJEEUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFL0E0NjVDQTgwQzM2
MzExRjA5REQ5RjYzMkM0RjlBRTAyL01qUUMybTlhVWdnZ0lUc3UzTF9zN0RySkVF
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTWpRQzJtOWFVZ2dnSVRzdTNMX3M3RHJKRUVVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw
NTlFL0E0NjVDQTgwQzM2MzExRjA5REQ5RjYzMkM0RjlBRTAyL01qUUMybTlhVWdn
Z0lUc3UzTF9zN0RySkVFVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXOjx807vCtltwaXrVutLwf70UDyHN3JAz6AFXR6jKjp5PFtEm51vgaOz15+uM
Cl7UP3B2STj51eFEFVINrbLYEpfAbCmNWeO71gDtxFqQgjxECR4D0e3jwXF76e2M
8hHfVl21UcqE/AkahWeRZYQYZQfq7h9ssdizX9YpABtdZb3Zjb831UTafGfRPNCO
dWsK3QqQLhv8COaqux8TZIQtASMtEepRv1jVikbqAwoYekZMKzD/2gYZ8hlbBbe8
CER4sXccvwcHs3Sa1Znq2lEfuCQcvNFlpgKEf3y/+Ds0Xj+1Z3ppdmvy73vKOaUE
mMycgsJIkXGtPRoNygluivfp
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:27 2026 by rpki-client