
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier: O1Z4ljXHj1M4wLbiF4CyrdDDN30zQ0MQAGzwbqWpRoE=
Subject key identifier: 99:4C:11:09:82:39:69:D0:78:9F:29:78:70:04:25:57:94:AA:FF:6E
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 0B6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number: 0B52
Signing time: Thu 16 Apr 2026 19:09:02 +0000
Manifest this update: Thu 16 Apr 2026 19:09:02 +0000
Manifest next update: Thu 23 Apr 2026 19:09:02 +0000
Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: zhXxxobtz/LFmBnD07Q3dky7T3GpoZ/C+KUyElMTsfI=)
2: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=)
3: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=)
4: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2927 (0xb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: Apr 16 19:09:02 2026 GMT
Not After : Apr 23 19:09:02 2026 GMT
Subject: CN=69e133ce-1ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:d9:b8:06:7d:86:a4:19:be:bf:81:9a:9b:
89:01:ee:4b:46:12:8e:06:48:a4:63:93:b6:f0:60:
ae:8f:71:fa:7a:eb:ad:66:c6:10:7c:92:ce:d4:a5:
d3:4a:e6:a3:98:42:fc:fa:80:40:87:18:12:5b:d9:
e2:7e:7e:af:56:24:c9:28:7f:8a:f6:27:44:a3:68:
ec:d9:90:08:a1:90:1e:cb:77:9e:6a:d6:02:32:81:
6e:3f:4e:39:cb:48:df:ec:c3:6b:e6:76:c5:0f:e6:
6d:a0:6f:94:07:84:b2:ea:10:47:7a:2c:8e:05:f3:
6d:36:13:87:b2:9c:b4:29:d9:de:87:ee:f6:5a:df:
34:32:1f:c0:d8:90:07:09:ea:21:9f:ee:62:36:53:
59:3e:c0:e3:56:d3:28:c4:ef:35:e8:cf:25:01:d4:
4e:61:9f:22:0c:ed:76:c5:f7:f4:00:42:e1:f6:79:
d3:bd:16:89:d2:81:07:e0:56:b9:e6:38:fd:b4:c1:
a9:27:71:dd:e3:55:70:d4:fe:b0:48:c3:70:3b:e4:
eb:c9:b1:97:13:ec:15:cb:e5:f5:53:f8:35:49:07:
8d:a3:b0:08:e1:9e:20:9a:b9:02:88:b7:0d:83:75:
47:0a:0a:48:a0:76:d8:28:b7:ef:7c:d1:96:d4:a5:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:11:09:82:39:69:D0:78:9F:29:78:70:04:25:57:94:AA:FF:6E
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:8b:f1:0f:c3:f7:e5:19:ee:1a:44:d3:c8:a3:cb:2d:a8:39:
28:54:fb:75:13:f6:73:03:8a:a0:82:72:30:60:c3:56:fa:b0:
f4:4c:84:c4:74:77:0f:05:88:90:cd:fe:6a:4b:76:e4:a2:41:
9a:8f:a6:77:f8:3a:bd:43:28:25:da:29:58:ad:65:94:8d:58:
c5:1c:69:0a:a5:4c:04:93:82:1b:b7:47:b5:1c:a2:41:ab:f8:
99:50:67:8b:f3:8a:56:2b:39:95:63:6f:b5:14:75:fa:cc:93:
e9:7b:55:5a:97:e7:fc:f5:d8:27:1e:cd:e3:aa:0f:8c:4d:fc:
4d:6e:27:73:3c:a8:02:74:21:af:49:34:26:b7:81:46:65:6d:
76:e1:ac:80:b0:1e:32:0e:b0:5d:dc:18:1e:08:e1:f4:8c:f0:
ad:1e:c7:21:b7:1b:8f:b0:57:37:75:51:68:14:be:ca:e1:a3:
5f:32:51:5c:9f:27:99:01:72:be:99:aa:e9:b1:99:ca:49:e9:
59:e5:83:f3:12:2c:5b:f6:eb:c1:2f:25:9a:af:af:8f:9c:63:
4b:79:2a:b0:c9:55:91:a5:fc:1f:64:d1:0d:5c:a4:0a:c9:da:
d2:2c:f4:b9:ce:c3:40:e2:59:49:ab:00:b7:9d:5b:42:d1:54:
66:5e:1f:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE
MEMzOTYyRTcwHhcNMjYwNDE2MTkwOTAyWhcNMjYwNDIzMTkwOTAyWjAYMRYwFAYD
VQQDEw02OWUxMzNjZS0xZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuL7ZuAZ9hqQZvr+BmpuJAe5LRhKOBkikY5O28GCuj3H6euutZsYQfJLO1KXT
SuajmEL8+oBAhxgSW9nifn6vViTJKH+K9idEo2js2ZAIoZAey3eeatYCMoFuP045
y0jf7MNr5nbFD+ZtoG+UB4Sy6hBHeiyOBfNtNhOHspy0Kdneh+72Wt80Mh/A2JAH
Ceohn+5iNlNZPsDjVtMoxO816M8lAdROYZ8iDO12xff0AELh9nnTvRaJ0oEH4Fa5
5jj9tMGpJ3Hd41Vw1P6wSMNwO+TrybGXE+wVy+X1U/g1SQeNo7AI4Z4gmrkCiLcN
g3VHCgpIoHbYKLfvfNGW1KXd4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlMEQmC
OWnQeJ8peHAEJVeUqv9uMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2
OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto
eVo0blBDdC1ZNkxRdzVZdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmIvxD8P35RnuGkTTyKPLLag5KFT7dRP2cwOKoIJyMGDDVvqw9EyExHR3DwWI
kM3+akt25KJBmo+md/g6vUMoJdopWK1llI1YxRxpCqVMBJOCG7dHtRyiQav4mVBn
i/OKVis5lWNvtRR1+syT6XtVWpfn/PXYJx7N46oPjE38TW4nczyoAnQhr0k0JreB
RmVtduGsgLAeMg6wXdwYHgjh9IzwrR7HIbcbj7BXN3VRaBS+yuGjXzJRXJ8nmQFy
vpmq6bGZyknpWeWD8xIsW/brwS8lmq+vj5xjS3kqsMlVkaX8H2TRDVykCsna0iz0
uc7DQOJZSasAt51bQtFUZl4fnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:13 2026 by rpki-client