
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json)
Hash identifier: tbaMWy9YToTXf0soD768vpCezFbnmA3lRxxYcxzobDc=
Subject key identifier: 4A:49:AD:02:97:34:FA:71:06:C4:11:39:4C:12:EA:A6:D8:A0:2B:55
Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Certificate serial: 05F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
Manifest number: 05DE
Signing time: Thu 16 Apr 2026 22:54:00 +0000
Manifest this update: Thu 16 Apr 2026 22:54:00 +0000
Manifest next update: Thu 23 Apr 2026 22:54:00 +0000
Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: pZhSedKhDpj0Grot/pgiXh78NOppW4G7h1xWnVlbu18=)
2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: E9L/fSBsEiJgj7MSEnbJce39tV6PzwUKgXlGLqPfyJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl
rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Validity
Not Before: Apr 16 22:54:00 2026 GMT
Not After : Apr 23 22:54:00 2026 GMT
Subject: CN=69e16888-d17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:e4:f3:2f:1d:26:c7:1c:45:15:50:36:c6:
75:6f:27:30:51:46:c1:41:ea:e6:81:c7:d5:55:b8:
4e:15:af:b0:b7:7f:ab:80:da:20:d7:63:18:bb:83:
ed:0f:7a:df:ea:87:51:9f:fb:10:30:d0:31:c6:02:
87:92:47:89:52:87:ef:2c:66:ea:2f:99:7d:7c:eb:
ea:1b:c4:38:83:45:34:b0:ce:9a:bd:f0:83:15:c6:
e2:cc:a4:c1:05:f1:26:cf:23:60:5a:51:bd:fb:24:
83:9a:94:ff:b9:b0:f8:e2:a1:5b:e8:3b:50:b6:bc:
98:66:9b:82:8f:af:41:19:d5:9f:26:aa:d7:18:12:
48:ac:9b:12:64:15:80:95:31:67:2b:49:2b:31:92:
2f:f3:2a:f9:23:52:4f:c8:8e:8d:f7:48:e3:49:f2:
58:50:38:f2:c4:0f:c9:c7:2f:59:32:3a:4c:92:71:
75:32:3e:58:e9:e1:db:30:81:1d:68:13:65:e5:b8:
99:2a:e2:50:89:a4:bc:c3:cf:ab:50:36:33:c4:e4:
c5:b9:f3:4b:d4:42:af:bc:f1:6f:dc:e1:1d:ed:10:
9f:d2:a7:03:5c:31:9c:a1:77:6b:e0:58:1e:c7:e0:
8c:86:6b:5d:dd:13:c4:59:df:1b:d7:31:de:ac:e2:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:AD:02:97:34:FA:71:06:C4:11:39:4C:12:EA:A6:D8:A0:2B:55
X509v3 Authority Key Identifier:
keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d2:05:4d:7b:e2:68:8e:e6:52:ce:ce:76:37:62:01:87:b1:
0e:51:7f:8f:6b:25:bc:4c:f2:90:5c:cb:64:4c:36:34:72:e9:
db:a1:07:b2:7c:f7:6c:3e:01:e7:80:25:13:db:d9:85:f8:4c:
aa:2d:6c:48:9e:ce:c3:fe:b8:d7:6a:c9:59:51:dd:9d:81:bf:
8f:e4:41:83:c5:95:b9:6e:84:00:23:de:ef:e4:e6:d2:36:04:
3e:e7:50:b5:ae:35:a7:71:de:b0:11:67:ac:2a:b0:fc:6e:f8:
80:52:a7:5e:9f:66:e7:34:67:7c:3f:2f:78:f0:a4:ff:8c:5b:
37:27:18:ed:5c:d6:1a:0c:d3:66:3f:b3:b8:30:18:03:23:c0:
84:d1:36:41:5f:ea:d1:92:50:c7:c3:32:ab:f6:79:a8:0d:ec:
7d:df:0d:e5:7c:3d:ed:f3:77:fc:17:78:a9:97:1b:38:e8:14:
06:f4:21:49:9a:20:2d:0d:4c:cd:e7:b0:be:15:41:26:b3:fd:
fa:eb:c1:8e:3b:12:4e:cd:e6:13:50:37:24:c2:ce:ef:dd:a7:
1f:c9:cf:8f:f2:07:2d:6e:d2:49:4d:07:1b:b7:a8:80:80:09:
50:7d:e4:f7:93:ed:2f:81:96:53:1f:e7:29:9d:ac:6b:3d:61:
b2:1b:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:26 2026 by rpki-client