
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier: 7jaEEK3KglJGRldNrzFu9fbRbmIOVC86WiZB+G7WFFQ=
Subject key identifier: D3:C9:65:D5:F8:53:7E:B4:01:86:29:7A:F1:C3:29:2E:95:D0:A0:55
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number: 0221
Signing time: Sun 19 Apr 2026 02:32:56 +0000
Manifest this update: Sun 19 Apr 2026 02:32:56 +0000
Manifest next update: Sun 26 Apr 2026 02:32:56 +0000
Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: vDzZJ3n80YB/sgZ8nLGvwQcF+DUvumW6GSU3ZO22laE=)
2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: 9E0ybMJC/4hTirDP7PsTEfHbwzsW24pJ3Ey1HCuEb6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Validity
Not Before: Apr 19 02:32:56 2026 GMT
Not After : Apr 26 02:32:56 2026 GMT
Subject: CN=69e43ed8-8d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:a8:ca:f6:e4:65:2d:1f:0e:6b:dd:db:0d:
3b:aa:d6:ec:76:fe:92:99:75:cf:57:2e:b2:7f:d1:
d8:9f:e0:28:de:ec:43:cd:4a:01:8d:c6:2e:77:89:
b3:e9:e2:23:83:c0:5b:d6:f8:c1:97:98:1d:ec:9a:
49:44:58:15:fc:d1:10:00:2e:8e:1f:d8:a7:04:76:
22:b6:ee:ff:b4:22:ea:7c:7b:d4:13:80:aa:58:2a:
34:da:5a:ca:ce:64:1c:49:37:e5:8b:25:d3:e1:f5:
32:c3:59:51:3c:88:3c:69:7a:21:72:f7:fa:42:76:
3c:9e:86:20:67:5b:79:46:c7:b9:84:80:07:a2:86:
74:36:f2:e9:cf:2d:79:5e:8f:c9:c4:b6:6f:a3:d4:
21:00:94:c6:0d:c0:e3:14:a0:52:72:a7:cf:36:69:
cb:d9:5c:74:5a:3e:02:84:f4:de:5f:4c:f4:b4:d9:
2c:79:c1:2f:2a:22:11:e5:af:fc:96:72:da:47:93:
0a:a6:b5:18:8e:4e:b9:c7:1b:6c:81:2d:ae:8c:64:
ad:e0:fe:d1:32:53:9d:44:26:9c:ed:a7:f8:e3:e5:
24:26:a6:3b:94:54:70:e0:92:ef:db:17:aa:fb:1b:
24:ae:a8:d3:c3:25:75:58:eb:e7:30:9a:5e:b0:16:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:65:D5:F8:53:7E:B4:01:86:29:7A:F1:C3:29:2E:95:D0:A0:55
X509v3 Authority Key Identifier:
keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:58:03:77:e7:c8:20:d1:ff:3b:2c:0d:2d:92:c3:76:37:
67:85:99:d1:df:4a:01:60:8d:04:28:ec:08:92:42:2b:47:74:
cf:77:d2:a9:97:91:1e:1c:07:cb:ba:6e:6d:2a:e2:4d:49:04:
92:dc:fc:55:31:7a:e7:0d:7e:48:b7:ae:ef:a2:c8:fe:e5:f0:
0c:de:72:0e:d6:7f:79:ef:51:1e:fa:c6:c4:25:0a:8a:9d:cb:
ac:c8:1d:7d:5a:e2:10:1c:2e:cf:7f:42:0f:55:05:1a:50:04:
78:e8:e2:46:8c:4e:c7:8c:e3:07:18:75:30:9a:46:5d:24:dd:
cf:37:f4:15:1c:93:17:ce:dd:a0:bb:7d:08:10:c8:11:52:c0:
d4:9f:3d:65:80:df:7f:ca:d2:49:4d:79:aa:c6:c2:f4:70:9c:
53:f7:8d:14:56:72:0f:62:de:91:76:f4:44:1b:70:0e:a2:b4:
96:c0:ff:dc:c0:86:e6:ae:62:e2:e0:f6:20:0c:26:f0:f9:f3:
4a:e2:40:59:37:3d:c7:5c:31:fe:9b:d6:d5:b3:b8:b8:be:66:
7b:0d:7f:b7:f2:82:ba:31:bf:e5:11:71:0f:44:66:2f:9c:82:
0c:24:1c:d3:a0:4a:27:41:7d:60:79:79:97:69:3b:65:e3:32:
6e:04:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:02 2026 by rpki-client