
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: 3CwCBpk9gPuPaF9mbCs954LnMURVya4F1PyOW794YXU=
Subject key identifier: 64:25:D3:5A:F3:95:88:34:28:53:4D:BC:AD:C7:2D:C0:08:6D:3A:B4
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0B54
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0B4A
Signing time: Thu 16 Apr 2026 19:11:21 +0000
Manifest this update: Thu 16 Apr 2026 19:11:21 +0000
Manifest next update: Thu 23 Apr 2026 19:11:21 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: +sBi3Jfg8Kzq4152A6KKxE8JHvHhnCXPJ3FzoSXUui0=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Apr 16 19:11:21 2026 GMT
Not After : Apr 23 19:11:21 2026 GMT
Subject: CN=69e13459-7057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:fa:b2:8b:95:e2:82:0a:13:31:56:86:d0:
da:8c:d1:a8:44:5c:91:f3:e2:58:6f:41:f6:ed:dc:
b5:c5:d3:9d:f5:e6:94:f3:68:0e:03:4b:ae:cc:b1:
35:f0:19:cd:ac:5d:3a:0a:ee:ac:e5:22:ce:31:8f:
b9:e5:7e:e8:4b:8e:85:e5:ce:72:3c:7d:13:06:3b:
c8:6b:fb:da:fa:d5:6c:68:31:8e:12:b0:81:a6:d4:
84:cf:ea:f3:34:d3:45:a1:ab:04:6f:8d:f7:01:d8:
fb:f6:67:c7:56:ff:1a:36:38:03:d5:f2:b8:d5:01:
5f:d4:82:0e:59:a3:a2:de:93:a7:a1:c0:50:b5:7a:
54:dd:b9:16:a8:c2:35:61:b7:12:f6:ba:6e:99:17:
94:9e:4e:d0:1e:32:3c:a6:bf:92:c5:f4:fe:fd:b5:
cd:98:2a:d6:81:c1:14:a4:1e:6c:fe:ec:8f:61:1d:
df:32:e2:2e:b1:e6:4a:5f:96:a0:47:44:f9:1c:9b:
75:f7:7e:08:4b:1f:33:a8:04:1d:12:87:56:c3:bc:
2f:ee:48:1a:6d:7d:48:25:57:14:b3:0d:8b:72:37:
71:2f:a1:8c:a4:d3:07:fd:59:04:14:93:7a:b8:e5:
8a:14:3c:f1:74:a1:f7:6b:4d:0a:25:27:1f:19:64:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:D3:5A:F3:95:88:34:28:53:4D:BC:AD:C7:2D:C0:08:6D:3A:B4
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:a4:f3:19:4e:08:47:38:90:24:1c:5a:4a:b6:64:01:0e:
00:a4:d4:09:69:4b:7f:11:f0:9e:37:ef:87:ec:78:9a:86:5b:
f0:50:55:cc:3d:a6:e5:f3:51:c4:89:b8:19:b5:16:0a:86:2a:
e2:ee:c0:5c:98:bb:5e:de:4e:6a:19:74:7c:74:be:74:6b:29:
2a:91:73:ef:ae:53:f9:82:b5:37:eb:94:fb:a9:e4:b9:7e:c2:
f4:71:06:28:5f:83:b3:f2:0a:af:09:49:eb:be:47:df:ea:71:
92:e0:21:45:4f:a3:ec:3a:f9:32:a7:4d:92:21:8a:43:b3:67:
d1:cb:d9:50:85:28:84:9a:90:c2:f3:9b:de:b0:8f:9b:b6:04:
82:3b:82:4f:cd:b0:93:6b:22:3d:6b:25:59:04:68:30:d8:ff:
e8:72:4a:22:4c:51:dc:c1:55:c2:2b:9e:2f:6c:62:0f:2c:f8:
c7:8c:60:f7:bb:92:f1:56:da:8d:25:22:5b:9f:80:70:37:4d:
0b:34:84:a7:80:eb:9f:2e:a9:23:83:19:b3:df:ae:0f:d0:2a:
c2:f9:ba:1f:6b:10:2d:19:03:c4:f9:62:b8:0f:5d:c4:5c:cb:
10:a4:11:81:79:fd:90:56:19:b2:2b:be:73:d7:11:65:01:ee:
ef:ae:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:55 2026 by rpki-client