
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier: uI7MHPqx7bR4akfLEE6OKp39a4w51towzIURRW3FF4A=
Subject key identifier: 00:3E:91:0A:74:C7:26:3F:43:6F:5A:DB:F1:88:73:DC:07:15:7F:E3
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer: /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 07:51:28 +0000
Manifest this update: Fri 17 Apr 2026 07:51:27 +0000
Manifest next update: Fri 24 Apr 2026 07:51:27 +0000
Files and hashes: 1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: NR1s2Aa2bk2bLRaSCHSMdBXRYyB9EMEgW36CPq299nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Validity
Not Before: Apr 17 07:51:27 2026 GMT
Not After : Apr 24 07:51:27 2026 GMT
Subject: CN=69e1e680-9e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:48:84:9a:f5:66:1a:4d:66:91:3a:42:6a:
d5:62:47:02:30:15:f1:50:93:4d:1a:61:06:4c:7e:
21:fe:c5:bf:6d:f7:9e:94:00:c5:44:95:0b:31:82:
ad:b4:07:e9:5b:16:ea:fc:cc:c4:05:9e:96:c2:ce:
bf:47:82:28:cb:42:22:58:cf:e8:c3:f9:8b:fd:5d:
9a:53:71:70:b2:5c:fe:db:17:50:77:38:98:68:fc:
53:88:ab:d8:6a:68:ea:fd:18:0b:9d:10:86:52:b6:
32:d4:d3:9d:ca:a8:88:f6:19:cd:72:65:25:84:46:
29:f7:a3:f1:a7:25:b2:78:b1:da:ae:1c:0a:be:42:
e1:46:6c:4c:80:85:e8:0d:d2:95:dc:ae:88:3b:ae:
07:50:58:02:95:53:24:12:09:52:03:74:a9:c4:01:
67:24:d7:cc:54:e9:87:ea:f8:5b:64:81:bf:4c:68:
5e:82:eb:13:2b:e9:6d:55:79:78:e8:08:13:18:a5:
90:2c:dc:4e:cc:7c:c3:7f:1b:e1:61:7c:c7:1e:8e:
cf:0a:b5:50:00:7a:1c:13:ed:29:31:48:5a:13:ea:
6c:9b:c3:86:68:45:f4:3a:ac:e5:2d:fd:9d:16:af:
8d:9b:ea:71:c5:be:fc:90:fe:e0:13:a9:aa:fd:27:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:91:0A:74:C7:26:3F:43:6F:5A:DB:F1:88:73:DC:07:15:7F:E3
X509v3 Authority Key Identifier:
keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4b:ce:8e:32:8f:aa:f8:25:8c:fd:6c:14:15:63:51:7d:9e:
32:eb:4e:ca:7f:b8:a2:20:28:85:9a:5f:e7:7d:40:8a:0d:15:
ae:65:ca:5f:79:d8:2e:45:e3:03:06:84:b3:cb:5d:24:67:de:
bb:d4:46:23:5f:13:38:f3:e2:4d:a4:a7:ec:09:11:a4:76:fb:
7f:b6:af:33:60:5f:01:d5:51:9e:b2:af:08:c4:f3:21:a1:2f:
ea:5d:08:d9:fc:76:34:9c:71:16:9b:f5:99:e7:9c:3f:c6:02:
f5:b0:4a:df:57:2e:fb:0a:ff:62:8a:2a:87:39:30:92:84:34:
24:93:f7:e5:28:8a:d7:e5:4e:ee:c4:f1:86:f7:3d:3e:6a:92:
c7:2b:c6:1f:9a:23:46:14:7a:21:02:72:77:d6:5e:64:1e:04:
78:18:41:69:fa:48:83:92:0b:3d:e9:a2:32:4c:87:69:9e:db:
7d:0a:c8:b2:03:69:cf:0b:81:6c:b1:a2:98:30:54:1a:c5:10:
e7:12:5b:82:ba:67:c9:c2:4d:22:2a:a3:63:38:9f:0b:0f:31:
43:7c:5e:ac:58:38:19:31:a3:bf:d0:89:21:fc:14:ec:6a:29:
a5:4b:56:46:19:6c:ea:cf:ab:0e:35:a4:a2:8f:d9:09:7c:c4:
b7:c3:b5:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QzdEMDExMC8GA1UEBRMoMjY3RTNEMzVEODExQTg3MkJGRURERjA1N0I3NUQ1NTBE
RTQ3RjcyNjAeFw0yNjA0MTcwNzUxMjdaFw0yNjA0MjQwNzUxMjdaMBgxFjAUBgNV
BAMTDTY5ZTFlNjgwLTllMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgk0iEmvVmGk1mkTpCatViRwIwFfFQk00aYQZMfiH+xb9t956UAMVElQsxgq20
B+lbFur8zMQFnpbCzr9HgijLQiJYz+jD+Yv9XZpTcXCyXP7bF1B3OJho/FOIq9hq
aOr9GAudEIZStjLU053KqIj2Gc1yZSWERin3o/GnJbJ4sdquHAq+QuFGbEyAhegN
0pXcrog7rgdQWAKVUyQSCVIDdKnEAWck18xU6Yfq+Ftkgb9MaF6C6xMr6W1VeXjo
CBMYpZAs3E7MfMN/G+FhfMcejs8KtVAAehwT7SkxSFoT6mybw4ZoRfQ6rOUt/Z0W
r42b6nHFvvyQ/uATqar9J/ifAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAD6RCnTH
Jj9Db1rb8Yhz3AcVf+MwHwYDVR0jBBgwFoAUJn49NdgRqHK/7d8Fe3XVUN5H9yYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDN0QwLzdFNTgyM0Y2QkQ1
QTExRjBCODlCMUQ2NkM0RjlBRTAyL0puNDlOZGdScUhLXzdkOEZlM1hWVU41SDl5
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSm40OU5kZ1JxSEtfN2Q4RmUzWFZVTjVIOXlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD
N0QwLzdFNTgyM0Y2QkQ1QTExRjBCODlCMUQ2NkM0RjlBRTAyL0puNDlOZGdScUhL
XzdkOEZlM1hWVU41SDl5WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDES86OMo+q+CWM/WwUFWNRfZ4y607Kf7iiICiFml/nfUCKDRWuZcpfedguReMD
BoSzy10kZ9671EYjXxM48+JNpKfsCRGkdvt/tq8zYF8B1VGesq8IxPMhoS/qXQjZ
/HY0nHEWm/WZ55w/xgL1sErfVy77Cv9iiiqHOTCShDQkk/flKIrX5U7uxPGG9z0+
apLHK8YfmiNGFHohAnJ31l5kHgR4GEFp+kiDkgs96aIyTIdpntt9CsiyA2nPC4Fs
saKYMFQaxRDnEluCumfJwk0iKqNjOJ8LDzFDfF6sWDgZMaO/0Ikh/BTsaimlS1ZG
GWzqz6sONaSij9kJfMS3w7Vb
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:48 2026 by rpki-client