
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: dhzICZ5kPCx5AiVbl+RGW7/0uaef1KbV9lGQSlfXjAo=
Subject key identifier: D6:1F:B3:74:3A:CF:2F:81:A8:B9:D1:66:D2:AD:56:64:C7:86:32:62
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: EE
Signing time: Fri 17 Apr 2026 06:06:10 +0000
Manifest this update: Fri 17 Apr 2026 06:06:10 +0000
Manifest next update: Fri 24 Apr 2026 06:06:10 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: nK2V77etxa618D1hmgQsQOkL/ZK3nSrQqRK1tJvrIn0=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Apr 17 06:06:10 2026 GMT
Not After : Apr 24 06:06:10 2026 GMT
Subject: CN=69e1cdd2-273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:ac:15:da:8d:27:fe:77:dc:19:9c:f5:b9:
4a:40:0a:5b:12:63:07:9d:70:95:aa:fe:db:f1:6b:
11:b3:cb:97:fc:98:f0:13:a8:6d:e0:5b:be:c0:fc:
36:2d:4a:8e:95:ef:26:79:a5:98:5a:39:3a:3a:2e:
01:03:cd:08:cd:43:79:12:dd:b6:c3:dc:40:18:21:
66:75:34:56:51:47:c6:4a:14:ba:ab:01:56:3c:9c:
c4:35:d7:73:88:a4:cc:f2:33:79:2b:7e:22:29:6b:
4f:d8:f7:c1:b3:dd:8c:90:31:7e:48:9c:4e:b4:32:
54:7c:f2:25:3e:3d:e3:8a:88:7e:91:58:02:dc:ef:
e9:60:1c:19:a7:06:69:eb:8a:2d:5c:2e:ee:4c:71:
5c:0a:b9:99:26:c8:0c:e1:f4:76:24:d6:33:a0:6c:
0a:c0:86:7f:a1:70:39:ab:11:37:a8:35:59:ee:c4:
5b:fc:72:9b:cd:dd:4c:21:8b:f3:27:4c:c0:50:4a:
87:58:61:9c:11:2a:c4:96:cf:a3:b8:84:0a:91:c5:
2b:6a:fb:23:e2:23:0f:7c:e3:ae:18:34:0d:f4:ac:
6c:86:a3:40:c5:b3:e2:61:1e:5c:33:60:d2:c3:7e:
38:44:fe:1c:76:8c:6c:33:67:12:34:b0:d2:61:b4:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:B3:74:3A:CF:2F:81:A8:B9:D1:66:D2:AD:56:64:C7:86:32:62
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:eb:53:34:e5:03:80:b7:23:66:4f:e7:97:c8:77:1d:89:e5:
38:bb:18:63:19:7d:ce:1c:02:23:bf:3f:ee:c9:0f:be:d0:62:
38:a1:94:4f:69:7b:02:0b:21:69:01:12:97:28:03:6d:5d:d4:
48:2e:e2:99:83:0c:58:a0:88:36:59:f4:18:be:df:21:ad:2c:
e0:d5:74:6a:41:6e:e0:da:a3:12:6a:3e:cb:11:59:11:9d:37:
6a:98:2a:5d:35:a8:5a:93:e7:f6:a4:7d:d4:87:19:b4:aa:b6:
33:a3:53:27:11:31:e4:b1:c8:ed:e6:e4:2b:ff:63:55:1a:53:
75:e9:8d:de:b9:95:d9:c9:ac:fc:70:39:78:02:11:f9:c7:b4:
2c:4a:83:74:a9:f2:5e:43:ca:7b:b0:48:f1:df:6a:11:47:5f:
16:3e:aa:59:b2:8f:5b:ac:fe:ec:02:64:41:c4:7d:6a:61:b8:
7a:57:68:49:b4:f9:43:44:54:b2:c4:88:fd:f2:cc:43:e4:6e:
15:8d:d8:67:39:6e:c1:b7:94:b6:ee:ed:a4:68:06:fe:1d:54:
4c:bc:81:5f:99:28:ba:80:7b:f1:85:72:f9:2b:b5:e7:fe:16:
7e:8d:6c:3e:85:b0:a5:90:a0:41:40:7c:38:1c:e6:82:af:03:
57:f6:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:21 2026 by rpki-client