
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier: BCx35TLW0iukudjndYmuipcV+hzowtgcnIWl4AvlVrw=
Subject key identifier: 78:B6:73:83:3B:70:8F:ED:BD:63:37:EC:0F:3F:7F:41:CF:AD:87:A8
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 06:16:18 +0000
Manifest this update: Fri 17 Apr 2026 06:16:18 +0000
Manifest next update: Fri 24 Apr 2026 06:16:18 +0000
Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: m+LwZSguRElPFLxPEbnnThlRv72hH6fURZNPk8IEs2E=)
2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
3: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Validity
Not Before: Apr 17 06:16:18 2026 GMT
Not After : Apr 24 06:16:18 2026 GMT
Subject: CN=69e1d032-9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:6a:4b:cc:d6:23:b2:f9:28:91:14:92:fa:
c9:c9:33:47:93:8b:4d:28:e3:e0:7e:78:82:97:0d:
9a:17:88:a4:f0:c3:63:b2:18:f6:c5:35:ca:a9:76:
6d:b3:93:32:af:65:fa:f0:37:44:35:42:66:bc:9a:
73:75:73:f9:ec:89:b7:b2:74:20:04:c5:e8:c0:1b:
bf:d1:20:4c:52:3b:c1:8a:4d:69:11:9c:99:36:d7:
f5:a0:8b:35:94:9b:f2:8c:1e:d1:c9:82:39:61:a8:
e9:43:90:1b:09:af:83:db:e2:be:4d:5d:b9:de:38:
01:2e:44:bd:a9:c4:54:f2:65:9b:3e:f8:6b:09:72:
94:cf:b4:16:1c:cd:b9:96:c1:1d:e4:97:5c:2c:cc:
5d:59:eb:cf:78:90:da:d0:7d:06:6f:f0:6f:8b:8f:
26:70:86:bc:3f:a8:3a:52:03:2b:b2:d4:a1:2b:7a:
2d:50:c4:1a:56:ee:b0:63:f0:66:62:79:8d:7b:38:
7f:c8:c0:88:ad:e4:e8:f7:cf:d4:d1:5d:01:36:03:
be:83:69:6e:64:70:cc:67:bd:ee:5e:79:f6:04:30:
e1:ea:be:31:3a:41:11:a7:ad:62:bb:60:e7:ab:cd:
b3:19:f2:43:aa:dc:b1:ca:f9:e3:2d:e8:7b:bf:e5:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:73:83:3B:70:8F:ED:BD:63:37:EC:0F:3F:7F:41:CF:AD:87:A8
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:1b:e6:a0:ae:9b:c0:d8:1b:d2:9a:a5:04:5a:6f:fb:e0:
18:e1:ad:c1:31:1c:d9:65:30:55:e6:b1:48:46:f3:5d:e1:ef:
f0:79:cc:a3:14:6c:f8:08:59:da:ad:0c:36:70:1c:f3:5a:83:
ad:fa:62:fc:5b:d4:05:95:18:89:55:28:28:87:21:a4:b2:55:
5d:b2:fd:ee:e0:ac:bf:dd:8c:3d:86:3f:4d:f8:9f:df:43:3e:
4e:11:4e:91:39:e8:65:56:62:d4:0b:bc:fa:0b:61:49:cb:bc:
56:0b:9a:2e:40:11:19:33:7a:58:9c:bb:aa:24:b9:7b:19:0a:
57:15:e8:e9:a0:a0:0c:14:29:f5:d4:34:2b:05:6f:b9:e7:2f:
56:3f:42:b4:0b:8a:b6:74:53:68:30:b0:21:ca:6a:ef:fe:e6:
83:ba:7e:64:5e:71:da:c3:ae:f4:85:04:24:7b:9f:ef:d6:67:
8d:2f:01:50:47:ab:18:9d:d4:ed:4b:b8:a1:82:71:73:83:b1:
7b:bb:7d:8e:d4:90:0d:e8:56:26:e2:c9:ee:0a:f6:ee:db:47:
fa:2f:52:62:33:3a:aa:51:c2:bc:e5:9b:a9:2d:90:46:38:06:
94:10:b1:bd:90:8d:a5:4c:1b:22:90:80:70:5c:dc:fb:57:70:
0a:85:32:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5
ODA2QUU5QkQwHhcNMjYwNDE3MDYxNjE4WhcNMjYwNDI0MDYxNjE4WjAYMRYwFAYD
VQQDEw02OWUxZDAzMi05MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZVqS8zWI7L5KJEUkvrJyTNHk4tNKOPgfniClw2aF4ik8MNjshj2xTXKqXZt
s5Myr2X68DdENUJmvJpzdXP57Im3snQgBMXowBu/0SBMUjvBik1pEZyZNtf1oIs1
lJvyjB7RyYI5YajpQ5AbCa+D2+K+TV253jgBLkS9qcRU8mWbPvhrCXKUz7QWHM25
lsEd5JdcLMxdWevPeJDa0H0Gb/Bvi48mcIa8P6g6UgMrstShK3otUMQaVu6wY/Bm
YnmNezh/yMCIreTo98/U0V0BNgO+g2luZHDMZ73uXnn2BDDh6r4xOkERp61iu2Dn
q82zGfJDqtyxyvnjLeh7v+XBzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHi2c4M7
cI/tvWM37A8/f0HPrYeoMB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5
MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ
Yk04OHBCTjR3QkdZQnE2YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh34b5qCum8DYG9KapQRab/vgGOGtwTEc2WUwVeaxSEbzXeHv8HnMoxRs+AhZ
2q0MNnAc81qDrfpi/FvUBZUYiVUoKIchpLJVXbL97uCsv92MPYY/Tfif30M+ThFO
kTnoZVZi1Au8+gthScu8VguaLkARGTN6WJy7qiS5exkKVxXo6aCgDBQp9dQ0KwVv
uecvVj9CtAuKtnRTaDCwIcpq7/7mg7p+ZF5x2sOu9IUEJHuf79ZnjS8BUEerGJ3U
7Uu4oYJxc4Oxe7t9jtSQDehWJuLJ7gr27ttH+i9SYjM6qlHCvOWbqS2QRjgGlBCx
vZCNpUwbIpCAcFzc+1dwCoUyWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:35 2026 by rpki-client