
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier: /TEvGo+yMcmQaFlru3IPdjNyF1ZIs1ovpDfRDSPp+iw=
Subject key identifier: 2A:A2:C2:6F:62:C9:45:0A:AB:70:C8:2F:D6:88:44:D8:55:CA:64:57
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial: 0B0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number: 0AF9
Signing time: Thu 16 Apr 2026 19:17:44 +0000
Manifest this update: Thu 16 Apr 2026 19:17:44 +0000
Manifest next update: Thu 23 Apr 2026 19:17:44 +0000
Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: tNsKbVykoAX2KijQrCFcINHHMXr6bZoyn5vwCW+IBLE=)
2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=)
3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Validity
Not Before: Apr 16 19:17:44 2026 GMT
Not After : Apr 23 19:17:44 2026 GMT
Subject: CN=69e135d8-9956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:26:eb:04:ab:c3:32:91:6e:f4:61:d1:d0:
25:8d:d1:e8:ef:59:fa:40:f8:55:e6:00:ac:9a:eb:
f9:49:93:55:dc:15:f2:59:d3:26:16:f8:01:ff:c9:
d8:fd:7d:68:88:57:3a:60:b5:ef:e8:5d:b8:e8:56:
aa:6f:c4:49:32:ce:b0:73:f6:f7:d9:86:0d:5d:db:
8d:3d:03:24:cb:91:28:5e:bc:bd:08:38:48:8e:bd:
cd:99:0a:09:2a:36:20:9d:85:03:2b:07:ec:cf:ae:
2b:bd:0a:83:fa:4c:ff:a9:d2:46:db:32:8e:f7:de:
76:6d:f6:e2:42:bb:27:30:e2:bd:26:c9:d9:61:d5:
1e:ee:d4:f3:87:95:de:1a:cb:85:21:b9:80:91:d8:
fa:64:bb:ef:fd:a8:cf:a1:65:1a:2c:6a:69:08:49:
22:18:f2:16:fc:24:50:ec:7e:cb:6d:41:dd:03:77:
db:9c:d3:78:70:13:50:59:d8:58:fa:ed:0f:7b:ac:
7b:e6:01:b6:b0:76:23:00:77:aa:8f:89:6d:d0:e1:
cd:dd:e6:d0:dd:a7:3d:30:fa:f9:ea:41:33:d6:fc:
b9:65:48:83:17:03:69:6d:f8:23:f4:ae:6e:1d:fc:
a7:bb:26:1b:c2:36:2a:6d:94:2d:1d:d0:62:a3:71:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:C2:6F:62:C9:45:0A:AB:70:C8:2F:D6:88:44:D8:55:CA:64:57
X509v3 Authority Key Identifier:
keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:cb:f1:9a:d5:cf:06:7a:de:0f:ef:9d:40:d0:57:45:5c:
2e:e9:3e:2e:f0:67:c5:66:ff:71:6e:3f:de:42:67:9b:35:90:
e4:8c:11:9a:9f:ef:ea:9e:c0:24:25:4e:e9:2f:f2:81:c1:89:
dc:83:27:4c:39:28:c1:ba:7d:29:f0:d4:77:53:0c:7e:1d:2b:
78:3e:6e:2b:4d:d5:d7:06:91:4c:67:f4:d7:4a:cc:28:f2:f7:
b9:fa:88:1e:5d:2d:a2:6a:76:79:17:1f:6c:95:44:d5:fe:5d:
f5:9f:8b:db:12:90:6a:e3:ce:cc:fe:52:1f:f5:93:8d:d0:b4:
30:01:04:78:74:1f:4a:47:73:62:88:64:65:db:e4:b1:20:42:
e2:00:df:50:2c:77:56:a4:3e:67:b1:66:90:28:d0:aa:a7:0a:
26:6a:a9:1c:5a:07:f5:76:a7:2a:06:b9:c9:e8:16:ea:4c:95:
9c:2c:8d:38:05:ec:f0:12:a5:91:50:91:44:ab:ee:cd:ed:f6:
57:c5:7b:69:0c:16:ef:e1:c4:39:26:8b:61:24:35:c3:aa:4c:
2f:41:6d:76:5e:41:cc:a5:06:4c:b1:d2:f5:b3:59:1c:60:d4:
73:ce:2e:25:65:ba:16:e6:9b:28:56:ad:a9:33:5a:f4:4f:cd:
3a:38:de:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1
QzM4RjUxRDAwHhcNMjYwNDE2MTkxNzQ0WhcNMjYwNDIzMTkxNzQ0WjAYMRYwFAYD
VQQDEw02OWUxMzVkOC05OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9sm6wSrwzKRbvRh0dAljdHo71n6QPhV5gCsmuv5SZNV3BXyWdMmFvgB/8nY
/X1oiFc6YLXv6F246Faqb8RJMs6wc/b32YYNXduNPQMky5EoXry9CDhIjr3NmQoJ
KjYgnYUDKwfsz64rvQqD+kz/qdJG2zKO9952bfbiQrsnMOK9JsnZYdUe7tTzh5Xe
GsuFIbmAkdj6ZLvv/ajPoWUaLGppCEkiGPIW/CRQ7H7LbUHdA3fbnNN4cBNQWdhY
+u0Pe6x75gG2sHYjAHeqj4lt0OHN3ebQ3ac9MPr56kEz1vy5ZUiDFwNpbfgj9K5u
HfynuyYbwjYqbZQtHdBio3H+3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqiwm9i
yUUKq3DIL9aIRNhVymRXMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3
N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy
WXFGVzNmZGQxM0pjT1BVZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfQvL8ZrVzwZ63g/vnUDQV0VcLuk+LvBnxWb/cW4/3kJnmzWQ5IwRmp/v6p7A
JCVO6S/ygcGJ3IMnTDkowbp9KfDUd1MMfh0reD5uK03V1waRTGf010rMKPL3ufqI
Hl0tomp2eRcfbJVE1f5d9Z+L2xKQauPOzP5SH/WTjdC0MAEEeHQfSkdzYohkZdvk
sSBC4gDfUCx3VqQ+Z7FmkCjQqqcKJmqpHFoH9XanKga5yegW6kyVnCyNOAXs8BKl
kVCRRKvuze32V8V7aQwW7+HEOSaLYSQ1w6pML0Ftdl5BzKUGTLHS9bNZHGDUc84u
JWW6FuabKFatqTNa9E/NOjje/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:12 2026 by rpki-client