
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json)
Hash identifier: WpUtIiiA982zS1xqFA+tB1ngnplNd7HcA0Ytraa/8yE=
Subject key identifier: 2B:75:46:53:33:D3:28:97:32:E0:38:22:81:26:4B:95:4E:C0:4A:AE
Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Certificate serial: 07FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
Manifest number: 07F2
Signing time: Thu 16 Apr 2026 21:08:27 +0000
Manifest this update: Thu 16 Apr 2026 21:08:26 +0000
Manifest next update: Thu 23 Apr 2026 21:08:26 +0000
Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: PQUHzr1OZu20v7xp4zC5skas//H4znUea4HhqqAYNH0=)
2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Validity
Not Before: Apr 16 21:08:26 2026 GMT
Not After : Apr 23 21:08:26 2026 GMT
Subject: CN=69e14fcb-95ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:e1:16:b9:d3:c5:3a:b3:17:5c:f5:36:91:
5a:1b:e7:12:70:69:45:90:a0:49:15:23:0a:f7:77:
83:91:27:47:0d:31:0b:d4:7a:7b:4f:5a:50:cb:b6:
02:0c:6f:19:17:f9:d5:f0:2c:55:fa:08:07:fa:7b:
af:ce:ee:63:d9:60:41:77:7b:64:c9:7b:34:c9:76:
58:b9:0b:b8:8d:f1:8c:ac:e9:5e:6d:be:06:62:18:
4b:11:53:f2:f3:4a:bc:d2:14:03:0d:ee:9a:8d:33:
a3:34:a4:37:6b:ad:cc:4c:7a:97:83:e9:ed:da:9e:
1a:42:6c:2b:f7:42:c1:4d:52:19:63:89:cc:a9:dd:
f1:7a:96:f0:f5:ee:08:1d:84:b6:ed:05:bd:1d:c3:
45:f7:c8:3c:86:90:f4:86:80:7c:39:a5:0e:f2:33:
14:a7:eb:53:1a:b7:32:d2:db:12:b9:14:e0:dc:ca:
6b:d7:d1:0c:36:49:e9:d7:71:65:04:ad:33:e4:88:
c8:e4:d5:31:94:cb:34:84:19:ea:33:c0:9f:f9:61:
19:68:7a:b3:30:3c:60:9f:92:a1:b0:65:9e:3e:1b:
28:f4:9d:d4:a3:32:59:7d:48:5a:60:3f:31:35:7b:
f2:08:85:8b:70:ae:ce:1d:ad:11:a0:48:61:ac:5a:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:46:53:33:D3:28:97:32:E0:38:22:81:26:4B:95:4E:C0:4A:AE
X509v3 Authority Key Identifier:
keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:3a:3a:28:68:01:9e:9e:31:38:26:12:fd:9f:d8:8b:81:b1:
52:cd:68:60:69:93:df:3a:a5:c4:dc:6a:08:82:77:a4:fe:25:
65:6e:35:a7:3f:d0:62:1d:81:f8:98:66:b2:82:80:a6:75:25:
de:d4:f9:c3:c8:40:f8:93:66:62:02:c6:02:3c:20:a1:39:4a:
09:84:81:9a:7d:6e:1c:a0:cb:89:6f:d9:f7:65:90:1b:56:51:
71:e6:fe:58:26:42:f9:53:69:ba:8c:38:36:65:81:e1:0c:1b:
18:e0:54:32:3f:b0:4b:b4:45:11:aa:fb:84:6c:64:5c:23:00:
2d:6e:ae:69:11:69:10:23:ee:90:c9:dd:b5:6e:cf:28:25:60:
bb:2f:85:d9:4a:60:4d:28:15:45:2f:f2:72:10:37:25:29:88:
d4:c4:74:7e:b8:bf:df:81:59:d7:3a:13:89:2b:fb:dc:37:71:
0a:cc:cd:de:ac:81:c9:cb:f9:33:57:1f:d5:c6:eb:f5:b8:7d:
21:da:99:98:0d:f0:9f:97:b7:a9:6c:e5:a6:1f:f7:78:10:99:
90:8d:55:38:4c:02:ef:5f:12:52:d7:5e:67:5c:d6:98:dc:9b:
58:e3:b6:21:f1:99:77:b8:c8:d8:91:e3:05:24:7d:38:23:63:
c5:67:8b:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD
REU0NjQ0QUQwHhcNMjYwNDE2MjEwODI2WhcNMjYwNDIzMjEwODI2WjAYMRYwFAYD
VQQDEw02OWUxNGZjYi05NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlzjhFrnTxTqzF1z1NpFaG+cScGlFkKBJFSMK93eDkSdHDTEL1Hp7T1pQy7YC
DG8ZF/nV8CxV+ggH+nuvzu5j2WBBd3tkyXs0yXZYuQu4jfGMrOlebb4GYhhLEVPy
80q80hQDDe6ajTOjNKQ3a63MTHqXg+nt2p4aQmwr90LBTVIZY4nMqd3xepbw9e4I
HYS27QW9HcNF98g8hpD0hoB8OaUO8jMUp+tTGrcy0tsSuRTg3Mpr19EMNknp13Fl
BK0z5IjI5NUxlMs0hBnqM8Cf+WEZaHqzMDxgn5KhsGWePhso9J3UozJZfUhaYD8x
NXvyCIWLcK7OHa0RoEhhrFolMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCt1RlMz
0yiXMuA4IoEmS5VOwEquMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4
OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp
TExjZW1wRG9GWFRONUdSSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZTo6KGgBnp4xOCYS/Z/Yi4GxUs1oYGmT3zqlxNxqCIJ3pP4lZW41pz/QYh2B
+JhmsoKApnUl3tT5w8hA+JNmYgLGAjwgoTlKCYSBmn1uHKDLiW/Z92WQG1ZRceb+
WCZC+VNpuow4NmWB4QwbGOBUMj+wS7RFEar7hGxkXCMALW6uaRFpECPukMndtW7P
KCVguy+F2UpgTSgVRS/ychA3JSmI1MR0fri/34FZ1zoTiSv73DdxCszN3qyBycv5
M1cf1cbr9bh9IdqZmA3wn5e3qWzlph/3eBCZkI1VOEwC718SUtdeZ1zWmNybWOO2
IfGZd7jI2JHjBSR9OCNjxWeLgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:41 2026 by rpki-client