
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier: mnfmPVw3LEiikxW+i9Dc5cdhaAbljQMqhJDm3OLLXpc=
Subject key identifier: 22:AC:70:AA:1A:6A:0F:F2:0D:EB:58:D1:DD:D2:7D:90:58:98:09:62
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0AE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number: 0AD6
Signing time: Thu 16 Apr 2026 19:21:16 +0000
Manifest this update: Thu 16 Apr 2026 19:21:15 +0000
Manifest next update: Thu 23 Apr 2026 19:21:15 +0000
Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: yag8lAjku+KkGe30IcTJeLbBYScaq9ctMykeDYoh2qE=)
2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Validity
Not Before: Apr 16 19:21:15 2026 GMT
Not After : Apr 23 19:21:15 2026 GMT
Subject: CN=69e136ab-e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:bf:a8:05:2e:7e:e7:14:6d:54:59:4e:0b:
f4:14:cd:4c:20:13:9a:05:4c:d6:b5:a1:ae:6a:66:
4d:35:f0:0b:4d:bb:3a:c9:87:ee:49:cf:c5:7f:20:
63:ba:fc:f7:cb:e4:04:96:75:e6:1c:20:ca:d5:6d:
aa:19:e6:c5:55:8e:31:a7:93:c5:74:b8:09:8a:5a:
58:2c:c0:15:db:76:23:28:f4:d0:3d:a9:bd:6a:0e:
78:2f:ba:b8:6e:9b:28:6e:ab:bf:69:ea:f3:13:93:
58:7c:12:59:77:4e:68:52:cd:da:3a:7a:1f:10:30:
6d:fc:11:59:d9:f4:bf:d3:6f:09:6a:7a:a6:4f:bb:
29:10:59:d6:c5:9e:3b:ed:48:9d:05:a5:8d:0a:35:
63:69:6a:f6:ce:94:50:45:92:c6:a9:34:71:8b:54:
03:6b:a8:38:ed:9a:53:6c:50:b8:95:4a:b0:44:32:
62:a9:c3:3c:bd:ff:b8:d4:7e:51:d8:2d:c8:b5:91:
44:9e:85:b7:f9:e0:35:77:94:78:b2:73:4d:6d:47:
15:ca:be:70:1c:e4:4a:70:02:36:ff:56:28:64:39:
99:a7:35:e0:36:81:e3:44:60:65:6b:42:32:64:80:
8e:dd:a4:95:4f:05:d6:d6:ba:be:e7:64:76:cd:cf:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:70:AA:1A:6A:0F:F2:0D:EB:58:D1:DD:D2:7D:90:58:98:09:62
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:3c:bb:75:47:2e:e7:3e:4c:bb:f4:8a:5b:9b:89:39:e5:
16:fa:dd:e2:90:69:96:9f:9b:4f:0a:2a:8f:cf:c1:aa:33:19:
96:d5:96:2e:fa:c4:ae:e4:ea:79:f1:f8:45:cc:11:54:56:2c:
36:fe:ae:63:9d:5f:4c:43:35:53:be:ad:e6:4c:9f:86:6c:ff:
54:0c:df:c5:bf:66:d8:7a:1e:d5:88:a9:24:e0:ec:00:10:67:
57:0a:74:f6:a3:df:f2:21:74:37:80:1b:b1:32:7f:78:3c:9d:
43:35:52:cf:08:a9:91:8c:59:0d:e0:05:f9:03:34:d5:ee:06:
f6:db:3c:93:cc:c3:1b:89:0c:fb:80:a4:5a:c1:39:f6:e6:fa:
59:8d:9f:81:a0:fc:f5:96:4e:49:3b:57:73:87:ba:58:58:99:
df:cc:5e:c2:e3:a9:7c:0e:36:0c:b5:2c:ff:39:36:5e:ea:a1:
0f:f7:ac:11:12:34:3a:e3:88:f7:18:e5:eb:81:e2:f4:17:f1:
84:4c:e7:c4:8c:12:7d:a1:b4:d4:2a:35:b5:5b:a5:03:c6:ad:
6b:7d:c0:8a:2b:b8:43:2e:90:ec:1a:1d:ab:82:f9:ac:2f:98:
bd:95:f6:ad:cf:37:a4:6a:a4:97:0a:e5:79:a7:3f:1c:66:7e:
e4:f8:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:27 2026 by rpki-client