
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: If0VIUjqwd1wwK6IFdO5chVqH7t7Wdqo/R19o26p564=
Subject key identifier: 07:59:0D:2A:78:8B:39:53:E1:E8:03:9E:EE:3B:C0:7E:0D:9B:77:1A
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 0729
Signing time: Thu 16 Apr 2026 21:48:05 +0000
Manifest this update: Thu 16 Apr 2026 21:48:04 +0000
Manifest next update: Thu 23 Apr 2026 21:48:04 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: IesUJQVo5bOp756gM5orz4acSArbKbdHKKWTmcRivEU=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Apr 16 21:48:04 2026 GMT
Not After : Apr 23 21:48:04 2026 GMT
Subject: CN=69e15914-a399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:04:15:fc:83:30:15:c9:e9:ba:93:c1:2b:
4e:07:8b:4a:17:50:85:59:02:31:62:61:7e:2b:c1:
9c:a4:ed:70:e7:38:f8:50:fb:08:ab:41:f2:0e:09:
50:82:dd:e2:9d:a1:ed:1f:15:47:b7:b2:5b:f1:30:
8d:07:dd:de:37:3b:5b:bc:eb:7e:e1:8f:9a:11:09:
01:01:9e:3e:ea:66:92:d9:04:45:76:3e:65:c8:27:
8e:81:5a:49:bc:6a:33:6b:ef:85:8f:c2:3b:05:24:
95:c1:9b:b9:f7:fd:75:f0:fc:f9:04:75:35:02:97:
1b:53:a9:4e:da:a4:b3:d9:95:dc:35:1f:8f:77:22:
9d:62:67:f2:a0:6c:b2:9f:58:0b:e2:84:b5:a1:2e:
0a:fa:f7:c5:7d:c8:43:54:3e:f0:9f:11:f5:c8:1e:
6e:5c:0f:65:d2:a5:53:e8:8d:cc:7e:03:60:51:7f:
e0:3f:be:6a:ed:6c:09:1b:86:4b:3e:0c:89:41:aa:
e5:3d:81:15:e5:56:b8:8c:e7:be:13:d9:90:30:47:
40:91:ce:bf:87:47:9d:f1:10:3c:65:20:3c:cb:ce:
73:4f:4f:48:da:08:a5:d0:3f:71:52:af:45:39:2f:
cd:02:8c:c8:0f:32:70:49:10:57:11:bd:82:76:98:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:0D:2A:78:8B:39:53:E1:E8:03:9E:EE:3B:C0:7E:0D:9B:77:1A
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:e8:45:68:60:95:4e:de:79:d8:f2:5e:72:ae:13:73:39:
80:75:88:ff:c0:e0:2a:05:a3:ca:bc:8c:0b:f7:0c:9c:d9:e5:
ae:d4:77:b9:59:89:10:fa:47:ad:03:fd:63:cd:82:79:36:14:
80:54:f9:ec:8d:fc:13:6a:0f:22:bc:82:c5:e4:52:57:42:65:
41:cf:ce:29:d9:7b:97:07:e8:71:d3:e8:5b:93:19:41:2c:f1:
e6:fe:51:81:4a:ff:b1:4f:99:e2:c0:f9:62:5d:14:a9:3e:c6:
75:38:e3:88:14:51:0c:b2:ce:bc:7f:16:51:55:2b:0b:99:41:
6a:67:ce:70:b9:09:82:ef:74:53:dd:e5:55:b5:5a:87:35:b9:
45:ab:21:6d:c8:39:24:34:c1:77:54:cb:ae:e6:15:60:17:83:
58:29:bb:99:21:4b:e0:eb:73:33:b9:e7:c0:eb:ea:c7:c9:2f:
69:bb:54:26:07:57:c6:81:e5:70:dd:b2:08:cb:d6:f8:63:3c:
03:35:95:5d:79:6e:69:36:6e:76:65:5a:89:f7:f7:06:fd:93:
e6:26:26:6c:e7:0e:e1:7e:62:cc:c3:01:07:2d:bd:4a:f4:8b:
70:7c:6c:c6:72:e0:8b:86:82:78:80:06:bd:ef:ea:42:cc:3b:
f3:f5:ab:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE
QzMwMTg0RjIwHhcNMjYwNDE2MjE0ODA0WhcNMjYwNDIzMjE0ODA0WjAYMRYwFAYD
VQQDEw02OWUxNTkxNC1hMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/wEFfyDMBXJ6bqTwStOB4tKF1CFWQIxYmF+K8GcpO1w5zj4UPsIq0HyDglQ
gt3inaHtHxVHt7Jb8TCNB93eNztbvOt+4Y+aEQkBAZ4+6maS2QRFdj5lyCeOgVpJ
vGoza++Fj8I7BSSVwZu59/118Pz5BHU1ApcbU6lO2qSz2ZXcNR+PdyKdYmfyoGyy
n1gL4oS1oS4K+vfFfchDVD7wnxH1yB5uXA9l0qVT6I3MfgNgUX/gP75q7WwJG4ZL
PgyJQarlPYEV5Va4jOe+E9mQMEdAkc6/h0ed8RA8ZSA8y85zT09I2gil0D9xUq9F
OS/NAozIDzJwSRBXEb2Cdpi1jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdZDSp4
izlT4egDnu47wH4Nm3caMB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD
Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzFDRS82QjA1NjA3QTdDQ0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5
RjZGZDJyaDBmRG5jTUJoUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ2boRWhglU7eedjyXnKuE3M5gHWI/8DgKgWjyryMC/cMnNnlrtR3uVmJEPpH
rQP9Y82CeTYUgFT57I38E2oPIryCxeRSV0JlQc/OKdl7lwfocdPoW5MZQSzx5v5R
gUr/sU+Z4sD5Yl0UqT7GdTjjiBRRDLLOvH8WUVUrC5lBamfOcLkJgu90U93lVbVa
hzW5Rashbcg5JDTBd1TLruYVYBeDWCm7mSFL4OtzM7nnwOvqx8kvabtUJgdXxoHl
cN2yCMvW+GM8AzWVXXluaTZudmVaiff3Bv2T5iYmbOcO4X5izMMBBy29SvSLcHxs
xnLgi4aCeIAGve/qQsw78/Wrkg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:02 2026 by rpki-client