
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json)
Hash identifier: ReczGRuAX02rCUCU01NNJ1xIWX1lInKLZtM4UpyZkOk=
Subject key identifier: 94:19:80:CA:0D:C6:31:8A:EF:04:57:AA:E4:C5:E9:48:6E:47:14:13
Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF
Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
Manifest number: 6C
Signing time: Fri 17 Apr 2026 07:34:41 +0000
Manifest this update: Fri 17 Apr 2026 07:34:40 +0000
Manifest next update: Fri 24 Apr 2026 07:34:40 +0000
Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: NAkkxX7jIjzRC10h6etNRhCoXdCwci5IK/sLY/KrGhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl
rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
Validity
Not Before: Apr 17 07:34:40 2026 GMT
Not After : Apr 24 07:34:40 2026 GMT
Subject: CN=69e1e291-72df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:4d:8b:72:38:14:20:76:24:09:2d:cc:4d:
d0:ac:a0:22:85:05:84:1a:d9:5f:41:19:c2:51:3e:
93:62:39:1e:2d:0b:fb:3a:4e:ec:b4:33:12:54:b4:
d0:b5:68:6d:43:8d:6d:23:2c:18:58:02:82:3b:18:
42:e6:4b:d0:d0:40:40:45:54:ca:26:98:be:16:f1:
2e:da:cf:a3:03:a7:44:d4:65:c4:f6:74:0e:22:90:
15:b3:16:24:0b:15:f9:55:cc:a4:03:f4:fe:73:27:
19:07:a1:dd:59:a3:ac:ae:bc:51:7c:d4:6c:ee:48:
3d:04:39:31:73:94:15:0e:3a:ce:01:3e:c3:7b:16:
b4:53:36:6c:3a:90:7b:ac:ad:23:23:cd:d3:b4:53:
e5:a7:b5:b8:66:66:e4:79:60:66:16:d3:02:ae:90:
ac:14:a6:75:68:bb:fa:38:7f:23:e8:45:2f:80:4c:
24:f2:d1:a0:e9:99:68:04:d1:26:b8:fa:a8:d6:c2:
a5:ae:4a:b0:b7:5f:23:a7:4f:68:84:6e:fc:29:95:
23:9e:cb:a6:28:67:58:68:5a:6b:74:81:52:17:84:
21:d6:72:bf:4b:7d:d3:6c:45:9b:4d:f5:c4:f5:59:
f7:ed:60:a3:0b:24:57:ee:f4:55:cf:02:09:1b:25:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:80:CA:0D:C6:31:8A:EF:04:57:AA:E4:C5:E9:48:6E:47:14:13
X509v3 Authority Key Identifier:
keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:af:b6:b7:b4:09:c9:20:d3:78:cc:9b:9e:3d:bc:c3:87:
be:fb:67:7c:d7:03:12:91:98:2e:fc:0c:75:ad:a5:27:7c:19:
ff:29:ae:40:40:3a:e7:c5:cd:83:00:02:2f:83:40:b1:73:dd:
53:de:d3:e5:b9:45:5b:89:ca:fc:25:1a:6c:d4:c8:f0:a6:72:
2d:3d:f3:fb:de:1d:dc:1f:88:3a:35:77:83:48:66:d6:fb:47:
01:e5:6f:ae:37:f6:73:5c:92:5a:66:de:f2:19:6d:89:d2:b0:
79:fb:21:ef:71:2f:dd:7f:b3:ef:9c:cc:b1:32:d9:88:d9:d8:
93:df:92:45:29:76:a2:64:8e:e5:48:51:9b:0b:83:d0:6e:85:
f8:ed:1d:89:4b:e0:a7:16:44:b2:6a:7f:24:68:19:03:a1:be:
ae:4b:38:9e:ed:28:79:59:56:84:4b:d0:b5:a2:0d:4b:c4:41:
3e:29:0f:41:32:dc:6a:78:9c:f9:b2:c3:22:cd:2d:36:70:46:
5c:c1:d8:0b:ff:1d:31:38:23:c0:91:5e:7a:87:f0:46:1d:8a:
a0:4e:2e:94:40:6b:0f:0f:ac:44:27:78:60:56:55:5c:9d:67:
6c:b0:b0:c7:ee:ed:9c:1c:be:84:63:1e:78:87:4c:33:ee:f2:
ad:6b:19:8a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB
M0I1NkNGRjAeFw0yNjA0MTcwNzM0NDBaFw0yNjA0MjQwNzM0NDBaMBgxFjAUBgNV
BAMTDTY5ZTFlMjkxLTcyZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyRk2LcjgUIHYkCS3MTdCsoCKFBYQa2V9BGcJRPpNiOR4tC/s6Tuy0MxJUtNC1
aG1DjW0jLBhYAoI7GELmS9DQQEBFVMommL4W8S7az6MDp0TUZcT2dA4ikBWzFiQL
FflVzKQD9P5zJxkHod1Zo6yuvFF81GzuSD0EOTFzlBUOOs4BPsN7FrRTNmw6kHus
rSMjzdO0U+WntbhmZuR5YGYW0wKukKwUpnVou/o4fyPoRS+ATCTy0aDpmWgE0Sa4
+qjWwqWuSrC3XyOnT2iEbvwplSOey6YoZ1hoWmt0gVIXhCHWcr9LfdNsRZtN9cT1
WfftYKMLJFfu9FXPAgkbJXwvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlBmAyg3G
MYrvBFeq5MXpSG5HFBMwHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2
NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF
RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo
ejl2V0c5a3BrTWFPMWJQOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBXeq+2t7QJySDTeMybnj28w4e++2d81wMSkZgu/Ax1raUnfBn/Ka5AQDrnxc2D
AAIvg0Cxc91T3tPluUVbicr8JRps1MjwpnItPfP73h3cH4g6NXeDSGbW+0cB5W+u
N/ZzXJJaZt7yGW2J0rB5+yHvcS/df7PvnMyxMtmI2diT35JFKXaiZI7lSFGbC4PQ
boX47R2JS+CnFkSyan8kaBkDob6uSzie7Sh5WVaES9C1og1LxEE+KQ9BMtxqeJz5
ssMizS02cEZcwdgL/x0xOCPAkV56h/BGHYqgTi6UQGsPD6xEJ3hgVlVcnWdssLDH
7u2cHL6EYx54h0wz7vKtaxmK
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:23 2026 by rpki-client