
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json)
Hash identifier: zqUJdidlZ22gmRCKAMvjSCeeqkDugJER2SaCEglTKN8=
Subject key identifier: C4:3E:FF:0D:16:02:00:9A:9D:84:1B:97:BC:FB:E8:8F:43:4A:0C:81
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial: 079A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
Manifest number: 078F
Signing time: Thu 16 Apr 2026 21:25:57 +0000
Manifest this update: Thu 16 Apr 2026 21:25:56 +0000
Manifest next update: Thu 23 Apr 2026 21:25:56 +0000
Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: ZAu3mfuFlPz/cfL+VU3Su0PWfhPwV1S064GJIap7nPk=)
2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Validity
Not Before: Apr 16 21:25:56 2026 GMT
Not After : Apr 23 21:25:56 2026 GMT
Subject: CN=69e153e5-fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ac:4a:47:29:b5:ba:d1:45:51:ae:8b:9c:6d:
b2:04:66:d5:70:6f:e9:99:42:e1:0a:37:0f:bd:52:
d0:cb:be:05:05:fd:7d:8b:18:c8:82:2e:4b:73:77:
25:52:44:c5:83:3a:c3:cf:84:fc:43:d8:55:1d:c5:
2a:ed:0a:c5:95:eb:e4:8d:8d:01:ce:c5:6c:1c:7e:
26:f5:d3:44:ef:59:25:dd:01:43:23:5f:75:f5:8c:
00:6d:3b:f6:9a:4d:42:22:f0:d9:48:09:a7:d6:0f:
41:f1:45:72:49:9d:36:8e:0c:fa:00:71:e1:63:31:
38:50:28:c7:ec:29:63:2b:66:ad:b4:41:74:41:20:
e5:c0:da:9f:00:28:45:df:a9:1f:90:b0:19:1d:2d:
9c:72:39:be:c3:26:ed:b7:7b:47:ec:6e:07:50:2c:
84:c5:00:d2:dd:b0:b9:ec:17:f6:63:3a:be:de:16:
f9:4d:3f:76:47:df:d7:9b:a1:53:e5:cb:35:b1:8a:
23:b0:94:bf:22:9e:77:1d:31:91:09:dd:34:ac:93:
4b:20:85:47:c3:0b:b7:57:b3:df:20:d3:9e:62:d6:
07:96:4c:6b:63:dd:47:8a:ad:9b:34:90:a2:2a:16:
fa:29:c1:de:66:c0:71:91:a3:07:c5:f8:56:a8:23:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:FF:0D:16:02:00:9A:9D:84:1B:97:BC:FB:E8:8F:43:4A:0C:81
X509v3 Authority Key Identifier:
keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:be:01:3d:27:e3:6b:de:3b:c5:77:0d:16:30:d3:cc:06:
6f:7e:09:6a:71:04:4e:62:19:40:2c:dd:a9:6c:9e:ec:b4:20:
1b:95:c0:bc:7f:7f:52:83:bc:c3:9c:95:3a:72:a5:b0:08:34:
16:c0:0a:ce:f9:7d:3a:ee:25:49:97:02:69:6f:ec:47:86:14:
c6:38:c4:e4:34:19:63:0e:9b:d2:72:d3:04:6d:52:8e:0a:cc:
0d:36:b9:06:e1:ac:7e:d9:44:20:7a:1d:ab:73:f8:9f:37:6f:
38:16:40:09:d0:c9:30:6b:77:26:7a:7e:35:69:35:6b:38:86:
ee:e8:16:08:bd:19:88:fe:42:04:1a:e2:5f:ea:6f:d2:5e:3c:
7b:63:c4:42:96:8c:46:d1:bd:f9:a2:75:2f:4f:c4:b4:12:97:
e4:a5:13:db:dd:71:56:7f:51:e7:83:63:67:37:bf:77:36:25:
46:4a:4b:3c:1f:1d:62:f7:41:bb:99:b5:74:d3:4b:6c:7a:b4:
e2:a2:9d:0a:d9:f9:96:51:ba:72:71:ca:2e:ea:93:13:c0:14:
26:18:9e:de:c6:44:f4:d7:52:ef:d9:cd:6f:03:34:95:05:10:
98:75:f4:10:78:5e:a5:14:7d:5a:21:35:e4:81:dc:60:00:7d:
52:11:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:07 2026 by rpki-client