
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier: kfmXxT8MKIybdpoEWl0d6vly+ZRtQ6KU+C5EQDl4Pnw=
Subject key identifier: 45:E6:95:F9:12:3E:C0:EA:72:1C:A1:CE:C6:7E:D3:40:30:24:3A:05
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0DE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number: 0DC7
Signing time: Thu 16 Apr 2026 17:48:39 +0000
Manifest this update: Thu 16 Apr 2026 17:48:39 +0000
Manifest next update: Thu 23 Apr 2026 17:48:39 +0000
Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: I0Gc1i4xnfvThpQ1eZnnrTw0cDlcIdkqguy/d6fDJKk=)
2: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: 2tWM8vEG9F+dRzyZM43QfG2NHqOSxdnWZ0mFUqy61lM=)
3: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: n+1VIRJou+nBlWU6Es4cxB80UK2IiCMsqRaa75g/YvY=)
4: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: FAOH2k3QSSS7t1HJ3yvrPUgVPiND+/x5TUDnE1klS5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Apr 16 17:48:39 2026 GMT
Not After : Apr 23 17:48:39 2026 GMT
Subject: CN=69e120f7-92fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:86:d1:01:45:e8:92:a5:9b:a8:b4:b0:93:
57:46:19:16:b7:05:4e:28:11:4c:81:f6:77:26:6b:
2e:b9:bd:4c:a2:f2:40:48:48:98:65:0c:7b:9d:54:
81:cd:5c:bb:31:a0:57:db:4e:cc:1e:f3:41:5e:c7:
66:7c:a7:ea:ba:13:74:c1:fc:a8:5a:50:8c:e6:26:
a9:d2:89:06:15:38:2e:76:94:37:5b:84:24:09:4d:
a8:33:ae:5a:c8:0e:9a:1e:1a:1e:67:38:bb:4f:95:
e5:3c:ef:48:41:9f:67:6f:48:6f:14:12:e7:f7:57:
06:ce:20:4f:83:b0:ad:f6:6e:77:f6:c0:4a:73:76:
5a:6a:ad:b2:d9:a6:77:62:80:1c:f7:3a:ac:6b:bc:
38:88:55:40:63:6b:0c:1e:df:37:b2:e1:d0:9d:fe:
9f:42:8b:38:e5:ac:12:8c:54:22:0c:70:93:00:e8:
29:52:48:c7:37:88:fa:bc:76:da:38:65:9e:a8:37:
54:44:aa:70:0a:82:2a:79:e4:42:1c:21:7e:17:16:
93:61:46:9d:df:c9:55:c2:07:da:e6:78:41:09:ac:
82:1b:51:01:5c:e9:34:0c:92:42:10:d7:35:4d:46:
36:90:b3:e6:bb:36:a7:c4:b5:cd:ef:40:b5:ef:c2:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E6:95:F9:12:3E:C0:EA:72:1C:A1:CE:C6:7E:D3:40:30:24:3A:05
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:eb:da:8f:90:67:1b:9a:11:3b:92:d9:29:68:34:bb:22:
36:a5:e1:85:a0:6a:c9:91:a9:91:ee:5b:cc:b2:05:33:56:a3:
a0:6b:b8:5d:6f:8b:84:ac:cd:3c:f9:d6:16:d5:ad:88:50:cd:
93:80:79:e5:3a:6f:4a:ec:77:a9:60:be:ca:5e:cf:80:28:c6:
b0:1f:49:39:97:db:fa:10:a1:1e:18:1d:ed:83:6b:c8:d5:ad:
0b:15:c9:d1:72:bd:b3:ed:5c:68:2d:ee:b2:8e:0e:7c:54:cd:
8c:0c:12:c1:70:52:b2:c7:50:23:a3:33:c5:e1:97:ba:3e:51:
56:1e:8d:1b:a2:4d:d7:2b:17:f1:35:61:ea:cb:0e:9e:e9:87:
ae:2c:12:65:d9:bf:04:89:13:7b:e9:84:26:70:95:0c:ee:2a:
39:f5:c5:4b:fa:93:45:38:08:76:c6:07:8c:09:85:ae:96:74:
6b:74:1b:6a:c4:e9:a0:74:f0:29:6a:71:f0:43:e0:c3:03:37:
45:ad:b0:17:4a:e3:fe:58:fb:5a:be:2d:aa:5f:31:4f:ec:be:
a4:01:45:86:b9:ef:83:72:6b:81:81:c1:d2:03:9b:20:b0:60:
cd:4b:09:2e:18:8f:26:39:0e:fc:19:c5:00:ee:b7:fc:a8:80:
cf:52:fd:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx
QkQzM0JFOTkwHhcNMjYwNDE2MTc0ODM5WhcNMjYwNDIzMTc0ODM5WjAYMRYwFAYD
VQQDEw02OWUxMjBmNy05MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOqG0QFF6JKlm6i0sJNXRhkWtwVOKBFMgfZ3Jmsuub1MovJASEiYZQx7nVSB
zVy7MaBX207MHvNBXsdmfKfquhN0wfyoWlCM5iap0okGFTgudpQ3W4QkCU2oM65a
yA6aHhoeZzi7T5XlPO9IQZ9nb0hvFBLn91cGziBPg7Ct9m539sBKc3Zaaq2y2aZ3
YoAc9zqsa7w4iFVAY2sMHt83suHQnf6fQos45awSjFQiDHCTAOgpUkjHN4j6vHba
OGWeqDdURKpwCoIqeeRCHCF+FxaTYUad38lVwgfa5nhBCayCG1EBXOk0DJJCENc1
TUY2kLPmuzanxLXN70C178INrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXmlfkS
PsDqchyhzsZ+00AwJDoFMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5
RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi
YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZCfr2o+QZxuaETuS2SloNLsiNqXhhaBqyZGpke5bzLIFM1ajoGu4XW+LhKzN
PPnWFtWtiFDNk4B55TpvSux3qWC+yl7PgCjGsB9JOZfb+hChHhgd7YNryNWtCxXJ
0XK9s+1caC3uso4OfFTNjAwSwXBSssdQI6MzxeGXuj5RVh6NG6JN1ysX8TVh6ssO
numHriwSZdm/BIkTe+mEJnCVDO4qOfXFS/qTRTgIdsYHjAmFrpZ0a3QbasTpoHTw
KWpx8EPgwwM3Ra2wF0rj/lj7Wr4tql8xT+y+pAFFhrnvg3JrgYHB0gObILBgzUsJ
LhiPJjkO/BnFAO63/KiAz1L9AA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:55 2026 by rpki-client