
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: Vxo5bcLwCYpup7634RSPQP3Sr2jOgaddVlF71c5H8LE=
Subject key identifier: 45:30:36:88:51:5B:5A:BC:83:C7:3F:9E:AE:37:D6:6A:C0:09:58:F3
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: 6B
Signing time: Fri 17 Apr 2026 07:38:43 +0000
Manifest this update: Fri 17 Apr 2026 07:38:43 +0000
Manifest next update: Fri 24 Apr 2026 07:38:43 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: NaSMBmW2GioWY/1OeOpJlnADWcP3uOj9suOKUOGVsCY=)
2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Apr 17 07:38:43 2026 GMT
Not After : Apr 24 07:38:43 2026 GMT
Subject: CN=69e1e383-e80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f7:d3:79:4f:59:79:4e:29:8f:07:96:5d:5e:
5b:21:02:d7:85:d6:d0:e5:5e:28:55:2a:25:51:35:
0f:9b:1b:f0:62:25:86:b5:b3:de:8e:9e:25:33:d2:
cc:cc:22:d7:87:c6:c8:fe:ff:d0:d1:d4:fc:53:22:
50:fc:ab:64:63:2f:73:84:b1:9d:1a:76:6c:d9:4d:
2b:d2:89:ca:35:12:e0:01:c5:fa:f6:fa:22:6a:46:
9e:90:c5:08:6a:9e:0b:0f:41:2d:cb:3c:2a:90:d5:
ed:4e:f3:87:60:aa:70:82:54:f7:9c:45:92:77:d5:
3a:99:4c:34:7f:77:47:51:cf:26:4d:19:fb:dc:23:
a1:fa:5c:36:8f:ed:31:ce:19:04:06:8b:2a:54:df:
0f:93:5d:06:55:4c:76:d5:2f:dc:9b:86:82:c7:c0:
05:3f:cd:f0:bc:b4:3d:f2:06:61:4d:a4:65:4d:54:
02:87:8d:fa:24:13:b9:2b:64:8d:2d:77:21:6c:93:
39:37:42:58:a9:6c:8b:f3:a5:b7:88:4f:7b:c3:88:
c9:10:c9:63:ff:39:4d:59:a8:26:38:e0:df:b7:34:
f3:be:57:5a:63:d7:b6:c3:03:18:aa:a5:b2:10:1e:
2f:5c:58:1f:61:8d:4f:ee:34:ba:c8:27:aa:10:72:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:36:88:51:5B:5A:BC:83:C7:3F:9E:AE:37:D6:6A:C0:09:58:F3
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:fe:1b:07:8b:f6:a4:82:21:2f:0d:91:0e:6b:33:5a:3b:
fb:db:26:ec:76:f8:63:50:da:ac:23:da:95:d1:01:ef:c5:27:
55:4c:02:d2:a9:36:5b:81:13:8f:ff:01:d0:c9:a7:7d:db:b9:
74:6f:de:3c:ca:e0:1c:39:94:7d:1a:f8:df:06:5b:32:88:be:
fe:be:a2:b5:48:76:1d:b9:dc:aa:55:ce:79:3a:66:38:3b:dd:
c2:ce:4b:a9:01:04:b8:85:61:b7:6b:ef:55:05:06:d9:f3:6e:
45:d0:7c:18:61:b2:0f:f2:49:a0:8d:75:35:8c:55:f6:95:de:
22:2f:a2:93:77:4f:18:99:fa:52:63:d3:50:b5:96:9f:33:19:
54:9b:87:68:2a:92:23:89:17:eb:01:c7:77:99:6f:5f:3c:26:
94:a9:92:6b:18:9d:f6:78:80:d3:ee:f9:d1:54:20:e3:f5:60:
c9:6e:d6:26:6a:2e:e8:b7:8b:6d:42:77:d8:19:f3:88:73:49:
ba:12:c8:4e:30:e4:2b:4f:61:9c:0b:20:b8:71:da:a3:67:79:
b0:8f:21:bf:38:07:f2:90:e4:ab:0f:ac:63:d5:de:21:29:b2:
84:e8:b0:68:d4:0c:97:5d:6e:d1:02:15:62:f9:74:05:17:d8:
4e:93:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:09 2026 by rpki-client