
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier: Ahm5hp2NpOjz8uudHtIRAykR4RrFKGEGWn7uEqc/rSU=
Subject key identifier: 76:13:B2:D6:2B:DD:77:85:01:22:15:E9:64:6D:73:02:93:7D:80:E7
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number: 0299
Signing time: Fri 17 Apr 2026 01:31:57 +0000
Manifest this update: Fri 17 Apr 2026 01:31:57 +0000
Manifest next update: Fri 24 Apr 2026 01:31:57 +0000
Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: yLBL/m/4avRsF3BhmB+FD4tSel2XOQaZpexdotz6Jo8=)
2: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
3: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
4: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Validity
Not Before: Apr 17 01:31:57 2026 GMT
Not After : Apr 24 01:31:57 2026 GMT
Subject: CN=69e18d8d-accb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:e6:85:ac:39:c7:8f:b8:99:f7:9a:98:00:
a8:4b:3e:b9:eb:8d:d0:72:02:4d:28:06:b2:8b:64:
52:88:91:51:71:37:dd:8e:d9:16:bf:66:88:45:b8:
73:f0:39:fe:25:41:8e:5b:92:93:ef:2e:66:d0:53:
2c:68:75:95:cc:d7:52:a8:45:24:6d:f0:56:be:29:
3c:a2:88:ee:8d:ec:02:ec:df:20:89:8e:d2:d7:48:
04:3d:9a:c1:1b:a2:30:8a:68:4e:15:cf:f6:41:9f:
1a:91:6f:12:75:6d:f8:f9:91:00:e7:7b:60:8d:85:
37:46:0a:c6:69:8e:af:1e:22:fe:53:56:85:30:80:
43:6e:11:2b:8d:cb:a5:c9:42:d5:ad:96:78:fc:1f:
79:1b:18:39:05:47:f7:51:cd:f0:c2:78:f1:76:56:
a6:c6:0a:10:7f:8a:22:4c:49:0d:39:4e:2f:49:65:
62:02:84:52:7f:3e:6b:a4:7f:2d:f3:a8:03:ba:7c:
70:57:4a:e7:4a:1f:f1:ed:5e:2a:b3:f4:eb:22:a4:
24:75:17:0e:22:35:54:f7:ce:ef:10:6c:29:3c:d0:
f0:7b:b4:09:f0:e3:8d:a7:99:16:d3:e2:49:2b:78:
d4:fb:5a:d5:7b:fd:f3:ed:ab:ab:87:36:f6:3a:f2:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:B2:D6:2B:DD:77:85:01:22:15:E9:64:6D:73:02:93:7D:80:E7
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:0a:87:b3:ab:53:ea:76:8e:6f:58:60:1e:e3:b0:2f:2e:
21:97:50:cb:ff:d8:ab:78:d1:93:c2:e1:ee:b0:48:1f:a0:8b:
90:fe:13:c6:ca:f3:79:a5:ab:49:87:14:40:39:43:8f:55:8a:
93:2d:60:19:5e:bb:e7:3b:19:e0:2e:a5:07:8d:3c:1d:ce:9e:
02:9f:79:2e:ec:c6:09:be:95:fe:ef:88:b6:7e:84:ce:db:3a:
a7:c6:93:64:de:6f:72:1b:11:b8:50:fd:81:cd:63:e6:17:d2:
13:e0:75:ea:b2:81:4a:c7:6b:7c:a0:75:53:0c:81:17:d5:16:
f6:3d:da:d7:f7:1a:6d:f0:a2:a3:cd:fc:2c:10:30:7a:bc:12:
1c:3f:b2:fc:72:91:1e:1d:59:81:44:a0:0f:57:75:1f:4b:be:
50:d6:ee:1b:b0:a7:c2:81:2c:42:41:ff:fe:67:a0:e0:40:02:
86:0e:fd:f9:92:55:81:1b:b7:4f:f9:15:bf:e4:7c:35:0b:bf:
0e:7b:63:5a:4a:26:07:f2:e4:3d:5e:18:74:5c:98:e5:eb:c5:
c2:d2:79:ba:6e:8c:83:d2:d5:86:55:cd:f9:3c:7e:f4:89:ad:
7e:84:13:69:9a:27:35:de:27:4b:e9:09:0e:77:46:08:bc:0a:
5a:2f:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:49 2026 by rpki-client