
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier: vmrlWgYH3JbOFolIb5Cq15TjV3vaaLEYAGwqkmwHeHw=
Subject key identifier: 4F:15:99:10:70:B8:78:16:9E:ED:AC:B8:2A:24:F2:B8:9D:9E:5A:89
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number: 50
Signing time: Wed 13 May 2026 08:23:44 +0000
Manifest this update: Wed 13 May 2026 08:23:43 +0000
Manifest next update: Wed 20 May 2026 08:23:43 +0000
Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: /VcXNdjNo7xhMw6sLivg7ckwS3CvLlysAgxV7Z8drL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Validity
Not Before: May 13 08:23:43 2026 GMT
Not After : May 20 08:23:43 2026 GMT
Subject: CN=6a04350f-cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:63:e4:28:1f:5f:b1:4a:a5:18:f4:cb:eb:
9d:fe:05:46:b7:66:6d:e7:0e:ae:13:9b:6c:44:23:
97:e9:e8:38:0c:01:ef:e0:75:13:37:47:77:1c:fc:
58:43:ec:36:06:a6:04:3a:2b:97:61:68:e4:5d:95:
27:3f:05:d0:1c:c9:fc:08:83:aa:19:10:c3:87:58:
1f:20:d1:39:ef:93:e3:a0:99:50:b4:00:fd:d0:ab:
a7:95:78:ca:47:4e:b5:e2:85:48:9f:d0:e9:30:8f:
f4:83:73:81:88:4f:ad:f1:a8:69:cd:74:4f:a4:a6:
2b:4b:73:01:5a:4b:58:c5:90:e1:6b:6c:b9:c4:83:
a2:fa:cd:8c:b1:23:fa:05:7e:06:33:5e:17:89:5c:
f8:82:45:41:7f:e7:ff:ee:0b:a3:a4:ed:4b:6d:65:
18:9c:b1:6e:4c:23:c8:7a:a6:66:c6:7f:28:5c:2c:
91:ad:5d:3d:ee:06:5c:f1:54:cb:dc:0c:f2:d8:f0:
7d:df:9e:a8:db:13:4d:32:ea:ea:37:1f:11:3d:58:
9e:5f:4e:1c:81:c5:f7:94:9f:a5:47:14:14:81:19:
0d:16:83:00:f2:74:82:e0:22:2c:64:91:fd:96:15:
66:09:2a:09:16:df:47:a7:eb:e9:69:44:9d:6f:e1:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:99:10:70:B8:78:16:9E:ED:AC:B8:2A:24:F2:B8:9D:9E:5A:89
X509v3 Authority Key Identifier:
keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:69:63:ae:6c:9a:0b:e2:59:72:b8:77:65:9a:cc:89:34:
c6:4e:2b:64:33:3f:e6:57:6d:f4:44:4e:b9:31:1c:8f:e3:29:
6b:96:b4:87:6e:00:98:3c:23:07:96:1e:4a:77:08:99:bd:a4:
9d:67:2a:1e:e1:54:13:cd:07:1a:2d:ab:eb:f9:89:bb:f5:1f:
cb:be:20:b8:b2:ae:91:32:a5:ec:56:11:7f:6e:8a:56:ba:87:
0e:f1:70:f1:b9:88:57:15:89:43:69:17:dc:da:3f:6c:30:31:
3e:de:f0:e6:4b:73:05:66:de:a4:60:0f:fd:38:06:f8:41:88:
29:8f:26:af:d7:8c:0f:17:82:39:02:d1:4d:83:2e:48:dc:67:
19:64:ce:29:8e:cb:d8:cb:57:87:0c:04:7e:ea:98:cb:f4:f0:
0d:d5:d4:80:65:66:6d:41:fb:89:d7:27:e4:2b:4b:45:93:1b:
4f:41:09:69:64:71:c6:58:c2:de:71:64:3c:12:61:de:58:71:
1d:a4:2e:8f:1a:e4:68:cf:40:c3:c0:bd:9a:4e:cc:09:0f:45:
34:85:8e:72:56:5d:fa:fb:7f:cf:a0:cd:56:51:0e:28:ab:ba:
39:5c:0b:6a:73:25:96:8d:45:2b:53:2f:40:78:b7:9d:a7:b3:
3a:20:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:01 2026 by rpki-client