
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier: Q3Hwm5JFCzs8p2wvE6CPM5hy2nq0UJJf4e1Q0u8p2O4=
Subject key identifier: EF:03:2E:F4:9D:7F:DA:41:2F:EE:05:0D:90:97:BE:72:0A:DB:FD:20
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number: 16E2
Signing time: Tue 24 Mar 2026 16:33:56 +0000
Manifest this update: Tue 24 Mar 2026 16:33:56 +0000
Manifest next update: Tue 31 Mar 2026 16:33:56 +0000
Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: aFh6/qlbuCV2bI2tRQ01Re+JuxyEBBorrakbrslE+Io=)
2: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: +rEb/LdR7pmZM7U89WKojR/oJ/jmTzp149mSoOh6/RI=)
3: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: oyYQ6+2tHZaxnwNYENb63S9A5XulHDdWe86HyvVSXS0=)
4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: yhZTT65gvcH6LyYySvWS1ePrRj5E9xVEzCutdCEo4ss=)
5: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: gTs7ErT29ODm4I2PW/8cn4DNflw+we74b7wIEYEwoK0=)
6: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: qv8edl3PP2lUfLEX63XMIljMaIJhob91NbUv2EBIJxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5921 (0x1721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Mar 24 16:33:56 2026 GMT
Not After : Mar 31 16:33:56 2026 GMT
Subject: CN=69c2bcf4-7acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:a5:3b:cc:69:91:19:f2:1b:e2:f0:1c:72:
cc:82:6f:96:0e:74:c5:db:ee:37:dd:e6:c6:87:aa:
22:0f:d8:a5:ea:d7:f2:be:24:7e:d5:d8:57:d9:07:
d8:e2:d4:88:8a:7f:b0:31:14:47:ed:cd:64:52:3a:
b8:50:8e:af:95:7d:17:49:a0:ae:5b:53:23:e1:d3:
d8:38:0e:83:22:a0:a9:e9:8a:a6:82:3a:33:57:d3:
c1:70:1a:8c:79:34:4d:ac:96:d6:ed:b7:5c:b4:56:
bd:d0:d0:53:84:b4:9e:5a:21:3e:dd:3e:2f:a5:a4:
71:c8:bb:fb:bc:e1:9f:4f:e1:cc:70:35:9e:26:67:
47:01:7f:0b:8f:68:c0:6b:33:24:8e:66:6f:19:54:
6f:4b:d7:0d:c2:d6:ca:5a:e2:32:0f:c8:00:2f:39:
10:0b:91:4c:cb:eb:b9:9c:2e:9b:d5:1d:33:bd:ce:
ff:9f:56:35:41:a2:f6:a5:24:4e:0a:40:6f:5a:df:
76:d3:78:10:69:70:de:31:ba:46:c6:6e:9a:c8:e0:
48:13:5a:16:0b:85:be:15:ad:45:03:34:0b:a5:f2:
54:32:1f:bf:97:80:76:98:e2:0e:5b:34:d9:1e:84:
19:51:cf:a4:5b:60:7e:70:06:cc:ee:99:b8:37:76:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:2E:F4:9D:7F:DA:41:2F:EE:05:0D:90:97:BE:72:0A:DB:FD:20
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ca:67:b4:ac:93:f6:aa:d6:64:19:d8:50:98:95:a6:79:43:
82:8b:e4:24:a8:6d:20:07:84:71:19:4e:bf:37:4c:10:13:57:
15:95:c6:72:a3:a5:01:36:48:7d:0f:f6:98:5a:6f:ab:48:7c:
16:e2:98:35:6a:cf:34:14:34:cc:75:fa:c3:40:91:c5:7c:12:
e2:b9:c5:55:37:47:63:4c:9a:97:cc:3f:31:48:69:23:b1:89:
d1:50:7a:d5:4f:cd:75:f2:87:d0:43:14:61:e3:42:ab:f7:f7:
b9:0b:58:aa:fc:db:89:6d:6a:b3:51:49:3c:5a:7c:29:3b:50:
af:5c:3d:05:80:3b:1f:4c:03:0c:4a:78:d9:b1:f3:6d:a5:76:
d0:98:a9:1a:a1:74:af:92:09:49:6d:78:09:16:3c:08:ad:07:
d8:95:4c:fa:67:76:71:bc:09:b1:e3:54:f1:a7:41:53:be:ef:
b0:40:52:74:75:91:75:c8:cc:d4:79:c3:98:01:64:fa:91:7d:
35:9d:80:6b:60:2f:37:75:a8:ea:4c:b0:46:b2:e1:39:84:ad:
24:4e:58:1c:3c:00:11:b0:03:68:86:59:1f:e4:4b:45:84:ac:
da:b8:b6:e1:5f:60:76:db:32:c5:9c:11:0e:0e:41:8b:aa:88:
38:bb:74:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjYwMzI0MTYzMzU2WhcNMjYwMzMxMTYzMzU2WjAYMRYwFAYD
VQQDEw02OWMyYmNmNC03YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOSlO8xpkRnyG+LwHHLMgm+WDnTF2+433ebGh6oiD9il6tfyviR+1dhX2QfY
4tSIin+wMRRH7c1kUjq4UI6vlX0XSaCuW1Mj4dPYOA6DIqCp6YqmgjozV9PBcBqM
eTRNrJbW7bdctFa90NBThLSeWiE+3T4vpaRxyLv7vOGfT+HMcDWeJmdHAX8Lj2jA
azMkjmZvGVRvS9cNwtbKWuIyD8gALzkQC5FMy+u5nC6b1R0zvc7/n1Y1QaL2pSRO
CkBvWt9203gQaXDeMbpGxm6ayOBIE1oWC4W+Fa1FAzQLpfJUMh+/l4B2mOIOWzTZ
HoQZUc+kW2B+cAbM7pm4N3a9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8DLvSd
f9pBL+4FDZCXvnIK2/0gMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D
TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApMpntKyT9qrWZBnYUJiVpnlDgovkJKhtIAeEcRlOvzdMEBNXFZXGcqOlATZI
fQ/2mFpvq0h8FuKYNWrPNBQ0zHX6w0CRxXwS4rnFVTdHY0yal8w/MUhpI7GJ0VB6
1U/NdfKH0EMUYeNCq/f3uQtYqvzbiW1qs1FJPFp8KTtQr1w9BYA7H0wDDEp42bHz
baV20JipGqF0r5IJSW14CRY8CK0H2JVM+md2cbwJseNU8adBU77vsEBSdHWRdcjM
1HnDmAFk+pF9NZ2Aa2AvN3Wo6kywRrLhOYStJE5YHDwAEbADaIZZH+RLRYSs2ri2
4V9gdtsyxZwRDg5Bi6qIOLt07w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:52 2026 by rpki-client