
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier: n1aNczhgOfL0RSUbIxePU6bf+7/fstUdONydpd/1sTM=
Subject key identifier: 82:B8:ED:6E:A3:EF:EE:C6:5E:EF:5D:A2:62:E7:48:E8:C1:01:A4:F6
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number: 018A
Signing time: Wed 25 Mar 2026 03:45:32 +0000
Manifest this update: Wed 25 Mar 2026 03:45:31 +0000
Manifest next update: Wed 01 Apr 2026 03:45:31 +0000
Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: AyChyGVTzVK01W1Qn2tAvX21ZvCg+ZjeGzmU0IAf2hY=)
2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: dV21RljBsPZXn1S1QDXxjkv9wNQTkd8R72gkZpqjyJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Validity
Not Before: Mar 25 03:45:31 2026 GMT
Not After : Apr 1 03:45:31 2026 GMT
Subject: CN=69c35a5b-6fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:82:6a:94:37:f6:f2:f4:41:2e:0d:22:1f:
48:29:56:2b:f6:74:a0:1c:2d:e9:6f:f1:43:92:23:
75:02:54:51:08:6d:d6:25:d2:88:ea:35:fa:a3:d9:
7e:dd:e5:c3:5e:60:78:2f:36:37:d5:9c:ab:f5:f5:
22:dd:b9:a6:f6:43:54:e4:09:10:4d:93:56:a9:46:
33:d3:f4:92:38:ae:2a:58:59:95:c6:52:4e:37:89:
32:6b:4f:4a:c5:07:98:80:5f:72:a2:2d:50:62:a3:
5e:f9:e6:33:61:b9:51:13:35:f5:90:59:b9:b3:40:
d4:b3:6a:04:ed:03:10:36:a2:8a:cb:18:17:81:4a:
be:af:41:91:51:76:f2:39:08:1c:73:02:23:0d:1b:
30:dd:0b:f1:87:30:5c:a2:96:f7:a1:36:b5:10:05:
51:25:f2:f4:ee:11:4e:4e:0a:c6:d9:ec:90:6c:e1:
ba:88:99:32:3b:07:de:2f:dd:db:9f:e3:d2:f6:d3:
f2:fb:99:cb:cc:1d:3c:49:f2:1a:3c:7f:47:b8:cc:
e8:19:7b:ba:30:06:07:87:9b:ec:39:7c:24:7f:10:
36:d4:3c:18:69:63:32:8a:f8:24:6e:d9:82:47:16:
25:a0:da:19:a2:f5:23:59:40:e5:c8:93:3f:0e:c6:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:ED:6E:A3:EF:EE:C6:5E:EF:5D:A2:62:E7:48:E8:C1:01:A4:F6
X509v3 Authority Key Identifier:
keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:8a:02:d4:8b:d6:ca:8d:9c:74:32:8e:5d:9f:89:70:a3:45:
b2:06:ee:29:59:ca:4d:ea:b6:8c:90:51:d4:a1:87:55:8e:59:
e3:f1:94:3d:51:b7:6d:ab:6b:11:d7:eb:27:e4:67:da:72:1a:
49:48:ee:11:d8:58:97:68:3f:a3:ac:70:8b:86:34:4f:93:25:
f0:b3:21:9f:f5:e4:5e:b0:03:f1:2a:06:1a:41:6e:97:9c:b9:
87:14:4f:12:b9:c8:57:de:81:c8:8c:6e:29:ca:86:50:d4:a8:
46:bc:99:63:2d:e7:29:a6:f1:e9:e7:51:0c:d4:78:80:2d:e0:
0b:33:d2:e3:8a:36:37:38:ab:b3:2a:b8:ec:e7:fb:5e:be:e5:
1a:fc:20:39:c1:76:b6:cb:40:64:69:d6:46:9a:12:64:90:ea:
09:73:2b:25:00:a5:71:77:7d:5c:7c:8b:62:b8:20:a1:b9:d2:
eb:2e:07:c2:51:4e:1c:f5:79:bd:0a:aa:f5:f3:19:55:18:e0:
c4:95:ca:52:39:b0:54:e0:66:37:2c:58:63:cc:10:5f:e5:7c:
3e:6a:09:88:3f:de:00:4a:e0:3b:d1:96:63:85:66:68:bd:4d:
bb:b6:c5:da:19:56:ac:37:48:51:ba:87:62:72:d6:5e:c1:d9:
d4:b7:d9:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0
QjBCQUQ2NjYwHhcNMjYwMzI1MDM0NTMxWhcNMjYwNDAxMDM0NTMxWjAYMRYwFAYD
VQQDEw02OWMzNWE1Yi02ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IyCapQ39vL0QS4NIh9IKVYr9nSgHC3pb/FDkiN1AlRRCG3WJdKI6jX6o9l+
3eXDXmB4LzY31Zyr9fUi3bmm9kNU5AkQTZNWqUYz0/SSOK4qWFmVxlJON4kya09K
xQeYgF9yoi1QYqNe+eYzYblREzX1kFm5s0DUs2oE7QMQNqKKyxgXgUq+r0GRUXby
OQgccwIjDRsw3QvxhzBcopb3oTa1EAVRJfL07hFOTgrG2eyQbOG6iJkyOwfeL93b
n+PS9tPy+5nLzB08SfIaPH9HuMzoGXu6MAYHh5vsOXwkfxA21DwYaWMyivgkbtmC
RxYloNoZovUjWUDlyJM/Dsa6GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIK47W6j
7+7GXu9domLnSOjBAaT2MB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw
MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU
OTlrbGFNY1htRmhMQzYxbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOIoC1IvWyo2cdDKOXZ+JcKNFsgbuKVnKTeq2jJBR1KGHVY5Z4/GUPVG3batr
EdfrJ+Rn2nIaSUjuEdhYl2g/o6xwi4Y0T5Ml8LMhn/XkXrAD8SoGGkFul5y5hxRP
ErnIV96ByIxuKcqGUNSoRryZYy3nKabx6edRDNR4gC3gCzPS44o2Nzirsyq47Of7
Xr7lGvwgOcF2tstAZGnWRpoSZJDqCXMrJQClcXd9XHyLYrggobnS6y4HwlFOHPV5
vQqq9fMZVRjgxJXKUjmwVOBmNyxYY8wQX+V8PmoJiD/eAErgO9GWY4VmaL1Nu7bF
2hlWrDdIUbqHYnLWXsHZ1LfZ7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:03 2026 by rpki-client