
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json)
Hash identifier: DnoUuaPxQK7pfYk+TRO33VME2lV1YLAqJCVzS0CTUks=
Subject key identifier: 5E:BA:A9:61:4D:92:EA:E9:80:6B:EC:BB:F9:10:7B:BC:56:F4:E2:CE
Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
Manifest number: 0225
Signing time: Wed 25 Mar 2026 02:09:34 +0000
Manifest this update: Wed 25 Mar 2026 02:09:33 +0000
Manifest next update: Wed 01 Apr 2026 02:09:33 +0000
Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: HwTUbg5/9kuhzBjWJO0+N7pV8UlcXhF/gAYlLLMGmk0=)
2: E24E0BA8B31111F098769D68C4F9AE02.roa (hash: rS4Jmjvld3qJIqkZfLbrTQedxsO1rjw4S4K2o4vrnHI=)
3: 5D1FFF4EB31211F0AE01876AC4F9AE02.roa (hash: j30AFEnMbxC86k1L/yYKXVy6qpGNUVjCCUQu7SEDZBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Validity
Not Before: Mar 25 02:09:33 2026 GMT
Not After : Apr 1 02:09:33 2026 GMT
Subject: CN=69c343dd-2f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:31:2d:60:d5:12:36:53:ff:19:0a:6a:e9:
e8:39:0d:b9:f1:e2:78:7c:88:0e:00:8f:81:f5:b8:
01:d3:cb:cb:23:76:2a:75:e4:06:78:b7:20:8a:35:
5d:07:24:18:f4:ee:f9:8a:0f:15:ca:f8:0d:4c:40:
18:39:ae:09:41:36:97:91:64:c3:dd:3d:9a:ff:b3:
d1:3f:77:ac:4d:54:b2:ea:83:0a:87:03:7f:32:68:
32:8e:e5:20:27:fa:b7:c6:4d:c3:e5:f0:92:86:3b:
b9:a7:dd:b5:5e:42:3a:94:21:c3:1e:3f:b2:81:45:
81:eb:d2:d8:0e:08:27:0a:fb:cf:0e:af:18:60:87:
46:b0:46:b7:df:15:53:59:7f:df:fb:5a:23:34:ac:
e3:92:0b:31:e8:1a:b0:20:21:98:d4:75:51:38:45:
9a:21:df:98:ae:e6:ed:ea:84:ee:27:66:24:60:56:
e7:a3:34:0c:f5:f9:54:d1:e6:46:5b:6c:ee:7b:3c:
d2:95:74:e3:81:ab:99:97:ff:81:00:5f:26:a3:1c:
1a:23:b6:34:3f:37:e0:45:64:49:d1:38:98:17:a7:
06:d6:e2:24:76:9e:00:0e:5a:a6:7b:e1:a2:11:95:
de:33:77:3e:82:df:3d:3c:a6:51:02:93:d4:67:0b:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:A9:61:4D:92:EA:E9:80:6B:EC:BB:F9:10:7B:BC:56:F4:E2:CE
X509v3 Authority Key Identifier:
keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:38:4a:9d:45:9e:70:6e:43:4f:5a:31:06:b9:3d:26:c5:
0f:d1:ca:a2:76:c6:ff:b3:57:bd:0d:82:9c:fb:4a:73:8d:fe:
24:cb:bd:41:f6:14:84:4d:a3:dd:28:56:6e:9b:c8:08:dd:fa:
41:a5:ba:37:02:18:16:61:5e:be:96:37:7a:5a:6e:f0:f5:3d:
12:e2:3a:99:7b:a1:8e:e7:64:71:11:f8:6f:2a:33:dd:91:89:
25:40:9d:44:7e:dc:ef:32:5a:9d:bb:f1:f5:e3:2e:44:70:5e:
b8:37:85:97:73:df:a2:29:a8:b6:05:e3:db:b8:0b:89:23:af:
4a:b3:fd:b3:83:00:c4:1e:3a:67:72:08:36:38:9a:82:47:41:
14:0b:59:b2:24:33:fb:9f:10:1a:cf:e3:be:84:0c:99:2c:4d:
1c:69:8d:67:a2:0c:04:98:fd:ab:4b:90:4f:91:79:5f:00:ec:
e3:59:46:84:7a:8d:60:10:87:5a:48:06:46:27:be:9c:88:6c:
ed:66:19:1e:8c:d7:6c:03:1a:0a:9e:f5:ec:69:6c:8c:3d:12:
1e:8b:0a:ac:b1:94:e3:83:bb:b5:dd:95:08:22:0a:01:11:7a:
d9:15:b8:d8:4a:f7:d7:dd:03:69:b7:87:96:39:7d:26:da:57:
5b:78:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:12 2026 by rpki-client