
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: /TAalfjLx7nRu0WVZpEqFzIua/Cweu8U6qAvETYTz2k=
Subject key identifier: D2:75:64:E5:6D:75:AA:F5:61:CE:7E:B3:83:74:CE:A2:EF:68:0F:50
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0632
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 0626
Signing time: Tue 24 Mar 2026 22:29:28 +0000
Manifest this update: Tue 24 Mar 2026 22:29:28 +0000
Manifest next update: Tue 31 Mar 2026 22:29:28 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: aM1oYFYOaggtZYLC5qox9nOaZVkry3wFZ6CHECye6jM=)
2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: WB4/4aQXO0dmreo4i2lxjozeibXr37yGg+CXzqW0Gx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Mar 24 22:29:28 2026 GMT
Not After : Mar 31 22:29:28 2026 GMT
Subject: CN=69c31048-4543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:d6:95:2a:15:33:ea:e2:58:f5:0a:74:0c:
7f:6d:9a:02:3f:36:68:5c:ae:76:a7:9a:d3:20:8f:
d4:6e:a9:4b:33:e8:79:03:4d:b1:41:d2:7a:75:5b:
af:ca:e2:2c:6f:c8:3b:75:d6:11:09:e7:c8:7b:e7:
c7:95:60:94:74:87:09:dc:a5:0a:7d:54:8f:1e:84:
f2:e3:4e:f2:30:b4:f8:6c:ac:e0:df:04:67:52:14:
19:94:56:6e:a7:5f:4d:50:67:b5:49:3c:9a:6d:a1:
8c:24:83:c8:b1:52:e8:44:93:a8:b0:2f:66:7f:16:
2f:6e:51:83:f7:80:1e:8f:df:bf:82:da:d8:3e:71:
7f:a1:7b:10:63:43:69:83:33:40:fe:55:b1:9d:06:
c1:d4:7b:d1:26:33:89:6b:72:ec:24:a4:91:5c:e2:
de:47:db:2a:d3:e2:89:c9:82:e5:05:23:4a:ef:75:
8f:53:3e:38:ab:3d:d9:bf:44:73:fc:db:81:4e:87:
59:11:19:6d:00:28:84:54:9d:f6:f4:31:39:1d:b9:
de:c4:2a:d1:29:83:e5:6b:b0:15:9a:e3:c4:c0:3f:
ca:ee:56:ce:be:2f:16:91:cd:cb:11:cb:db:c7:bd:
df:9b:80:3e:04:30:e9:ab:28:63:67:f5:b7:fe:71:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:64:E5:6D:75:AA:F5:61:CE:7E:B3:83:74:CE:A2:EF:68:0F:50
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:4c:9e:91:31:81:33:0b:60:60:70:fc:fa:8a:63:2c:99:
29:80:7c:2d:70:d1:27:74:a8:54:6d:7e:e5:b3:ed:3f:b5:95:
75:bb:d1:7d:aa:59:c7:51:f6:ab:7a:a0:04:ca:00:1b:59:93:
9d:d8:f8:af:49:61:ac:44:5c:e1:70:a5:41:df:ca:3f:46:a5:
57:4b:af:a7:95:73:8c:4a:d5:6f:4d:d6:2a:04:d9:a2:d5:3b:
d2:9c:d7:3d:38:c3:82:40:2f:01:c0:a0:b2:49:0a:b1:32:c4:
41:6c:2f:5f:89:f7:5a:77:68:f6:cc:cf:41:63:8d:05:8b:c2:
75:35:a6:b8:3a:c4:b2:c0:97:db:28:6e:08:7f:29:2b:d2:53:
35:7b:6a:0d:bb:a5:05:49:ee:cb:2d:60:01:4f:7b:40:cc:6d:
bc:87:c8:9f:dd:5e:f7:83:f3:79:29:07:38:ba:70:f2:42:0f:
2e:51:06:70:28:e7:b4:e3:7e:6a:86:0d:d1:e9:84:c6:df:97:
c0:a0:8b:92:1a:36:39:da:e2:44:d8:49:af:d4:24:30:4b:02:
84:a8:de:d0:76:92:6c:b4:9a:6a:9b:12:6d:37:97:5f:b3:14:
ca:32:3c:93:5e:0e:9c:49:dc:d8:22:59:5d:ae:77:82:47:98:
23:6f:55:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3
M0NGQkY0REYwHhcNMjYwMzI0MjIyOTI4WhcNMjYwMzMxMjIyOTI4WjAYMRYwFAYD
VQQDEw02OWMzMTA0OC00NTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoenWlSoVM+riWPUKdAx/bZoCPzZoXK52p5rTII/UbqlLM+h5A02xQdJ6dVuv
yuIsb8g7ddYRCefIe+fHlWCUdIcJ3KUKfVSPHoTy407yMLT4bKzg3wRnUhQZlFZu
p19NUGe1STyabaGMJIPIsVLoRJOosC9mfxYvblGD94Aej9+/gtrYPnF/oXsQY0Np
gzNA/lWxnQbB1HvRJjOJa3LsJKSRXOLeR9sq0+KJyYLlBSNK73WPUz44qz3Zv0Rz
/NuBTodZERltACiEVJ329DE5HbnexCrRKYPla7AVmuPEwD/K7lbOvi8Wkc3LEcvb
x73fm4A+BDDpqyhjZ/W3/nH+TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJ1ZOVt
dar1Yc5+s4N0zqLvaA9QMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4
QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0
VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC0hMnpExgTMLYGBw/PqKYyyZKYB8LXDRJ3SoVG1+5bPtP7WVdbvRfapZx1H2
q3qgBMoAG1mTndj4r0lhrERc4XClQd/KP0alV0uvp5VzjErVb03WKgTZotU70pzX
PTjDgkAvAcCgskkKsTLEQWwvX4n3Wndo9szPQWONBYvCdTWmuDrEssCX2yhuCH8p
K9JTNXtqDbulBUnuyy1gAU97QMxtvIfIn91e94PzeSkHOLpw8kIPLlEGcCjntON+
aoYN0emExt+XwKCLkho2OdriRNhJr9QkMEsChKje0HaSbLSaapsSbTeXX7MUyjI8
k14OnEnc2CJZXa53gkeYI29VXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:11 2026 by rpki-client