
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier: VA19pyxiGLdj4eOsEF/DpkfQCJV2tEzBlV9WHXwK1GU=
Subject key identifier: 61:55:87:C4:91:E9:4F:25:74:8F:4D:3C:BE:2B:B9:68:19:18:EC:1B
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial: 0351
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number: 033E
Signing time: Wed 25 Mar 2026 00:39:42 +0000
Manifest this update: Wed 25 Mar 2026 00:39:42 +0000
Manifest next update: Wed 01 Apr 2026 00:39:42 +0000
Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: 5FfeOtCRvKpLaJLfbO9et7bRTMLzavfIedX3oqva4VE=)
2: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: 1aEsNWuZSx2JEx3Yb1eSlF/QSpBuCxTwM5H1dfUZSyo=)
3: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: piuNCheUHulrfnuIIuM3gfTCj5/ze3vgOF1Mh1XYJos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849 (0x351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Validity
Not Before: Mar 25 00:39:42 2026 GMT
Not After : Apr 1 00:39:42 2026 GMT
Subject: CN=69c32ece-f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:26:db:ee:84:65:71:de:24:de:75:54:bb:
66:4b:5e:f8:be:21:aa:32:eb:d8:9d:47:2b:90:35:
b1:76:68:43:26:cb:49:6f:57:fd:19:2d:ea:3c:d1:
a1:e3:8c:02:0f:ca:03:9e:66:0d:79:aa:3d:54:c2:
0d:01:c7:d3:e4:13:9c:a2:af:ae:ad:0e:4b:0d:22:
42:e1:60:65:2b:dd:8e:0f:2d:57:03:6b:fd:0c:dd:
a2:15:c3:78:49:4f:b9:8b:7c:cf:62:c4:61:df:fc:
8e:f2:ba:71:b7:d6:76:bc:f1:6b:35:84:37:aa:c3:
40:57:26:16:a8:de:cc:0b:53:4a:3f:e1:96:0a:d8:
47:57:1b:52:90:ae:4c:29:8c:24:8c:10:d9:1a:1a:
e6:75:0d:e7:2a:06:35:bc:52:a6:20:c1:ef:1c:10:
75:06:a9:e6:39:2c:8b:8a:8b:6c:bd:b8:7d:7e:21:
68:df:63:5e:ab:9f:64:8f:62:91:63:d5:d0:75:88:
88:c2:a6:de:78:36:30:59:e4:de:82:ab:0e:ad:c8:
98:bb:11:99:6f:94:bf:5e:9c:6f:44:57:7e:f8:cd:
0e:1d:be:89:67:68:6d:94:e0:e9:d2:1b:39:9a:2e:
d5:fa:bf:ec:71:c9:49:34:64:b7:46:6f:32:82:57:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:87:C4:91:E9:4F:25:74:8F:4D:3C:BE:2B:B9:68:19:18:EC:1B
X509v3 Authority Key Identifier:
keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:63:a4:15:15:e4:cd:57:42:ab:ea:e6:b7:7b:fc:4b:0a:
66:b8:ba:2a:e8:9c:15:45:e3:89:a0:09:33:3d:fc:7c:06:a3:
07:a5:00:d3:ce:d7:c4:b5:75:51:3b:7e:de:f3:54:34:98:57:
0b:b3:16:e8:5f:06:27:a4:63:77:8b:7a:a4:48:09:d9:8e:ff:
17:da:f7:00:4e:2c:8f:8a:3b:96:67:01:40:d1:42:dd:25:21:
99:5d:33:18:0f:13:5b:0f:f8:06:e9:19:5a:7b:c9:8e:f3:4d:
77:5f:5e:f6:7c:7a:9c:dd:c8:ac:b0:d3:8b:9e:f9:8a:f7:9a:
3c:39:88:d0:32:72:bd:ec:f8:9c:48:14:15:ea:9a:18:51:db:
99:ed:d3:bc:21:54:80:e7:dd:b2:ab:d9:15:60:9c:e8:ad:c5:
0a:c8:ce:a5:a3:44:bc:30:a0:1a:a6:d6:4f:a9:6b:fc:b8:88:
5b:fe:d6:4f:e7:e5:a2:80:20:b9:a2:ca:30:17:70:72:cb:d3:
ba:88:69:d3:98:ce:3d:d7:be:82:7a:e2:64:3b:e7:d6:a6:3b:
b1:27:b5:4f:a7:28:ff:55:f0:fd:ac:08:34:6f:cf:89:d5:1b:
74:35:2e:b7:1e:97:c3:d5:1c:7e:97:a0:45:79:6b:f4:32:4c:
ac:d5:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:50 2026 by rpki-client