
$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier: FvdEmxOnaRoxXHQJiNHWFO2bm6Q2IlegDpE/tNEx5xE=
Subject key identifier: 85:F1:43:97:F6:EE:71:D8:0B:C3:05:9A:A5:E8:A6:88:DA:B3:27:D3
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 03D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number: 03C9
Signing time: Wed 25 Mar 2026 00:15:55 +0000
Manifest this update: Wed 25 Mar 2026 00:15:54 +0000
Manifest next update: Wed 01 Apr 2026 00:15:54 +0000
Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: 4eg5BzgygElVNQ3Jul3wPmmRdwI/wrnE9nTqKMnV3kg=)
2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: eJU27ZylxWRdH4yTS7w9NECP9sf6xkVZe7M8HJ4Q68w=)
3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: 8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Mar 25 00:15:54 2026 GMT
Not After : Apr 1 00:15:54 2026 GMT
Subject: CN=69c3293a-48a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:ea:56:06:46:e1:6a:78:5b:21:62:31:c9:
58:bf:bf:77:76:79:8b:5a:88:e1:9c:5e:ef:91:f0:
2d:1e:01:8f:5e:bd:f6:bc:9b:b0:4a:2d:8d:41:06:
56:66:63:42:3d:f3:8d:d6:c4:da:83:8f:c0:c9:77:
da:42:88:7e:83:59:44:99:97:71:55:94:72:7d:7a:
a1:3f:ed:af:d3:0c:1e:cc:6b:4c:28:25:b5:53:c8:
f9:39:5a:03:ae:6d:c6:31:95:5b:7f:b2:8e:ef:66:
fc:83:2b:12:34:fb:fb:c7:59:89:54:80:b2:58:78:
4a:98:89:34:4d:3c:ba:8a:2e:3c:7b:74:d2:26:41:
f0:fb:4b:80:05:12:f7:4a:ef:e9:d7:aa:2f:38:b7:
61:3c:ce:e2:0b:c0:ee:7d:ac:20:f1:8c:5e:9d:01:
c8:6c:32:c3:d0:0e:f0:a7:0f:d5:ac:85:0f:b8:c8:
23:9b:ec:ba:e2:5d:a2:84:4e:6d:d9:fe:08:a0:ab:
77:50:df:fc:de:c7:88:72:4b:0a:cc:73:bb:96:4e:
d7:ec:59:8b:1a:99:62:40:d2:29:9f:b5:3b:bc:7c:
3c:22:9a:f4:e2:10:f2:6e:2c:05:6c:95:4f:39:11:
70:df:1a:3a:e7:de:5a:33:b9:56:4b:0f:7c:b1:59:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F1:43:97:F6:EE:71:D8:0B:C3:05:9A:A5:E8:A6:88:DA:B3:27:D3
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:25:35:6f:e5:6f:e9:93:10:2a:fc:fd:dc:81:8f:20:e2:
64:2f:a5:2e:ae:83:45:a8:79:fd:c1:17:24:fa:36:d8:d7:03:
ad:80:cb:5d:24:2d:bc:b5:9f:e4:f0:a2:9b:64:d7:87:c6:d8:
e5:54:fe:d0:dc:2e:c3:af:24:1a:5e:2a:81:31:c0:ee:3b:68:
1c:93:a4:ba:f3:a7:47:63:92:dd:81:9b:d6:90:7c:59:b5:32:
39:31:e9:f5:b3:c8:10:29:b0:7f:82:05:2b:e5:7e:32:72:03:
41:6e:9a:b1:7a:91:48:5c:7b:7f:4f:4f:c1:9e:14:17:6b:77:
8f:75:e0:ae:54:04:2b:ee:6d:5c:6a:9f:b2:96:ba:6a:0c:69:
f4:15:e7:2d:87:aa:0b:20:2c:b3:c3:10:3f:d6:da:a4:b6:c2:
9d:1f:6c:d6:53:07:b5:b3:6f:43:9b:46:a6:78:ab:5f:61:9e:
51:9f:95:88:46:7e:21:cb:27:c1:7a:97:d5:b2:0f:a7:03:ed:
e9:ab:c9:05:10:8d:87:81:4a:d6:c8:42:1c:4d:b0:21:14:f8:
47:4c:42:0e:f1:89:f5:d2:28:0a:d4:61:85:1a:b1:87:1c:76:
d7:4c:f4:b4:71:6b:a7:f3:de:19:09:79:02:dc:28:24:19:c3:
97:d6:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:23 2026 by rpki-client