
$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier: 4nnS9WVSOU48xIL3EOyTRk0ivx6SAUC/T4IzXa2U8Go=
Subject key identifier: 08:9D:F5:A4:47:D1:BF:F5:99:FF:B7:BD:C7:0B:2E:6B:61:05:CC:43
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial: 0EB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number: 0EA5
Signing time: Tue 24 Mar 2026 17:34:20 +0000
Manifest this update: Tue 24 Mar 2026 17:34:20 +0000
Manifest next update: Tue 31 Mar 2026 17:34:20 +0000
Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: lPXzHFwvruSkJqirQY+jdCJHVACnKJi0KI5P08COd4s=)
2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3763 (0xeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Validity
Not Before: Mar 24 17:34:20 2026 GMT
Not After : Mar 31 17:34:20 2026 GMT
Subject: CN=69c2cb1c-4294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:e6:85:15:38:03:bf:b4:c3:3b:e1:9f:32:
a9:b1:31:61:32:af:99:2f:9f:2f:0b:fc:97:76:69:
f5:ce:83:52:67:25:cf:13:a2:4f:f0:f3:36:72:c3:
d1:4d:3f:b1:ca:2d:8e:a2:e8:ec:35:01:40:ce:c2:
03:f2:7b:9b:c2:90:98:7c:e8:50:57:6b:9d:a0:4b:
8d:db:d8:14:28:a5:71:fa:93:88:2e:29:de:6f:7c:
6d:6a:6f:2f:0b:f9:fd:db:7c:7c:2a:97:9b:b3:49:
22:cd:a4:14:76:fa:34:d4:a8:ca:8f:06:28:bd:f4:
51:94:ae:fe:83:41:02:eb:de:91:d1:50:7b:6d:48:
88:76:c6:6b:84:92:be:6a:74:cf:fb:e2:40:b0:32:
16:e2:00:7b:e4:5f:5f:2c:2d:d7:46:57:8a:70:f8:
04:3a:0c:18:4a:8d:02:a4:59:e5:91:dd:41:0c:b3:
f4:e1:63:17:7b:cc:cc:5e:f2:c4:a6:93:5d:49:16:
5e:6c:5d:5f:73:9e:3d:a3:f6:fb:af:60:7f:c4:85:
89:73:f5:bd:3b:5a:89:b1:79:14:b0:63:e5:12:ad:
cc:a0:d7:9b:78:be:43:db:c3:a3:5d:58:f0:1e:d5:
6e:84:50:20:76:6e:05:e5:f2:94:64:75:44:54:5e:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:F5:A4:47:D1:BF:F5:99:FF:B7:BD:C7:0B:2E:6B:61:05:CC:43
X509v3 Authority Key Identifier:
keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:4e:ff:22:6c:08:6c:8f:46:75:25:37:93:e8:85:17:cb:
2b:1c:68:89:d8:a3:a3:08:be:72:5c:fe:d1:95:2f:a1:f9:01:
e6:88:40:04:c8:2c:dd:ec:45:db:45:ec:4e:a2:87:66:8c:f6:
2e:5c:2c:ba:d0:cb:6f:cb:37:23:d4:53:3d:79:11:ac:1d:08:
3f:f8:09:74:cb:ba:89:98:f2:81:f8:3a:50:6c:fb:13:f1:b7:
0d:ba:60:4d:91:41:98:47:1e:82:9d:39:fb:55:f9:27:3e:0c:
25:1b:16:46:be:43:92:06:4c:06:dc:07:c3:92:76:62:67:c7:
dd:20:e7:24:8d:9e:83:19:8e:6a:9e:c4:3f:e9:10:bd:84:24:
ac:de:25:65:52:5b:48:97:2d:79:43:91:47:b5:f3:da:b4:1a:
db:2c:a4:b9:b7:28:4c:d9:42:ac:bc:37:9f:18:fd:f2:12:1f:
d0:b7:27:42:a7:c9:7a:c5:78:b4:4e:6e:49:aa:e1:c8:35:eb:
56:c4:30:eb:59:be:a7:54:42:97:51:00:89:36:09:10:34:14:
18:9b:5a:f2:d5:ae:39:3f:a0:bf:4c:62:a6:6a:47:48:87:59:
b1:fa:f9:55:32:f8:7e:6f:b2:6d:e2:ef:82:bf:0a:9b:4f:be:
71:2d:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:44 2026 by rpki-client