
$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier: ORHpWPjm3gBfqjroOmXWhPo1N2xbvC5jIrnkdncTyVA=
Subject key identifier: 93:90:20:78:D3:31:66:AC:9E:31:D2:AA:64:39:72:2B:AA:08:9A:90
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial: 215F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number: 2157
Signing time: Tue 24 Mar 2026 15:51:30 +0000
Manifest this update: Tue 24 Mar 2026 15:51:30 +0000
Manifest next update: Tue 31 Mar 2026 15:51:30 +0000
Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: x+ZMtWt9Km9XnMXDLdDpBpD157fOubIeJqs1RLPVNI8=)
2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: 0ZctJGOGr8V49Vrfxq/lUVmvk/WtRWnujAySxgKwvsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8543 (0x215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Validity
Not Before: Mar 24 15:51:30 2026 GMT
Not After : Mar 31 15:51:30 2026 GMT
Subject: CN=69c2b302-4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:55:25:ab:16:4f:6f:a7:86:51:e1:75:e6:
8e:5a:ce:25:bc:fe:d0:58:5d:7e:32:a4:6d:9b:6e:
22:e8:f4:fe:87:f0:df:42:f0:aa:b1:d6:8c:1e:5d:
08:29:ee:18:d4:d8:5a:ad:b5:b0:76:e5:39:9e:63:
67:33:71:14:ac:ec:dc:0f:d9:76:eb:f5:d0:ff:b2:
ca:fa:76:06:18:e1:f6:00:b9:3f:85:cb:3d:03:14:
29:d8:28:71:9e:d0:42:dc:0b:7e:5a:0c:dc:c2:7a:
d1:4d:80:e1:df:83:1f:3b:be:43:ac:4f:6f:36:af:
80:06:c1:16:7a:bf:7d:c8:ed:fe:6c:43:93:75:f5:
f4:79:c6:9c:8e:97:14:c1:d3:cb:36:68:6e:48:48:
61:00:8a:f5:13:a7:d8:ac:9a:86:91:ce:3f:4b:61:
0c:46:e7:bb:f7:24:1a:08:bb:11:af:a7:ec:19:0a:
1f:70:85:bc:8e:83:b4:26:e7:00:96:71:5f:9f:ff:
13:02:6b:fc:21:be:8c:b6:a8:cb:2e:56:fd:ae:f8:
75:29:14:50:ac:70:ed:79:6e:a3:e7:38:c1:bf:c3:
f2:2d:f1:cd:56:62:c7:34:82:d2:1e:ee:41:3d:c1:
4d:13:ee:13:0e:ce:4d:6f:dc:6f:fc:d8:85:7b:62:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:20:78:D3:31:66:AC:9E:31:D2:AA:64:39:72:2B:AA:08:9A:90
X509v3 Authority Key Identifier:
keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:56:81:74:ab:ad:52:ca:78:6b:1d:29:08:a3:f6:98:ea:
ce:63:97:3b:8b:13:48:c2:b7:f7:51:05:44:5a:13:74:c3:bb:
aa:8d:a1:46:1f:a3:aa:25:f7:6b:ec:e7:92:31:5d:a5:18:11:
19:75:5a:33:12:cb:1b:c0:ae:ef:80:b9:dc:f6:49:a3:bb:11:
91:2c:bd:3f:24:fc:36:e9:12:dd:62:0b:48:2a:49:db:5c:54:
f6:cf:02:1c:2a:ef:a3:4e:25:2f:8f:18:cc:e1:84:c8:92:22:
02:9a:a1:23:51:fc:5b:b9:52:aa:79:70:7c:09:50:ee:1e:c4:
ef:8e:37:ba:3b:a7:c9:91:b1:bb:57:9b:94:2d:c0:9a:8c:88:
79:d5:64:79:5c:1e:4f:8a:48:66:38:5b:77:81:f2:12:1c:14:
00:76:35:ec:a8:54:42:63:2e:aa:fa:21:2b:b2:35:9c:40:fb:
cd:d6:70:00:1d:8e:bf:ee:08:d0:ec:72:20:69:19:22:d6:ce:
02:2f:c8:59:46:11:70:12:74:80:86:bf:ac:e0:b9:ad:f9:4b:
3d:90:66:62:21:4a:2a:ed:7b:7a:e6:68:9b:d2:7e:8c:e5:4b:
c6:99:1c:c3:bd:8f:cd:96:ee:08:bf:89:1d:76:64:cc:5a:69:
4e:95:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:35 2026 by rpki-client