
$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier: AWy5Idwdp0AD7aPj72lrasoKQsZxWYaqLExlzIm6ewk=
Subject key identifier: 49:31:D9:7A:20:D1:5D:29:5E:B5:75:55:70:88:C7:41:75:5C:25:4B
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number: 0274
Signing time: Wed 25 Mar 2026 01:22:27 +0000
Manifest this update: Wed 25 Mar 2026 01:22:27 +0000
Manifest next update: Wed 01 Apr 2026 01:22:27 +0000
Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: r7kSpEUY5OTw6qr5XvnMf3wjDwC7Qftrv7B5bCyCse4=)
2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: SrQLMleMB4YU3ZEQhfOBgMc2EpS7tNcL9YRSRP+wumw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
Validity
Not Before: Mar 25 01:22:27 2026 GMT
Not After : Apr 1 01:22:27 2026 GMT
Subject: CN=69c338d3-498d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:9d:62:3d:2f:1d:5f:56:3d:2e:41:b0:cf:
fe:1f:2e:b2:27:12:aa:36:94:4d:78:85:fe:b1:5c:
53:67:9a:e4:c9:7f:d5:a8:0a:08:19:37:61:16:f4:
df:57:74:61:90:f6:5a:5f:20:81:06:05:e7:de:ef:
92:12:0b:76:58:db:2c:05:1d:6f:6d:7c:21:78:ab:
72:41:46:cc:62:06:7c:2d:26:a7:e9:12:9f:6a:eb:
fc:6c:21:67:50:40:0d:da:8f:e5:72:e3:86:54:7a:
1c:4b:f2:2d:4b:49:0e:8e:d8:14:10:47:a8:8c:12:
38:da:99:f9:16:40:d0:03:86:39:ff:95:60:56:f4:
7b:5f:52:da:62:af:d1:20:42:af:63:eb:10:21:a8:
63:a7:d2:0a:2c:92:86:ce:95:5f:aa:d4:78:64:cd:
d5:15:70:03:91:e2:bf:6f:37:8e:9f:15:d9:0d:9e:
d4:7b:b4:fb:4e:43:48:3b:48:f8:67:c0:d3:a8:d2:
a8:0a:b5:1e:e5:2f:09:da:f7:5d:00:fe:12:48:aa:
1c:65:3c:54:6f:71:4c:63:9e:f4:8c:99:61:1c:75:
87:c4:aa:cc:2f:91:28:97:db:8c:de:cf:07:c2:ac:
7b:f7:75:b0:08:35:70:95:e9:fd:be:05:dd:1e:23:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:D9:7A:20:D1:5D:29:5E:B5:75:55:70:88:C7:41:75:5C:25:4B
X509v3 Authority Key Identifier:
keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:05:bd:54:70:82:b2:bb:a9:d2:40:c7:d4:dc:05:63:0f:8b:
4c:7e:06:ea:38:7e:95:fb:52:ff:90:54:8a:e8:57:19:ca:f3:
f7:70:ad:0d:cb:dc:83:0e:17:73:8b:54:68:96:65:7a:63:21:
2d:71:17:30:bd:c7:98:df:7f:e9:61:2f:b0:4e:8f:ae:ba:9d:
ae:be:22:32:a4:80:65:71:74:aa:ef:95:7c:25:ce:41:37:ee:
87:27:ac:69:f1:06:e8:83:83:30:33:55:b0:fd:44:43:ec:be:
d0:42:28:83:5a:ab:03:8e:65:cd:ee:63:46:c1:1b:ff:64:80:
31:25:34:ff:c4:8f:4d:6d:4a:a3:8d:ec:e4:5d:42:b0:82:25:
8c:8f:f9:88:88:76:94:29:ed:57:38:08:39:6e:61:05:1d:3d:
bb:c1:2f:07:b4:29:11:6b:6e:ba:2b:cf:a3:bb:3e:e1:45:95:
fb:a8:bb:28:58:1b:5d:1d:8e:10:4a:a6:1a:7d:e6:22:3c:58:
7a:ae:ed:fa:f7:85:2c:37:16:6f:dd:a4:7b:56:55:e2:98:f3:
a7:4d:a0:d8:bb:89:5c:c2:8d:f0:e5:f8:5d:64:48:35:86:5c:
09:b7:ce:4f:8b:f4:4d:fa:e8:25:16:ac:50:d8:74:fd:21:74:
1c:0c:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:29 2026 by rpki-client