
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File: J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier: 56TZofzFXy5MOyYt5DrKRajbU6t7Jhlf/4G0SaLYuv4=
Subject key identifier: E7:FB:91:65:9F:AF:D5:1A:8F:63:A0:FB:CB:8D:E2:DF:F7:47:18:29
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer: /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 06:21:21 +0000
Manifest this update: Wed 25 Mar 2026 06:21:21 +0000
Manifest next update: Wed 01 Apr 2026 06:21:21 +0000
Files and hashes: 1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: ArLibj6jDXYole/veb3qtRyccBZLw0oe1h+/p84gmoo=)
2: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: RmZJEnExUw2WVaDlvDUuaFpjpoieH5GbsGF3juvTi9A=)
3: E55629C4DFEF11F083E035D2586F56BC.roa (hash: sPWi5FiDO7fUcbp/+HtV4DEa+QjOMwHk89p0/p7kf+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Validity
Not Before: Mar 25 06:21:21 2026 GMT
Not After : Apr 1 06:21:21 2026 GMT
Subject: CN=69c37ee1-53f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:87:74:ed:00:74:8a:e1:7d:a4:ef:f8:52:
1a:7e:4d:23:ff:84:b7:49:4d:be:86:0c:82:e5:6f:
ba:df:96:43:11:46:ee:39:89:7a:e1:f9:9d:a8:98:
01:9d:31:d7:4f:93:91:4d:64:0b:c8:43:ff:99:09:
b1:6d:9b:54:29:2b:13:a0:20:6f:2e:e4:4e:80:d6:
b3:5d:88:13:b2:47:1a:6f:7f:44:cd:2b:7d:89:97:
f7:c1:53:5b:07:06:98:b5:4c:51:6a:45:09:56:26:
4b:e4:02:85:95:87:75:f0:03:ef:8d:fa:47:d8:d8:
d7:bd:1a:7a:fd:3c:de:e0:34:ba:72:4d:5a:9b:58:
b6:6c:c0:4a:5a:a3:59:c4:8e:05:5d:04:ee:b1:c1:
4b:1e:80:8c:4d:09:a3:df:07:80:e0:04:77:b4:6d:
0c:8b:c0:e3:99:53:32:9c:0e:a5:cd:b5:75:ad:15:
0c:3c:1d:a6:d5:27:72:ec:96:ec:d8:60:27:01:9a:
d0:26:80:0f:44:14:67:97:ca:63:8d:16:0e:d1:c5:
03:86:bb:66:f9:2a:e9:53:14:68:2e:3d:4a:c8:e9:
38:46:2f:5f:4a:19:22:b7:21:b9:70:d8:f9:38:55:
7f:1a:95:26:56:6a:fa:3d:f3:73:a6:09:02:87:f6:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:91:65:9F:AF:D5:1A:8F:63:A0:FB:CB:8D:E2:DF:F7:47:18:29
X509v3 Authority Key Identifier:
keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:b8:79:79:fe:f9:f2:3f:57:7a:40:3b:45:74:97:ce:5f:
c2:86:90:32:d5:f4:6f:9e:31:2c:d6:75:4b:7c:38:bd:1e:50:
99:62:96:de:9b:e2:e3:54:a2:0e:0f:af:de:78:2a:29:0a:37:
86:97:85:4d:4a:1b:97:8e:a1:2f:5c:6e:42:61:6c:1b:76:92:
32:ed:d5:62:1e:38:ec:08:69:12:2b:d4:ef:36:ef:1f:ad:13:
79:eb:33:37:39:af:59:d4:ed:4d:ce:3d:d7:98:38:79:b1:ef:
9c:ae:86:6d:8a:c5:53:0d:f8:b3:d6:35:93:39:8c:ed:14:57:
54:5b:68:09:f3:1e:f6:ca:b3:97:c4:94:72:eb:d1:28:57:72:
8c:35:43:54:70:62:cc:60:2f:aa:80:4b:6a:af:b8:96:fa:2a:
d0:c7:b5:76:82:c1:74:2e:b0:c1:e3:6f:64:6c:ca:9b:7a:ff:
72:aa:d7:a4:55:ad:0f:32:06:b8:de:26:9f:9d:a7:3f:6f:4f:
f5:13:cd:31:ff:3c:35:10:a6:6e:88:cc:c2:55:27:66:a3:33:
43:bd:75:ce:5d:78:1d:cb:36:98:a6:84:ad:70:30:24:bf:d3:
8a:8f:3d:d2:9e:df:e1:98:90:f7:aa:d0:2d:24:ed:b3:de:e7:
18:4b:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:43 2026 by rpki-client