
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier: zmYOajSuk50qX4YY1zEueRbk3lvYqNmo6HzoLC1qlZQ=
Subject key identifier: AA:54:2B:B1:ED:90:90:5A:4C:7A:87:6B:06:57:4A:16:B3:42:F0:65
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number: 1B
Signing time: Wed 25 Mar 2026 08:13:31 +0000
Manifest this update: Wed 25 Mar 2026 08:13:30 +0000
Manifest next update: Wed 01 Apr 2026 08:13:30 +0000
Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: Z3pU7W7AAYJpb2o84aFzGBCz2VVpSCbBKPTzYVLdt4E=)
2: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
3: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Validity
Not Before: Mar 25 08:13:30 2026 GMT
Not After : Apr 1 08:13:30 2026 GMT
Subject: CN=69c3992a-c935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:03:ce:90:bb:be:31:3e:1a:88:62:35:54:
37:15:68:3e:c1:fa:83:9b:6e:3f:32:a4:17:98:69:
55:09:1f:7d:a7:a6:d4:74:cf:97:01:45:60:f5:66:
3b:95:bc:a8:6d:eb:cd:34:7b:fc:ce:7c:4a:7c:ae:
aa:ad:68:aa:4b:5f:dd:31:25:55:37:22:5f:17:f8:
ab:98:63:1d:c0:23:67:3e:25:0b:5f:69:48:ed:3f:
58:70:03:a3:7c:1c:8e:b5:00:61:68:3d:8b:b3:a2:
50:ea:bf:f2:a7:22:d6:0b:89:5f:45:38:3f:37:22:
ac:29:7f:8e:ee:3f:66:f5:9d:b1:6e:b0:d6:52:9b:
c8:6e:cf:f1:21:7a:48:14:ea:6b:81:8d:67:9e:23:
f3:ad:b8:91:84:01:94:6e:3d:80:42:fa:68:79:e0:
65:1d:79:c9:e0:55:6d:a6:bf:16:ff:84:d6:79:46:
bb:09:3f:91:d5:9e:b1:73:21:b3:b9:7c:ef:5f:b0:
11:93:f3:52:9d:4d:93:99:6f:32:30:6e:e8:84:00:
12:e6:92:94:89:56:60:3e:b9:7d:8a:1c:aa:c5:b7:
5f:6b:91:b5:e5:e6:64:f5:ec:82:2f:4d:d5:61:00:
84:6e:ee:a4:3d:3d:5c:45:c2:d2:f8:93:ee:67:00:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:2B:B1:ED:90:90:5A:4C:7A:87:6B:06:57:4A:16:B3:42:F0:65
X509v3 Authority Key Identifier:
keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:9e:72:94:64:34:9e:13:4b:a4:2d:31:b8:05:d4:ce:58:
43:07:51:8d:87:5d:87:81:31:5a:8f:3a:97:af:78:ca:bf:17:
17:bf:35:b1:e6:89:3a:93:38:5d:ed:30:70:86:8e:af:e6:79:
5a:93:43:e1:c5:3d:52:10:5b:07:b0:81:44:c1:aa:0a:6d:aa:
6a:f7:f3:c2:1e:4a:0b:94:b9:d8:f6:d1:ed:31:36:d2:67:49:
06:79:a9:0d:77:1c:a0:5a:cf:2b:4d:cd:2f:8e:56:9b:9b:00:
56:77:bd:f8:2c:61:a6:d4:09:a3:47:e4:c7:3c:95:ee:73:66:
df:9b:bb:6b:f9:8f:31:0a:02:03:94:f4:65:c5:00:39:b5:f4:
45:ae:4a:ed:dc:9f:59:52:4f:9e:56:fa:00:25:2c:9b:b3:e6:
7a:fb:1e:4d:e1:af:f0:8a:c8:29:71:b8:57:0a:7a:f2:a8:f4:
9c:82:33:d8:4a:73:91:ed:02:86:1a:9a:da:ee:c2:f5:9b:3f:
af:e6:2c:f5:82:b4:30:c7:7c:09:f8:9a:9a:45:14:5a:d3:ee:
76:8c:1b:fe:e7:b1:1a:73:35:86:e9:18:fd:2e:c8:2b:14:31:
7b:f1:ee:98:7c:00:40:9e:9c:6d:95:7a:94:a0:d3:92:57:3d:
37:c1:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:29:40 2026 by rpki-client