
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier: Lbty+ECt805Vq63kcW9ONuvROKtwTOsE7JqiZZqVbBQ=
Subject key identifier: CC:40:F6:3F:7B:B0:EE:6D:AB:53:02:70:B1:AC:98:51:58:CA:F6:D9
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number: 01E2
Signing time: Tue 24 Mar 2026 21:00:23 +0000
Manifest this update: Tue 24 Mar 2026 21:00:22 +0000
Manifest next update: Tue 31 Mar 2026 21:00:22 +0000
Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: 8OPVdM4YSGf+opEcrgWxA0vSuU1jDrMSKiQeDOPRcTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Validity
Not Before: Mar 24 21:00:22 2026 GMT
Not After : Mar 31 21:00:22 2026 GMT
Subject: CN=69c2fb67-f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:1b:18:af:54:1b:27:b6:dd:27:77:05:1a:
1a:3c:f7:40:7c:b6:11:92:25:f7:c8:39:02:72:ee:
46:09:e9:b4:c0:f8:dc:3f:ca:f3:cb:a0:53:12:c5:
f2:57:7c:57:07:94:c8:d7:6e:62:7c:88:05:ee:0c:
e8:56:e4:aa:f2:46:5e:bf:aa:cf:d8:fd:59:b9:30:
b6:3a:96:72:eb:48:5d:fa:93:e5:d3:bd:ce:46:ec:
cf:33:bc:7a:2b:22:b2:72:b1:9c:71:2e:f0:4d:cf:
58:9e:a8:0e:8f:f4:5a:ca:9e:87:b4:61:ef:77:41:
79:c0:ce:69:59:bd:ea:5c:1a:0a:19:84:a9:a9:95:
75:e1:1d:96:c9:d4:c3:a5:09:11:1d:e1:81:21:f3:
63:3b:24:a9:57:4b:0e:87:61:54:84:64:d4:8f:1c:
94:8d:fb:f8:b5:88:84:ea:ca:e0:63:2a:06:b9:8b:
fb:bc:8f:2c:f2:48:08:26:de:52:c0:12:9d:ee:f9:
03:42:dd:b8:c1:23:d6:7c:1c:9c:68:c8:8a:88:04:
b8:33:f2:f9:90:e6:4a:34:b0:8e:bf:34:d6:3e:21:
75:32:86:63:58:3a:e4:9a:02:1c:7c:ba:76:42:45:
65:df:46:c4:0e:d7:d5:11:06:1b:b6:42:e8:33:78:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:F6:3F:7B:B0:EE:6D:AB:53:02:70:B1:AC:98:51:58:CA:F6:D9
X509v3 Authority Key Identifier:
keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:0a:8d:a7:d8:1a:24:7e:a6:f2:4d:58:92:a4:de:38:2b:
59:fb:12:0b:38:8e:3b:20:78:78:1b:7a:98:a3:17:ae:1b:f6:
07:7e:b8:41:1c:04:c0:fc:d6:f9:10:1e:c4:7b:20:d4:14:a2:
00:56:61:91:66:5b:86:f7:b3:4a:ec:a5:d6:dc:65:8c:97:37:
48:73:58:1a:f3:51:8d:47:78:f3:a8:13:ba:9b:f2:0b:b4:4b:
01:91:c0:8c:73:d0:99:e0:af:8c:d3:22:55:66:ba:e9:f7:ac:
8e:8b:65:14:34:82:13:54:ae:63:12:bf:4e:64:d2:72:33:27:
5b:55:77:c3:c4:b6:86:be:99:60:8d:c9:1e:00:32:54:50:e0:
97:b1:d0:42:a4:8b:fe:d6:c6:58:8e:fd:a5:c3:20:11:9b:b0:
d8:e8:6c:6e:09:d9:a8:61:8b:63:61:7c:b0:4f:64:d0:21:5f:
db:05:fa:5c:9e:27:33:55:7e:bc:09:e5:2e:72:27:2a:a7:85:
41:89:55:c7:05:6d:c4:da:ff:53:45:31:e4:2b:fa:71:8c:77:
09:fd:17:29:57:41:11:34:e5:be:52:90:eb:9b:9b:11:96:63:
66:5b:6f:79:71:09:bf:cf:2c:79:0a:1e:bb:58:8a:4e:ce:b1:
fe:ea:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:04:31 2026 by rpki-client