
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier: uRrSpUMcUfZNXHKGhRUXBeSFtz4Gj3nBjmc6lRbN+M0=
Subject key identifier: A4:A1:A4:B8:70:CD:C6:38:25:6A:20:37:F0:C6:4A:F0:71:69:E9:BA
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number: 02EE
Signing time: Wed 25 Mar 2026 00:59:14 +0000
Manifest this update: Wed 25 Mar 2026 00:59:13 +0000
Manifest next update: Wed 01 Apr 2026 00:59:13 +0000
Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: WF6oNk05TifCzBJkMTtAHanbKBR7O1D+6Eg8zfnDDls=)
2: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=)
3: E1870478616C11F0A254E10BC4F9AE02.roa (hash: ftAew0EQNdkbc3/2VDTlGHSmCcRqc+rg4bUvOtG8DsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Validity
Not Before: Mar 25 00:59:13 2026 GMT
Not After : Apr 1 00:59:13 2026 GMT
Subject: CN=69c33362-b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:a8:d6:16:d2:d5:4a:6d:e8:a8:59:c5:c3:
e6:bc:7a:61:52:1b:6c:05:96:dd:9a:73:50:ad:0e:
17:73:34:ba:92:ed:f3:27:95:31:04:99:71:a8:b5:
f8:f9:5f:aa:c9:80:5f:05:57:a2:88:20:5d:77:ce:
5a:90:42:9d:03:b3:6a:2d:66:c3:e5:29:f6:76:3d:
d7:5a:5a:76:6c:c6:9b:89:c0:d2:35:d6:be:dc:63:
92:75:e0:21:9b:a7:6d:5d:c1:bc:cf:ed:93:42:4c:
53:37:76:2f:5f:b7:a6:17:82:ce:6c:59:22:6a:f0:
a7:e3:54:01:90:d8:ac:84:79:a6:17:3f:c4:97:02:
be:a9:05:f0:7d:2e:82:79:2b:28:6b:04:6f:86:ad:
bf:34:3d:21:44:71:46:44:32:68:7c:69:8f:60:1a:
0b:fa:76:e6:88:5a:54:01:53:08:80:f6:57:19:21:
5c:50:33:13:12:7a:79:4a:90:18:cd:d3:6e:70:3b:
34:67:17:71:4b:f1:11:53:c8:1e:d2:61:9e:76:08:
f6:71:dc:3e:80:f7:2b:1b:4e:e0:ad:d6:0a:53:82:
59:d1:e8:57:82:0e:d6:d0:76:f4:e2:0e:21:0d:6c:
bd:64:bf:06:0a:4e:69:68:71:f6:ad:e0:43:c6:04:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:A4:B8:70:CD:C6:38:25:6A:20:37:F0:C6:4A:F0:71:69:E9:BA
X509v3 Authority Key Identifier:
keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:35:c2:3c:6b:e1:a0:64:9f:a5:7f:22:74:b2:31:b1:9a:5b:
c1:79:b1:87:45:6a:8a:ca:b1:e9:25:ad:75:f3:86:1b:91:29:
87:40:87:77:db:ea:bc:72:ce:f3:b1:e4:d9:ca:6a:5d:f5:bc:
f5:9a:52:9e:1e:d2:df:6a:a0:58:26:ca:63:b8:c1:8b:40:17:
4b:2d:9e:81:4b:77:e3:98:07:e7:52:b4:ad:0b:08:6a:24:c9:
00:63:22:9f:99:7f:ba:d6:a4:49:3b:72:a6:fc:80:3e:15:a7:
4d:9b:ef:30:85:81:f6:0e:eb:97:f6:60:bd:fc:54:28:f6:8d:
ba:51:e6:32:a3:06:4e:2d:f9:38:68:36:b1:4c:fc:6a:79:e9:
37:7f:a6:7d:7e:e6:78:e5:0f:44:b4:3d:f0:62:46:03:a4:e9:
cd:4c:1b:5b:fd:71:e3:cc:a5:5f:73:ee:bb:04:b8:63:af:d6:
22:6d:be:6b:25:1a:73:38:14:01:34:9f:47:50:de:9e:01:03:
af:3f:dd:54:db:bf:f4:bb:7c:70:d9:af:4d:b6:a3:8f:c7:49:
07:2b:91:e9:0b:e4:9e:b9:4d:36:1d:f4:91:61:9d:9f:f7:5f:
10:77:4c:9e:d1:cb:f2:55:9a:c6:1f:ab:bc:d8:f0:1d:10:39:
64:06:f9:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF
MUI0OTM4REIwHhcNMjYwMzI1MDA1OTEzWhcNMjYwNDAxMDA1OTEzWjAYMRYwFAYD
VQQDEw02OWMzMzM2Mi1iNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVqo1hbS1Upt6KhZxcPmvHphUhtsBZbdmnNQrQ4XczS6ku3zJ5UxBJlxqLX4
+V+qyYBfBVeiiCBdd85akEKdA7NqLWbD5Sn2dj3XWlp2bMabicDSNda+3GOSdeAh
m6dtXcG8z+2TQkxTN3YvX7emF4LObFkiavCn41QBkNishHmmFz/ElwK+qQXwfS6C
eSsoawRvhq2/ND0hRHFGRDJofGmPYBoL+nbmiFpUAVMIgPZXGSFcUDMTEnp5SpAY
zdNucDs0ZxdxS/ERU8ge0mGedgj2cdw+gPcrG07grdYKU4JZ0ehXgg7W0Hb04g4h
DWy9ZL8GCk5paHH2reBDxgQOlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKShpLhw
zcY4JWogN/DGSvBxaem6MB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz
Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o
Y1JzQUp6SlFSR19odEpPTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqDXCPGvhoGSfpX8idLIxsZpbwXmxh0Vqisqx6SWtdfOGG5Eph0CHd9vqvHLO
87Hk2cpqXfW89ZpSnh7S32qgWCbKY7jBi0AXSy2egUt345gH51K0rQsIaiTJAGMi
n5l/utakSTtypvyAPhWnTZvvMIWB9g7rl/ZgvfxUKPaNulHmMqMGTi35OGg2sUz8
annpN3+mfX7meOUPRLQ98GJGA6TpzUwbW/1x48ylX3PuuwS4Y6/WIm2+ayUaczgU
ATSfR1DengEDrz/dVNu/9Lt8cNmvTbajj8dJByuR6QvknrlNNh30kWGdn/dfEHdM
ntHL8lWaxh+rvNjwHRA5ZAb5Zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:25 2026 by rpki-client