
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: JrMbb6Ow09/jVOda0LUvwqI/2dZjbKpIsAMU5QgkuSk=
Subject key identifier: 91:FB:BE:40:51:AC:3F:26:11:28:82:17:E0:BC:96:F6:79:9D:20:D0
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 01DF
Signing time: Wed 25 Mar 2026 02:48:15 +0000
Manifest this update: Wed 25 Mar 2026 02:48:15 +0000
Manifest next update: Wed 01 Apr 2026 02:48:15 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: 3H1hCMUQugQ5b9EFvKMGFUCzCN2/enyyqMyGv9wH/Pg=)
2: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: PoM2r//Vc5483ybqcOELC8XLItw50pda51BtS9kgSIk=)
3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: O33e2x2bsJnVnZYzmgRVq6OSe4Uls0Q88mgSA9qXJfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Mar 25 02:48:15 2026 GMT
Not After : Apr 1 02:48:15 2026 GMT
Subject: CN=69c34cef-b74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:53:71:d3:35:0f:37:52:f0:34:97:47:c2:
4f:3a:5b:ea:e1:67:fa:d7:45:78:b6:ea:cf:a0:65:
0b:41:fe:1b:8f:75:cd:dd:9e:27:4c:31:cd:c7:1e:
32:1e:be:0e:37:fa:b8:74:0b:76:6f:9b:2a:59:d9:
45:b2:6c:6b:92:09:41:d6:94:a9:fe:8f:0e:ba:73:
27:71:7f:c4:62:81:c8:e7:78:b0:c2:f1:85:af:3d:
82:32:dd:50:c0:82:11:28:cf:eb:8c:b2:0f:85:25:
60:9c:a0:92:cf:47:8a:fd:a0:59:66:1d:17:54:6d:
5e:e2:c2:2f:54:0e:1a:b9:ab:a5:1e:ac:70:dc:67:
c8:56:17:af:36:25:7b:ec:45:b0:44:3b:ca:86:88:
2c:a4:75:87:c3:89:7d:a2:63:96:93:af:53:e6:96:
20:44:d3:1b:3c:80:5d:76:fd:89:b7:dd:90:81:c6:
9b:87:65:50:27:fe:d3:02:dc:3b:1c:f9:07:b4:f8:
9a:23:12:78:fe:3d:92:d3:f8:28:8d:f8:0c:bd:1a:
cb:2f:86:0d:b7:48:db:fe:59:1d:f9:3e:07:fd:fc:
0f:2b:83:48:21:9e:d8:ec:b0:7d:d8:fc:22:62:d4:
fa:63:ba:30:69:35:5b:77:7b:d4:f2:a3:ef:43:27:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FB:BE:40:51:AC:3F:26:11:28:82:17:E0:BC:96:F6:79:9D:20:D0
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:4d:19:9c:69:8b:17:2b:85:29:a1:82:53:20:b0:61:bb:
5c:49:e4:5f:2d:db:6d:1b:9c:ff:ed:ab:c4:84:72:a7:38:4c:
cf:48:e8:e7:a2:62:dd:d3:c1:a3:54:a4:30:8e:6e:82:d1:98:
18:db:ed:5f:d3:ea:e1:b6:6e:76:f0:5c:b0:67:30:17:ff:b9:
a6:fa:a4:7f:ca:f7:04:73:c0:49:91:37:75:c9:c1:ce:1f:9c:
7f:f9:0b:1d:18:9e:b6:1e:89:68:ea:69:43:a8:e9:d7:01:7b:
b9:5d:bd:6a:9f:4d:2a:ec:2c:46:79:2d:11:e6:07:1a:8a:4e:
e8:9c:6e:10:d8:04:44:1f:75:2a:7f:3d:50:78:48:bb:ba:c6:
90:92:33:96:ab:06:53:cb:13:cb:fb:57:b2:df:06:2a:c8:4e:
8f:9e:23:99:f7:41:2b:05:1c:d1:a5:5e:73:5e:f4:35:78:f2:
4b:70:de:6c:da:d5:0c:b6:e1:55:e2:ef:b3:3a:be:45:7d:b4:
b6:1f:af:6e:88:e3:77:2a:91:8f:e3:ca:5b:c4:3d:fb:13:28:
90:e2:83:4f:68:45:da:e2:81:10:bc:24:13:a0:2b:7b:0f:bd:
03:a6:e4:66:07:1a:aa:96:ce:53:29:33:6c:9d:96:f6:d7:8e:
f1:00:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:24 2026 by rpki-client