
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json)
Hash identifier: sI6nut6mTAk3kVQXkC1fBvVJWd1ua1wYO7F7130igvE=
Subject key identifier: 78:42:50:C8:6D:C4:17:59:E7:C1:6B:BB:BC:5C:75:B3:27:96:CA:E5
Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
Manifest number: 01BA
Signing time: Wed 25 Mar 2026 03:16:31 +0000
Manifest this update: Wed 25 Mar 2026 03:16:30 +0000
Manifest next update: Wed 01 Apr 2026 03:16:30 +0000
Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: HKTNXcnaQ8+JuX6csY7RoCdewB9wmA7nYS/e28mFpck=)
2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: x74beNv2bckC9kjbYSqsfhvkgGA3DJlDz0+S6jQZlEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Validity
Not Before: Mar 25 03:16:30 2026 GMT
Not After : Apr 1 03:16:30 2026 GMT
Subject: CN=69c3538e-5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:52:78:4c:fa:94:5a:fd:14:1d:66:f5:08:
2b:7b:70:d3:de:81:ed:a4:be:32:56:87:be:7b:49:
0e:29:63:de:8f:32:dc:51:78:04:9e:66:5a:b9:8b:
22:b9:46:d1:7f:42:96:06:fa:32:f8:a3:35:ba:7a:
3c:88:1a:41:0b:34:fb:8d:f7:db:83:60:70:54:eb:
64:6d:16:22:6f:f7:d1:78:c3:c1:af:e1:dc:b1:ff:
58:d0:b3:fe:fc:f5:d2:52:42:1a:bc:92:83:9e:4f:
ef:b5:32:95:6a:44:3f:df:51:a4:b0:1a:e3:a2:38:
77:cf:50:d4:a7:1a:9a:31:ab:91:dc:7c:2d:40:7b:
a4:6e:6c:f5:17:a8:77:67:c6:26:96:36:66:25:db:
bb:22:56:1c:67:f2:f1:23:9e:36:91:42:d3:d9:9e:
66:90:35:76:20:07:68:29:70:76:df:44:f9:f4:8e:
25:75:d1:88:1d:64:09:15:f8:b9:ff:9e:ff:c9:d1:
6f:3e:b8:ab:a8:98:0c:97:b9:cd:4e:09:ef:64:62:
52:13:95:99:eb:aa:c6:f9:47:05:39:20:a8:6a:17:
a2:52:ff:f4:1b:1a:7f:97:d0:0e:02:22:ae:d9:4d:
c1:96:c1:09:53:54:78:b4:74:1b:07:3e:5b:a9:99:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:50:C8:6D:C4:17:59:E7:C1:6B:BB:BC:5C:75:B3:27:96:CA:E5
X509v3 Authority Key Identifier:
keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:76:85:b0:28:ef:46:28:86:4c:39:88:07:d7:09:cc:d4:9b:
db:c1:26:89:d2:bc:4d:89:dc:93:b6:5b:16:98:44:70:1c:53:
e8:d6:69:6e:5a:10:4c:fb:df:f2:aa:f4:43:83:46:d4:bb:35:
78:e8:fc:20:7d:bf:91:a0:e8:7a:40:59:d0:d7:3e:5d:47:49:
14:c3:b1:f2:99:99:36:c2:81:fd:08:52:82:c9:56:55:45:db:
f7:a5:8f:e9:4a:d4:40:2c:e8:81:dc:9a:3d:fc:4b:af:51:66:
d0:9d:6f:23:c5:0e:5b:71:2b:42:0e:34:99:e3:f3:16:9a:97:
38:7c:25:1b:06:66:17:0a:88:f7:8c:5a:5e:ac:cd:df:dc:c6:
57:bb:6b:37:24:99:54:fe:5b:d6:a7:e1:61:6a:b4:8a:58:93:
65:65:b1:e1:36:6e:e2:54:55:ff:02:67:d1:f6:7e:5e:be:99:
90:71:e0:f5:db:15:a6:cf:a9:65:d0:0e:30:1a:1d:96:fb:12:
97:a9:00:8c:c3:1d:42:6e:52:48:54:69:dc:f1:79:0f:43:81:
7f:22:f0:52:2f:94:5d:76:0a:06:4f:4f:f5:28:d3:db:a9:2c:
d4:b5:8f:ed:f3:e2:cb:93:55:df:f1:4b:99:0e:d3:2a:af:cf:
55:c4:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:58 2026 by rpki-client