
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
File: jqjmtSCNaoLUqRJIaXYVovYuYKM.mft (raw, json)
Hash identifier: a47wkj5Ev1ufeROZruLav/h7cwffTrsGYup26hGpwCE=
Subject key identifier: A9:FC:BF:3C:22:0D:F6:02:B5:6A:C1:64:00:66:9F:BC:6B:87:5D:9A
Authority key identifier: 8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
Certificate issuer: /CN=A91B01B9/serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
Manifest number: 0D
Signing time: Wed 25 Mar 2026 08:17:15 +0000
Manifest this update: Wed 25 Mar 2026 08:17:14 +0000
Manifest next update: Wed 01 Apr 2026 08:17:14 +0000
Files and hashes: 1: jqjmtSCNaoLUqRJIaXYVovYuYKM.crl (hash: GCIsPknIix02zJINe+UqjYrNRcFV3/BadejpQ7h0SWs=)
2: 60F91A0E178C11F1B48EB6C42A3D8C67.roa (hash: ysI0a32i7ANwMhshWNRKJcGsl62vILkKHC3H9zk5aNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl
rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01B9, serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
Validity
Not Before: Mar 25 08:17:14 2026 GMT
Not After : Apr 1 08:17:14 2026 GMT
Subject: CN=69c39a0b-6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:e5:25:9e:c6:c6:3e:b3:c3:b7:09:9b:80:
47:58:6d:dd:f6:57:90:6e:15:c3:52:0a:44:ae:aa:
a7:58:a9:23:81:06:50:a9:70:57:64:1a:1a:2d:65:
ae:0c:05:87:73:5b:75:e4:c3:b7:35:9b:85:64:04:
48:9c:9e:c4:df:72:33:2c:c3:40:18:e7:99:b8:56:
e5:bb:67:c7:d9:02:a4:ee:07:df:96:89:70:ad:0c:
b9:a7:93:c5:6c:cd:e9:c6:77:6b:c5:ac:e9:95:d4:
7c:af:7e:85:48:9a:1f:c4:4c:ad:19:48:af:a4:81:
6f:ac:c4:b3:0e:cd:95:f8:18:94:28:f6:7a:68:4b:
0c:8e:8b:7c:37:1a:01:ab:89:a5:9a:2e:25:da:f6:
97:1c:b5:64:5f:f4:fd:cb:fb:28:49:2c:e5:7d:f5:
f1:7f:74:b8:46:ee:a3:73:3f:51:95:34:3a:bd:7f:
e4:cc:ec:50:e6:44:3d:5f:5e:74:90:fa:0b:27:5b:
24:62:f3:90:4f:2a:26:28:ce:f2:71:91:41:0c:36:
41:c3:3d:17:e9:42:96:0f:f4:1c:f1:d3:61:81:c3:
3d:2e:85:c7:db:bc:4f:da:75:d5:de:f5:81:79:09:
17:37:08:bd:86:db:1f:9c:ab:a5:fe:c5:7e:d7:4a:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:BF:3C:22:0D:F6:02:B5:6A:C1:64:00:66:9F:BC:6B:87:5D:9A
X509v3 Authority Key Identifier:
keyid:8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e3:b1:02:16:f5:90:12:45:d7:4d:b8:d6:32:32:f1:8e:2a:
51:f6:82:15:4e:47:0b:51:d0:7a:b6:d8:37:e2:70:e8:6d:b8:
f5:53:b5:d7:0f:60:3b:09:bc:4e:7f:d8:5a:3b:48:68:20:e6:
3d:68:e3:3a:9f:dd:5a:36:de:cb:92:ca:fe:71:93:56:fe:1f:
96:20:cd:ac:8a:50:06:be:49:3b:52:18:8e:a6:f9:c2:64:f5:
7f:53:36:ad:de:04:2e:c8:73:0f:13:c6:f5:f2:26:b3:b8:f0:
e7:3a:0b:8b:fa:84:00:29:24:04:24:a6:21:92:b4:5f:88:4f:
4a:72:a5:e5:5b:e5:e4:9f:87:22:26:c1:63:09:8a:1f:65:ac:
95:2e:49:fb:da:39:15:ed:fb:c8:46:68:c4:28:f3:dc:bc:28:
0b:d1:4e:47:3f:ba:e1:9f:ac:5c:d9:d4:04:9b:7e:c5:f2:6a:
ff:95:e5:86:f7:9d:82:58:27:32:42:3a:73:b7:e2:09:50:4a:
7b:76:9c:9b:7f:c4:75:c6:3e:41:78:67:58:b2:fd:1a:21:8c:
cb:27:e6:dc:1b:3a:54:d3:06:d0:7e:fb:96:93:59:bc:a3:37:
15:93:1e:e2:9c:a7:e8:00:9e:81:b6:d2:e0:93:99:61:ae:2e:
9d:ba:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:20 2026 by rpki-client