
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json)
Hash identifier: 34SgnBiMy9FEbQa0aBdJdDzZeTECVXgdoaXzHMcfF04=
Subject key identifier: A0:BF:45:DC:55:FB:B2:DA:A7:28:F7:ED:8C:D8:A8:0D:62:41:3E:BA
Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
Manifest number: 0125
Signing time: Wed 25 Mar 2026 04:53:43 +0000
Manifest this update: Wed 25 Mar 2026 04:53:43 +0000
Manifest next update: Wed 01 Apr 2026 04:53:43 +0000
Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: qEck2Mgc+LBnYWZzVsrSShwgOKM1Ls+E3mLDtOvp4bI=)
2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: qoNSrp1S5UFLz+pkwMGVW1W6xXhNXfIp8HVNYC4sZ1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl
rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Validity
Not Before: Mar 25 04:53:43 2026 GMT
Not After : Apr 1 04:53:43 2026 GMT
Subject: CN=69c36a57-92ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:36:11:20:ff:af:a7:4a:8b:4a:56:43:c7:
e2:07:17:92:1c:61:9f:13:72:77:24:63:e8:b0:79:
09:47:a8:75:9a:c8:5c:ba:cb:f9:b4:72:f4:15:ab:
df:6f:da:57:44:69:7a:86:74:2a:58:e2:d9:e5:8b:
6a:98:89:31:63:52:b7:ab:6a:de:c3:3b:03:a4:b1:
51:0f:2a:30:cd:aa:6d:5a:4b:61:a6:dc:f5:78:e3:
28:02:ef:bf:4b:95:c1:62:8e:31:02:b0:b6:29:f9:
07:37:1f:ba:b9:6e:09:9c:ef:75:44:7c:ef:f9:93:
7a:8b:16:74:66:66:20:f1:dc:6a:55:b7:0a:eb:f1:
f9:8a:78:65:12:ce:ef:b6:c5:13:2b:41:0c:3d:ac:
1e:72:58:d8:2f:5c:8f:7e:e2:8e:d0:81:93:2a:17:
4f:cf:49:2f:e6:22:ea:67:6f:80:6e:91:3c:4e:bb:
69:59:fd:64:12:3c:08:1f:a9:88:4e:38:c4:f1:c7:
b0:b3:cc:59:f9:09:db:a0:fa:a7:18:47:0a:ac:38:
fa:1a:0e:cb:2d:c8:4d:48:b8:49:cb:d6:d4:2c:ad:
83:78:fb:da:77:36:06:c0:c6:32:78:b3:dc:91:af:
50:7f:a9:92:70:59:24:5c:36:43:9d:d1:87:6a:b5:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:45:DC:55:FB:B2:DA:A7:28:F7:ED:8C:D8:A8:0D:62:41:3E:BA
X509v3 Authority Key Identifier:
keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:34:9d:c1:65:2f:05:1d:6c:09:d6:8a:7f:7d:ac:a7:13:
69:67:8c:b6:78:02:62:9e:22:64:f7:ba:d3:c3:51:56:89:44:
a5:40:03:23:6e:2f:e3:2a:d8:df:30:a8:e1:b0:3a:e1:e5:87:
6e:d3:5e:29:52:64:59:bd:a9:5c:aa:bc:c6:51:23:6f:0e:21:
24:99:ce:03:eb:a2:e3:3c:b3:2b:3f:47:b0:b4:ad:63:f1:16:
59:d1:6c:c2:cc:d4:b4:e7:d7:98:39:49:52:87:38:b6:cc:da:
03:a2:35:7b:9a:4e:c2:16:09:62:26:27:5c:61:3b:74:5c:c5:
91:23:26:23:df:1f:48:6f:08:32:c1:62:fd:54:21:75:87:9b:
ab:e1:f2:ac:33:10:a6:47:01:7e:b8:16:81:d7:f3:21:d3:48:
71:d1:0d:8f:b1:0e:88:37:bb:fe:6d:ef:81:c1:1d:20:6f:65:
a1:c2:4f:24:51:15:70:a7:be:73:bf:96:d1:70:1b:aa:d5:04:
3b:1c:9a:3f:ed:64:cf:9f:a9:d3:ff:a5:6f:12:b9:c4:eb:0c:
fd:af:89:31:6e:14:73:11:f5:52:d0:32:93:04:df:7f:7c:db:
44:bb:ac:93:f3:ac:05:c3:45:04:18:56:1a:db:8b:a1:e0:1c:
f3:f1:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:37 2026 by rpki-client