
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
File: 1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json)
Hash identifier: DN0nDU0iZTLn12U5IQUYsFrXZG12KNgkL7cJI3+fgCg=
Subject key identifier: F7:8C:0D:E9:22:C1:B7:44:3E:87:62:3F:53:90:AD:48:FC:75:0F:8D
Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
Certificate issuer: /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 06:47:15 +0000
Manifest this update: Wed 25 Mar 2026 06:47:15 +0000
Manifest next update: Wed 01 Apr 2026 06:47:15 +0000
Files and hashes: 1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: JQnoCybIu+3Mv0nP2nrFSAIG++2JveU0SNunUSGKJ7I=)
2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: oj8oghJ9Y6bqzBuYhxmjs+BUoyd94rS36kWzLfbq8Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Validity
Not Before: Mar 25 06:47:15 2026 GMT
Not After : Apr 1 06:47:15 2026 GMT
Subject: CN=69c384f3-576d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:e2:9c:10:2c:1d:42:a2:b7:23:70:93:0f:
32:9e:60:5b:78:09:ef:11:05:e1:ae:b4:0e:a4:ad:
a6:c9:b1:48:98:08:a1:74:b7:6f:a9:c0:af:a9:dd:
85:96:c0:5e:2f:ad:a9:56:a5:f8:2f:79:88:98:36:
5b:48:5f:62:4a:e6:ec:36:65:35:d1:17:8d:79:57:
f2:ea:ee:86:25:b8:dd:69:83:92:4e:18:ac:0d:07:
fb:8b:cb:f5:ee:e5:e7:b3:6b:be:07:f2:76:63:8c:
d0:4e:ce:85:d5:13:d4:dc:dc:a5:51:31:05:c5:db:
8a:18:e3:7e:c9:9b:50:f3:2e:ea:86:b0:c6:53:1f:
67:64:5b:ae:3d:92:c8:4b:10:50:ac:94:16:59:67:
39:dd:d1:8a:0a:05:d9:72:17:99:80:22:1d:3e:a4:
63:72:ac:7a:d6:e3:5e:0a:d6:68:ff:2a:51:94:eb:
06:ba:09:67:35:c6:c1:22:68:c4:51:ee:5e:78:6d:
28:18:79:98:30:ef:78:a9:66:b0:1e:2c:6f:54:9e:
93:70:c8:19:bd:ec:ea:b9:e3:6e:28:2f:66:b8:46:
4f:1c:f1:dc:67:5c:d5:15:94:0b:d0:13:5d:d5:aa:
75:0e:10:37:47:92:b1:e5:08:ae:31:f3:4e:4c:09:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:0D:E9:22:C1:B7:44:3E:87:62:3F:53:90:AD:48:FC:75:0F:8D
X509v3 Authority Key Identifier:
keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:36:f3:9a:4b:f7:82:25:ac:dd:66:d2:07:f3:8c:b3:7f:e9:
40:62:2b:2e:bc:b2:62:c8:65:3d:f0:f1:24:b2:28:23:87:71:
21:62:ca:64:8c:6b:df:28:7e:f9:d4:b0:d2:1e:e9:66:46:ee:
81:f7:49:39:f4:3e:7b:c8:11:4f:fc:7f:ad:b8:59:55:71:f2:
03:ae:66:c9:30:c4:5f:ed:32:ad:74:b6:29:42:d1:d7:b1:e0:
03:66:65:5e:83:e4:9a:eb:f0:f8:e8:eb:58:60:fe:56:e4:77:
3d:6b:10:03:6f:b1:2d:21:3c:70:2a:da:d6:4e:d8:e0:90:75:
eb:da:16:80:8a:a5:1b:0a:17:6d:d5:94:ec:3f:f5:b0:cc:7d:
4f:ea:c0:a2:ec:77:4e:37:fa:2a:d0:60:ce:74:26:1a:1b:ad:
cc:af:ba:04:6f:8d:91:6d:30:dc:8f:25:8c:47:95:91:4d:e6:
7e:2d:c7:52:d1:43:67:11:c5:5e:3f:dd:fa:71:be:2e:c9:55:
ee:d8:0e:be:3f:c6:23:51:f0:7a:76:dc:69:ce:75:ee:bf:30:
28:95:a0:a1:47:cf:85:23:07:bf:b1:5f:bf:4f:f7:24:65:d5:
5a:c1:ed:9c:83:3e:ff:6f:2c:7a:46:62:25:00:bf:7c:19:dd:
3a:d0:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:04 2026 by rpki-client