
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File: jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier: 91w11JFMz8kbzj73kmsz5LDyZu6HLMPfnUptvhp2Pfs=
Subject key identifier: 5B:51:8A:8F:28:5F:AE:10:2F:AD:6A:1E:83:BD:76:B3:A3:A2:97:1D
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer: /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number: 10
Signing time: Wed 25 Mar 2026 08:16:50 +0000
Manifest this update: Wed 25 Mar 2026 08:16:49 +0000
Manifest next update: Wed 01 Apr 2026 08:16:49 +0000
Files and hashes: 1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: Uh3naiwXRPuQrLk378Tg37XSdbpTs/Wc1eWl0V+xtlI=)
2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Validity
Not Before: Mar 25 08:16:49 2026 GMT
Not After : Apr 1 08:16:49 2026 GMT
Subject: CN=69c399f2-87eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:52:05:37:53:44:89:e1:49:88:c5:61:1c:
d9:b1:e9:58:32:7d:78:45:3d:5b:b2:e3:4b:e0:b0:
4e:b8:6d:8a:c0:4e:42:36:f7:ae:a0:75:c4:b2:16:
79:7b:69:88:18:95:1c:88:86:90:90:fe:f4:4d:a3:
49:af:b5:1b:19:ff:16:4b:70:67:eb:64:fe:30:4d:
d1:ba:b9:86:c5:e0:e7:94:49:91:38:88:ab:13:81:
57:86:fb:c8:1d:8b:f5:dd:b9:3b:c1:76:2e:d0:17:
66:ca:ee:4e:5d:2b:91:f9:4d:6b:03:53:1a:a0:f2:
01:27:8c:05:62:ea:59:14:7b:cd:10:01:b4:41:0b:
cb:4d:1e:e1:41:cd:3d:af:59:b7:d6:40:7b:00:d7:
8c:fb:20:03:ae:d7:90:96:22:f8:34:91:68:28:54:
d4:df:f0:98:64:cd:c2:7e:12:db:3a:71:01:14:5a:
65:98:8d:7a:9d:38:7c:85:c7:88:3d:af:1f:3a:d1:
0b:e3:5f:0c:55:9d:fa:21:66:6b:0a:fe:ea:1c:f5:
f2:fb:40:fa:03:cf:74:fb:ea:79:fe:57:c7:65:2e:
61:c5:a6:22:f5:78:a2:41:3f:63:44:bb:fe:47:2c:
51:d9:82:d8:5f:8b:87:e4:7a:c3:7b:45:cc:74:f4:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:8A:8F:28:5F:AE:10:2F:AD:6A:1E:83:BD:76:B3:A3:A2:97:1D
X509v3 Authority Key Identifier:
keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:5d:d4:a0:94:e0:f1:df:a0:96:f8:5f:dc:73:77:20:87:
54:64:96:bb:3c:f3:d9:ab:44:ca:e1:ac:31:54:c8:61:1c:8b:
0d:9d:fa:4e:9b:71:27:9c:06:8e:8e:5a:01:d0:8e:33:9b:c4:
5b:a6:79:49:9e:ba:63:05:6f:98:45:5b:66:24:ec:46:e4:ff:
29:6d:77:8a:53:0e:58:f7:52:84:4e:c8:75:48:8d:bb:5c:29:
ea:e9:a6:45:dd:b1:46:a1:23:c7:09:ae:c0:67:4e:99:4b:08:
bf:89:0c:c1:91:81:f6:b0:05:c0:b2:3a:1f:3f:c4:43:ad:55:
51:c9:a4:4c:63:3c:2b:9a:d9:b2:f3:85:72:c6:db:30:2f:c8:
b0:8b:c6:06:53:b6:61:23:50:30:99:af:cf:15:cc:d2:7f:57:
1b:64:91:70:c2:90:95:b4:26:56:03:c1:22:34:a9:e6:80:d4:
a1:2f:0e:ce:99:77:f2:88:16:f9:ad:86:c2:20:16:22:ee:cf:
01:de:10:51:3d:a9:14:f8:d1:12:16:96:c7:8e:60:45:e0:b9:
90:dc:55:1b:01:cd:4c:92:c5:82:f2:48:7b:3b:6e:32:48:b9:
5e:d7:d3:f5:9b:4b:9a:af:f4:77:40:8e:ac:03:8d:3f:2c:45:
ff:e7:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:50 2026 by rpki-client