
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json)
Hash identifier: dNBb/f+EKodwHJlU4h8oSnSsQRtB2u69I3DQG4M54d4=
Subject key identifier: 12:3C:64:10:14:A3:8F:95:26:29:E5:1D:4F:89:18:67:95:82:2B:CF
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
Manifest number: 0536
Signing time: Tue 24 Mar 2026 23:11:51 +0000
Manifest this update: Tue 24 Mar 2026 23:11:50 +0000
Manifest next update: Tue 31 Mar 2026 23:11:50 +0000
Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: ct3XtX6cNaIbhvUtqXQHp420tPOAqLOsj5+qrrLGEUw=)
2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: D8jp9xliUSLjFN63f0ZNA2LVj8DZZTdQgx3Mu8eWrFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Validity
Not Before: Mar 24 23:11:50 2026 GMT
Not After : Mar 31 23:11:50 2026 GMT
Subject: CN=69c31a37-d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:00:c7:73:68:ff:31:ff:89:d4:5c:9d:3e:
93:46:20:2e:28:11:cb:ef:6e:50:bc:a9:f5:93:b5:
54:e6:4b:df:e8:51:86:74:f3:56:5e:5c:3d:bc:1e:
f5:e1:b8:46:63:2d:f0:51:5b:a0:8c:21:ba:4d:4f:
34:35:5c:02:07:59:92:5c:5d:06:3a:e9:dc:3c:a0:
7d:ee:ae:ad:c1:ae:f0:58:53:19:4b:07:99:78:6b:
8f:1d:0c:64:75:ba:23:05:eb:21:37:b8:83:6c:00:
e6:be:0b:fb:c8:d7:60:3a:64:cd:ea:04:4c:b3:0d:
36:08:ba:12:be:b1:8a:7e:c3:f1:b5:8e:66:4b:2e:
bf:ac:ff:5d:9e:5b:84:be:92:c6:ef:4f:8d:2d:b6:
42:d8:35:09:0d:36:08:14:8d:47:60:b4:ea:0d:77:
30:c4:70:b7:de:94:7c:38:49:b3:c9:68:4d:dd:7c:
db:f4:11:53:52:a7:50:21:4a:c9:a9:ef:ba:7a:ce:
ea:f9:6a:91:23:d6:89:83:c2:49:b3:12:77:bc:a1:
a4:0d:ef:97:62:78:9a:56:9c:63:e7:69:59:be:63:
92:7e:5d:94:55:d0:46:f7:b3:d2:c2:fa:e4:f1:fe:
1a:2f:aa:2d:bc:e5:14:98:01:ea:69:ce:56:86:8e:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:64:10:14:A3:8F:95:26:29:E5:1D:4F:89:18:67:95:82:2B:CF
X509v3 Authority Key Identifier:
keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:5a:fa:43:75:55:90:52:a1:fe:7d:84:86:51:3a:52:ea:
bb:98:dc:34:77:fe:ca:92:ce:ee:7e:e8:0a:5d:e0:7b:12:b1:
92:bf:59:7c:12:e2:c1:fd:14:bd:b8:26:0e:c9:da:5c:10:6b:
8c:eb:65:5b:34:5e:27:77:e1:92:18:c4:42:79:13:15:68:a4:
04:83:45:b5:c3:07:1d:93:81:86:55:4e:ef:3d:27:75:08:3b:
74:1e:50:d1:0b:00:96:7f:c3:0f:28:11:54:51:60:f4:cc:2e:
9b:e2:3c:32:6b:64:ff:42:cd:c1:03:b0:12:a0:a6:4b:bc:d1:
51:72:d5:5b:94:7f:0a:8e:5e:b7:5a:2a:92:d5:b8:fc:5f:87:
30:1e:ce:a9:3e:b4:86:27:9f:01:a4:0d:50:99:87:f0:a8:b9:
0e:85:8b:96:c3:17:c9:9f:b4:7b:59:cb:2a:4d:dd:64:5d:c9:
af:5b:c5:1c:7d:0e:53:29:9f:85:78:19:88:88:8e:77:7e:da:
8d:b9:7e:25:7d:fd:95:f4:09:ae:99:9b:21:cc:b5:8e:cb:74:
a0:77:c3:bb:61:15:e0:06:60:be:11:cf:b0:b0:5b:67:54:ec:
66:45:39:6e:9a:cb:68:11:d6:ff:fc:a3:8b:61:e4:3d:92:27:
a6:4b:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:23 2026 by rpki-client