
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json)
Hash identifier: EL4pAX8wns5Em+lxNKoqbLzdUx3RTEsewuzpFSHvKiE=
Subject key identifier: 62:75:F5:93:74:E7:26:1D:37:44:17:DF:A2:72:85:32:FA:CB:BC:51
Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
Manifest number: 01DB
Signing time: Wed 25 Mar 2026 02:48:22 +0000
Manifest this update: Wed 25 Mar 2026 02:48:21 +0000
Manifest next update: Wed 01 Apr 2026 02:48:21 +0000
Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: T8N1lgH4Kohfb7VteifmZ62qTBH4y3MPdLuEcZtljy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Validity
Not Before: Mar 25 02:48:21 2026 GMT
Not After : Apr 1 02:48:21 2026 GMT
Subject: CN=69c34cf6-1205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:73:da:18:b8:e4:a8:bb:80:69:8c:67:d7:
f8:7e:f2:36:67:ee:fb:11:15:c5:6d:63:74:68:8e:
80:19:f2:a3:e1:34:12:5b:26:a6:d0:a3:f5:42:43:
84:34:aa:96:ca:12:e4:12:65:38:0b:f1:db:94:e9:
de:d9:36:de:73:6e:92:f8:5b:aa:69:ef:d5:7d:9a:
a0:1f:2d:d6:d5:0b:ce:28:48:73:21:75:07:96:f6:
1c:1c:01:46:34:00:ed:a2:e2:17:b8:b3:62:21:48:
e5:d3:cc:56:ba:86:df:50:8f:9a:98:68:74:1a:1a:
c0:e0:d1:ee:d1:6b:a2:ba:97:f6:67:1a:9d:0a:b3:
6c:48:fa:39:8c:d0:6c:e5:08:7e:45:10:5f:9b:12:
27:03:47:8a:02:02:8c:9d:30:eb:37:d2:71:ec:7c:
cf:6b:cc:9e:e7:7f:83:1c:2c:96:53:ad:24:53:86:
11:b8:10:aa:43:5a:5c:8a:d1:41:cf:53:ca:0c:f7:
a5:16:f3:d8:92:05:ba:fd:bf:f8:0c:d0:24:63:01:
e0:67:aa:62:4f:dd:a9:d3:76:7e:2d:02:81:da:a8:
2e:25:46:5a:00:0c:fd:41:27:37:18:07:29:28:2b:
c0:34:09:27:38:35:fd:79:92:d2:39:6e:7b:7e:45:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:F5:93:74:E7:26:1D:37:44:17:DF:A2:72:85:32:FA:CB:BC:51
X509v3 Authority Key Identifier:
keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:7b:96:6c:cf:54:4c:c7:96:a3:fb:27:28:79:f2:b6:16:
ee:ae:18:5b:34:47:c2:d8:f6:e2:aa:e2:55:14:20:29:64:a5:
6e:76:a7:82:30:42:5b:5c:bf:c5:56:39:dc:88:a2:f3:a1:c5:
0b:40:f6:e1:6d:a9:90:44:7d:c4:59:cd:22:a5:a0:0e:ad:be:
af:95:52:a4:75:d4:b1:49:4b:77:8d:f3:2d:11:3e:76:d5:0b:
6d:1b:be:84:37:fa:6d:2a:81:9e:47:95:96:42:45:d4:fc:7c:
85:5b:77:82:f7:fe:f3:5a:67:65:ee:c6:9e:49:3a:43:73:4c:
2c:d3:fc:3d:85:2e:ed:92:a3:ce:51:d9:27:d5:1b:36:97:18:
73:98:66:07:17:c3:5d:97:9a:37:e5:80:13:ce:38:08:fe:e6:
5c:d4:69:4c:42:f4:f3:5d:14:56:9e:fb:ee:29:d9:fb:2b:ef:
72:2c:d0:01:4b:45:c8:af:7e:fa:c1:5c:a1:40:d0:07:41:eb:
a9:9e:8e:cd:27:b1:f8:f3:dc:d5:11:14:d8:80:66:ce:50:97:
84:67:e4:3d:09:ca:dd:ff:93:29:78:01:52:34:09:4d:cc:e5:
46:9a:d7:4b:7b:78:f2:2a:16:21:b0:19:93:4c:2b:69:d0:5a:
41:31:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:39 2026 by rpki-client