
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: yAkBUoMzj32q/LRkJj4AVOLFpxPKwvmn8MeHmxl6RIg=
Subject key identifier: ED:7D:E8:31:6E:B3:28:3C:23:6D:6D:85:42:6D:9F:EF:9D:63:85:46
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1DD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1DBF
Signing time: Tue 24 Mar 2026 16:01:49 +0000
Manifest this update: Tue 24 Mar 2026 16:01:48 +0000
Manifest next update: Tue 31 Mar 2026 16:01:48 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: aQVtv2Fo6gfqYiuPLEuVh3f3MSn4vbjs6S3kEv7D20I=)
2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7632 (0x1dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: Mar 24 16:01:48 2026 GMT
Not After : Mar 31 16:01:48 2026 GMT
Subject: CN=69c2b56d-9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:69:3d:f7:86:86:fd:c5:b3:99:39:d9:2c:
ff:b5:c9:73:0d:82:48:b9:88:00:1f:4b:ea:19:30:
a9:58:64:93:4d:f0:66:66:9b:ff:1a:66:fd:e2:41:
33:f1:da:51:f1:e7:b4:7a:cc:c8:36:84:47:d3:26:
71:ea:d8:13:8d:f6:cb:75:1b:fc:7a:db:c9:33:3b:
87:e6:ae:63:c6:94:4f:0d:31:a7:b7:68:8b:77:7d:
97:d1:b6:c4:56:7b:3b:ee:42:a4:93:56:89:80:9d:
95:f8:ed:db:94:57:55:d5:de:4e:07:24:db:10:46:
27:a0:51:c6:1d:10:f3:cc:0b:30:2d:5a:1b:19:76:
37:a0:56:26:6f:f7:c8:1c:80:eb:57:6a:ba:ba:c0:
9b:9a:2f:b4:69:cb:74:6c:a1:1a:ff:dd:3b:86:3e:
43:06:b0:d3:94:12:45:96:43:8b:fc:6b:24:47:cc:
64:5f:62:1d:63:f3:7a:71:af:0f:3c:93:cd:23:4e:
34:20:55:df:12:fb:ae:ff:b7:88:4f:ab:34:52:f3:
70:b3:57:db:2d:b1:be:68:78:30:08:24:1a:53:4f:
83:49:6d:5e:b8:8b:f5:c0:d6:e9:cd:da:d4:60:f6:
ec:87:95:8c:14:a0:15:87:56:95:5e:94:56:b6:d4:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:E8:31:6E:B3:28:3C:23:6D:6D:85:42:6D:9F:EF:9D:63:85:46
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:80:7c:c0:e1:69:fa:35:ff:85:b8:fc:73:41:cf:4b:8b:
4b:97:b5:da:28:e2:c3:aa:d1:bd:f7:dc:4c:2e:fc:61:dd:63:
02:a0:af:37:12:62:8d:32:20:37:6d:e0:01:55:a4:2b:76:01:
bf:b9:6a:75:26:11:0c:4e:40:38:61:ec:21:c4:09:2f:b7:0f:
fa:06:6a:1e:05:99:dd:62:f7:ab:ee:c8:9d:18:dc:e3:b4:f0:
24:e9:0d:95:50:5a:f4:87:70:34:37:59:9e:de:85:41:4a:6c:
a3:d7:09:39:40:b8:1c:62:21:ec:ef:f3:b0:30:d0:58:dc:da:
d2:86:26:d0:20:31:ff:24:d1:f3:e3:20:cd:8d:00:7b:0d:e7:
ae:be:92:cb:83:94:9b:8a:76:d9:c2:62:11:4d:22:fc:65:ce:
b9:91:ff:5f:a3:79:31:20:40:88:0a:73:17:0e:91:62:0f:ca:
f9:45:89:8b:53:83:ee:0f:54:df:8e:e2:49:32:b1:64:0f:bc:
0e:2f:af:aa:76:50:a9:1b:e9:ee:c9:90:fd:62:a8:0b:15:ac:
aa:b4:95:1d:1c:cc:a8:34:7b:98:a0:fe:8d:41:e4:6d:07:a0:
47:7b:89:37:b1:df:18:ce:77:3c:d3:01:6a:e4:b0:fb:b6:64:
a8:1f:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:32 2026 by rpki-client