
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json)
Hash identifier: LVN4HbqZBe+d3u1LBFXQ16PzpGniI0XGOw3l6j9SLVs=
Subject key identifier: CF:7D:8E:10:0F:53:3C:0A:32:EC:4C:BD:84:21:E3:48:35:BA:AC:32
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial: 079D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
Manifest number: 078A
Signing time: Tue 24 Mar 2026 21:18:07 +0000
Manifest this update: Tue 24 Mar 2026 21:18:06 +0000
Manifest next update: Tue 31 Mar 2026 21:18:06 +0000
Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: qo4Z/7hulzoMbwE6frcTCOhYy53dErQsVYw6V0Jbn5U=)
2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: aF15WV54UPQi+570lsW9w8ZiAccp8MovG9ijIx3Rdww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Validity
Not Before: Mar 24 21:18:06 2026 GMT
Not After : Mar 31 21:18:06 2026 GMT
Subject: CN=69c2ff8f-51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:16:5b:26:68:d0:b5:33:21:6b:72:67:c7:
18:b6:eb:12:fa:7c:be:2d:23:2a:86:71:2a:e4:34:
04:60:28:99:fa:34:4b:69:48:51:59:c9:d5:6d:f4:
e1:d6:ab:cb:bd:e5:c2:c1:b0:55:6c:0c:cf:ac:83:
89:64:6b:99:9c:f7:a7:a4:16:44:a8:fd:83:ef:ae:
12:f5:b3:35:6f:12:fb:93:e2:6b:ed:d4:cd:5b:ee:
6c:aa:22:02:50:fc:b9:8c:16:86:34:b2:84:48:3d:
be:9a:14:5c:c1:70:e7:eb:12:6e:5e:eb:49:9c:77:
0c:51:bb:53:cd:b8:f9:ab:0d:fb:6f:3c:e8:f1:dc:
57:10:85:7f:20:f1:b9:e4:bf:81:75:59:bc:88:65:
e3:d6:dd:13:b1:90:46:49:02:09:2a:76:ce:18:ee:
d3:59:e5:57:6d:cb:de:98:f5:41:a6:da:b6:f0:7e:
12:f8:a3:7c:6c:b3:f9:6a:77:bc:b5:7f:3f:65:be:
d0:c7:d9:09:e4:91:ba:2b:c9:fc:c8:87:45:35:01:
61:cf:44:cc:0c:37:6c:f4:31:47:50:88:cc:ff:d3:
c0:f0:b6:8a:9e:f1:92:4e:7e:e7:ed:e8:8c:15:c9:
61:b6:4c:4a:44:64:12:27:fc:f8:a1:7b:73:92:a7:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:8E:10:0F:53:3C:0A:32:EC:4C:BD:84:21:E3:48:35:BA:AC:32
X509v3 Authority Key Identifier:
keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:56:08:9f:89:9f:c1:9c:69:71:64:98:43:82:c3:08:b4:
74:0d:01:8d:9e:f1:77:e9:a4:45:1f:18:d3:8f:f4:fd:d6:fc:
ec:6f:58:01:ce:20:de:7b:8d:17:ad:52:df:e1:22:23:6d:2a:
4d:82:9c:60:44:9f:97:b6:74:c6:a4:7b:63:7b:73:4d:27:ad:
d4:57:cc:69:81:61:e2:39:13:a8:8a:b1:1d:78:e4:2d:37:be:
e8:98:1d:09:fc:44:96:25:61:c2:db:d7:51:e0:28:63:5b:2b:
10:49:6c:b1:1a:43:c6:cf:dc:75:d1:ee:58:ad:9d:af:01:9f:
29:df:5d:c9:3a:c6:6d:92:1f:2f:4e:9c:4c:74:95:50:bc:b5:
af:7e:54:19:b4:a2:63:94:49:a1:0a:2e:8c:1b:8c:13:83:88:
e9:ee:eb:fd:bb:9d:e8:16:8a:cf:be:2c:d2:32:1e:da:b1:06:
3c:6d:c0:50:1a:ec:f6:a2:41:dd:9e:69:d5:0f:86:e9:8b:59:
92:ad:8f:90:9a:ed:f4:d6:66:05:07:73:a1:17:a7:8d:5d:f8:
0b:63:96:95:22:13:77:28:5c:36:91:d9:b3:58:9c:8d:9e:d0:
92:ac:59:ca:2a:8d:f5:f3:e1:78:85:78:bb:3a:c0:90:5f:68:
17:ce:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:35 2026 by rpki-client