
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier: ncfTXYpabzE2QY16TBlX5UmvH3OWarYWj1I167ZAmWk=
Subject key identifier: 8F:72:6D:26:E3:14:41:3C:A4:DB:D5:B7:43:7A:3C:BF:7B:E9:E3:9D
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial: 0B3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number: 0B33
Signing time: Tue 24 Mar 2026 19:04:54 +0000
Manifest this update: Tue 24 Mar 2026 19:04:53 +0000
Manifest next update: Tue 31 Mar 2026 19:04:53 +0000
Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Oobjt1JUzY8AqjL5zjb533ZmDgkeyE6Zq+HHYeNJPgw=)
2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: aXpgZXW8Cnbr8t1kmvAwuXjiQ6a1hBE+IDI1VsUVDFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Validity
Not Before: Mar 24 19:04:53 2026 GMT
Not After : Mar 31 19:04:53 2026 GMT
Subject: CN=69c2e056-4fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:cb:fc:92:35:4f:4b:d3:54:dd:a2:ef:c9:
1c:df:6f:cb:42:d0:a7:ca:ad:3e:6d:79:a2:67:17:
88:c3:eb:f0:b6:2d:17:e8:67:b5:3f:9f:dd:a7:8e:
3e:86:86:be:2a:bc:11:e4:93:eb:a0:f4:20:80:2a:
6e:fe:24:c1:e8:7a:03:4e:58:84:20:0d:25:fc:e2:
b7:4d:05:87:1f:5a:6a:8b:18:fe:4b:61:ff:dc:93:
df:16:cc:7f:71:e0:c9:fd:a0:14:91:2f:c2:11:47:
39:90:7f:16:1b:cc:b3:a2:2c:52:2e:64:f0:b6:93:
d9:4d:20:bf:1a:7d:f4:7c:ec:d6:b5:f8:05:ee:6f:
9d:75:20:7c:57:c0:69:b7:4b:3e:50:ef:fe:a0:cf:
b1:67:fc:ed:7f:a1:a5:84:4f:cf:5a:dc:3f:f5:e8:
f6:ba:cd:31:bb:8c:2e:70:66:69:0f:7d:7d:6c:ea:
90:08:32:c6:ed:ae:30:48:70:77:82:e3:33:d6:bb:
c7:78:0a:b1:b7:7e:99:02:4a:c8:33:7b:5e:63:32:
7b:fd:94:f7:5f:7d:1c:94:f0:94:15:dc:53:90:8f:
f4:4d:cf:c2:2b:3b:a3:a8:1a:02:67:88:e1:61:4b:
1f:71:2b:d6:82:7b:68:bb:d4:cd:56:29:54:c7:bd:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:6D:26:E3:14:41:3C:A4:DB:D5:B7:43:7A:3C:BF:7B:E9:E3:9D
X509v3 Authority Key Identifier:
keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:25:1e:62:44:9c:54:ba:20:35:1f:c3:f2:88:44:ce:03:6b:
01:0e:84:d0:8f:10:23:9b:37:3e:d0:0e:e1:7a:13:62:62:ca:
a8:9d:4d:03:95:b8:c4:72:32:37:56:5a:72:5b:3a:ad:7b:bf:
1b:d2:2a:af:89:00:d3:12:38:58:61:4a:a8:c8:98:f6:e6:1c:
9f:ba:ce:30:0d:8d:36:a5:14:b9:b3:fe:ea:1f:ae:65:37:64:
1b:df:94:89:1d:64:b9:ab:f4:1d:61:35:0f:2b:78:0b:19:ed:
68:f8:39:9d:46:64:af:d1:4b:5c:c5:bf:b2:a3:b3:64:f3:a6:
c7:25:b7:50:66:0e:dd:1f:8c:89:5b:6a:79:c6:c0:46:a3:ee:
d0:1f:bd:b3:e7:96:99:14:6c:49:34:e0:74:54:6a:92:e5:86:
25:f7:0a:54:c3:4d:c9:d9:b7:ca:81:c2:4a:a5:04:f1:5a:6a:
df:ff:d2:6f:0d:a7:82:2f:dd:a1:09:c4:1f:a6:61:27:5f:a9:
00:90:39:8a:92:59:c7:28:80:0e:b9:a6:cb:ce:e1:a5:71:2e:
d4:1f:0f:23:53:4d:06:6d:7f:7b:72:fe:6e:ec:52:38:db:ae:
54:22:76:ff:86:4d:70:37:fa:89:4a:97:ca:39:8e:20:9d:87:
d6:75:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:44 2026 by rpki-client