
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier: 5RCgArjDSXbxrxnBElJQBMNg1+Bh20qCMnLvTr2crbk=
Subject key identifier: D3:7F:09:E7:8E:48:BA:AD:5C:C2:D8:79:AD:57:1E:9B:F8:02:97:04
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number: 0271
Signing time: Wed 23 Sep 2026 01:53:26 +0000
Manifest this update: Wed 23 Sep 2026 01:53:25 +0000
Manifest next update: Wed 30 Sep 2026 01:53:25 +0000
Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: kZrgnBmApAtiX6aueovUqfaHshEST4EndRDZ0cAAN9M=)
2: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: oB5JBkNKyPLzP2gSGsWtUBpF7gy+qEDEj6Z9Is4zAyU=)
3: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: mVpGi+39/Ahcjv+ekq0PpEG9jvYwKXVC4QVppE2Htr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Sep 23 01:53:25 2026 GMT
Not After : Sep 30 01:53:25 2026 GMT
Subject: CN=6ab33115-a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:26:e2:4a:95:13:11:13:92:1c:47:0d:a5:
36:a3:e3:ad:7e:77:2f:90:4b:a3:fb:5f:ba:81:4e:
68:80:36:25:aa:c2:14:03:fa:d5:5c:61:88:99:9c:
05:f9:97:c5:f4:9a:25:d4:6c:14:c2:84:f5:b0:b9:
2d:aa:68:cf:ee:d2:dc:27:14:96:87:af:8c:7e:51:
db:32:c8:f5:2a:d9:fa:5b:86:ea:ec:84:3b:fc:22:
83:e9:b4:30:52:a0:44:b3:e2:99:87:5c:c4:ff:f3:
35:67:12:61:29:5a:9f:7c:b0:05:a5:78:aa:2d:5a:
63:45:d7:3e:57:49:2a:1b:cc:ca:f6:7a:56:28:91:
cb:cf:37:51:b0:36:46:d9:e7:25:47:ea:9f:7c:52:
ee:cc:31:8a:5d:6d:9a:18:4d:2f:c5:2f:b7:cf:76:
1d:3d:79:d8:b2:ac:e5:7c:60:2c:8b:ae:a0:0a:cd:
94:4f:b1:99:44:51:78:c3:d4:a8:66:d0:06:ca:79:
3a:07:30:ba:39:fa:eb:bf:17:9e:cb:c5:c9:9b:51:
6f:15:93:19:bf:9b:3f:1e:52:2c:06:a1:99:32:21:
20:9e:83:0d:f1:de:0a:df:96:24:c8:79:3c:27:52:
ae:0f:25:9c:11:d9:e9:3e:9c:39:fd:a8:1e:ec:b5:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7F:09:E7:8E:48:BA:AD:5C:C2:D8:79:AD:57:1E:9B:F8:02:97:04
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:bf:d0:78:8d:4e:1f:73:23:47:3e:88:39:6d:67:b2:10:
98:c1:f8:b6:e9:c9:4c:28:2e:6d:04:bd:39:5d:e3:80:da:a2:
e7:cc:0e:cc:8e:bf:9d:78:f3:75:5e:1c:7b:dc:72:7a:bf:73:
21:55:c8:03:78:34:75:5a:c3:80:03:32:43:d0:13:2c:51:99:
8c:c7:d2:0b:74:a9:a2:a9:12:7b:07:fa:24:89:c0:c1:63:f5:
f0:1f:50:11:10:ac:f2:25:8e:22:92:42:f6:db:71:59:1d:e7:
f7:73:f6:81:cd:e2:10:f3:4c:b3:de:01:f4:3c:db:f2:26:3a:
14:0d:42:60:ed:f5:b5:ad:88:95:df:43:9f:13:5f:f8:42:42:
4d:8a:37:c4:78:db:01:3f:61:4a:a3:02:78:ad:d9:f6:f9:c5:
64:83:06:6a:6d:15:c6:b6:42:4c:67:07:34:bd:df:1f:52:79:
8c:c4:75:36:f6:9b:ad:d6:3d:5f:b4:2f:fc:1d:48:0c:78:f7:
f3:56:87:86:b9:7a:c7:97:99:8d:a6:e1:7e:c0:83:43:24:6f:
78:55:3b:b8:41:d2:3a:ff:64:ef:80:88:66:c8:31:cb:4c:5a:
3e:a8:56:e7:b2:96:fe:3b:80:23:33:1d:89:7c:23:54:dd:fe:
66:46:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:07:27 2026 by rpki-client