
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier: MwDFhSJLVjkipbcREAS8uCKE+NDIyXx6x+6oSj6/yqg=
Subject key identifier: FA:C0:AC:44:24:43:69:D0:65:0B:37:54:5D:3B:00:33:31:D1:4E:95
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial: 047A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number: 0474
Signing time: Tue 24 Mar 2026 23:45:29 +0000
Manifest this update: Tue 24 Mar 2026 23:45:29 +0000
Manifest next update: Tue 31 Mar 2026 23:45:29 +0000
Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: LTQvIDLAXP5y2aWzVZ/zGj+G6iSoBYLHzQv+5XBh5Zk=)
2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: ISYvVSKYiERQAYBzI/jF083BOrfksWj3XaooDHkbCsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Validity
Not Before: Mar 24 23:45:29 2026 GMT
Not After : Mar 31 23:45:29 2026 GMT
Subject: CN=69c32219-9f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:c0:0f:83:44:be:d0:08:ea:ed:53:dc:91:
c4:13:20:74:b7:17:a8:7b:bb:26:79:34:ca:19:a6:
e2:a9:4f:e5:ce:9b:95:82:06:d9:30:e8:3f:7b:01:
61:6c:91:c0:42:59:bd:5c:81:b1:df:bb:d8:ea:df:
b7:1d:da:7b:35:ea:1c:b5:f5:af:23:36:0f:da:dc:
73:f2:88:ef:4f:7e:fa:ba:d2:50:f6:fa:f2:b1:b4:
5e:a0:e5:f8:2b:2c:22:b2:fc:8b:bd:f0:aa:62:8c:
08:f0:65:58:01:8d:cd:26:7c:b8:7d:f4:73:23:93:
73:27:45:74:1d:a9:e5:b7:1c:31:b5:81:5a:d1:fb:
46:c9:3a:fc:e0:aa:d9:80:53:01:0a:5a:bb:4b:68:
d0:9f:88:12:bc:59:64:8e:bc:f0:0d:2c:73:a3:17:
3b:af:83:d3:58:a8:cb:21:89:32:7a:70:2e:26:d8:
a1:2a:aa:bb:50:c5:c0:e3:9e:ed:c0:2e:4e:d5:30:
7a:23:32:e1:eb:78:2b:eb:81:cf:68:ed:95:d7:e5:
69:fc:e9:f1:94:5e:20:ce:76:8b:e7:04:c4:a4:d7:
8a:8d:05:79:a4:46:b3:ef:ef:75:ac:fd:82:b1:3f:
c4:6e:c3:ae:ac:01:fb:cf:5f:b9:fa:c2:ff:d5:10:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:AC:44:24:43:69:D0:65:0B:37:54:5D:3B:00:33:31:D1:4E:95
X509v3 Authority Key Identifier:
keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:eb:c1:0d:b9:fc:01:8c:44:1a:cc:85:73:92:21:92:02:
b8:98:62:0c:a1:16:90:7b:a6:84:86:53:80:5e:20:16:18:61:
d6:8c:1e:49:95:68:f4:20:08:7d:83:c3:fc:b4:b3:eb:69:ad:
c2:bc:49:d8:03:95:56:e4:69:40:36:1d:3c:2d:27:47:f9:da:
18:93:a7:8b:00:73:10:44:a0:af:d6:45:ff:56:67:56:cb:a1:
c7:f5:45:ad:08:d7:c4:8a:f4:95:a8:27:b9:b7:61:c3:73:8b:
5f:ef:61:10:8f:7d:9a:77:74:98:28:c9:1b:b0:e1:39:cd:d7:
2d:8e:d8:08:d2:21:0a:c3:b3:9c:0c:47:ec:a0:70:69:15:b7:
5d:cb:52:4c:2e:c7:b5:bd:25:90:c7:0d:cf:02:bc:cc:bd:cf:
d2:ff:75:e7:55:9f:52:7c:7d:aa:2b:aa:58:43:cc:4f:0a:74:
98:67:1f:9a:e3:58:4b:e3:69:f8:3f:53:49:cc:bd:dd:40:70:
d9:5b:dd:12:21:98:ce:88:a6:be:98:ed:d6:a8:8b:e3:f0:1b:
e7:00:a8:30:0e:0d:00:7b:cd:0f:6b:67:05:01:21:7f:9d:f9:
22:e4:d0:1e:70:a8:3b:85:b2:84:41:84:fb:aa:2f:7a:0d:8c:
59:38:1b:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5
RTQ4MDY2NEQwHhcNMjYwMzI0MjM0NTI5WhcNMjYwMzMxMjM0NTI5WjAYMRYwFAYD
VQQDEw02OWMzMjIxOS05ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5nHAD4NEvtAI6u1T3JHEEyB0txeoe7smeTTKGabiqU/lzpuVggbZMOg/ewFh
bJHAQlm9XIGx37vY6t+3Hdp7NeoctfWvIzYP2txz8ojvT376utJQ9vrysbReoOX4
KywisvyLvfCqYowI8GVYAY3NJny4ffRzI5NzJ0V0HanltxwxtYFa0ftGyTr84KrZ
gFMBClq7S2jQn4gSvFlkjrzwDSxzoxc7r4PTWKjLIYkyenAuJtihKqq7UMXA457t
wC5O1TB6IzLh63gr64HPaO2V1+Vp/OnxlF4gznaL5wTEpNeKjQV5pEaz7+91rP2C
sT/EbsOurAH7z1+5+sL/1RBcGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrArEQk
Q2nQZQs3VF07ADMx0U6VMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz
MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs
ZzlTYmxIRzgzQWFlU0FaazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARUvrwQ25/AGMRBrMhXOSIZICuJhiDKEWkHumhIZTgF4gFhhh1oweSZVo9CAI
fYPD/LSz62mtwrxJ2AOVVuRpQDYdPC0nR/naGJOniwBzEESgr9ZF/1ZnVsuhx/VF
rQjXxIr0lagnubdhw3OLX+9hEI99mnd0mCjJG7DhOc3XLY7YCNIhCsOznAxH7KBw
aRW3XctSTC7Htb0lkMcNzwK8zL3P0v9151WfUnx9qiuqWEPMTwp0mGcfmuNYS+Np
+D9TScy93UBw2VvdEiGYzoimvpjt1qiL4/Ab5wCoMA4NAHvND2tnBQEhf535IuTQ
HnCoO4WyhEGE+6oveg2MWTgbtw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:58 2026 by rpki-client