
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier: q7Gzvd+oxp4DJ1P7o7b9n5j9qOgj2MhkdchIa3QCS9w=
Subject key identifier: 61:55:2C:9A:2D:08:78:EE:D1:69:53:A5:9D:4D:4B:CC:BD:2B:B7:8B
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:24:45 +0000
Manifest this update: Wed 25 Mar 2026 05:24:45 +0000
Manifest next update: Wed 01 Apr 2026 05:24:45 +0000
Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: 1E/Cq6THtR4Qyp+tKwBCe0O1x9jGwtSE55QQNrU/YrU=)
2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: PwimUUzRqIQY326ynkEto6gf0WYZ9xkmqQwJ2FpCrpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Validity
Not Before: Mar 25 05:24:45 2026 GMT
Not After : Apr 1 05:24:45 2026 GMT
Subject: CN=69c3719d-b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:1f:6e:b1:5c:b1:ec:fa:a6:69:bc:3c:3d:
df:ec:50:fa:da:cd:d2:7a:86:9b:65:24:28:77:5f:
f9:6a:f9:ac:29:f7:55:07:a6:07:d7:d3:84:50:cb:
b3:9d:26:1c:b9:d1:05:9a:54:51:35:e5:ab:34:74:
c4:3a:03:89:80:30:2f:9a:19:55:98:96:46:a5:55:
b0:88:d4:a2:25:b1:ad:42:2d:7a:58:e3:74:ff:85:
c2:58:ec:fa:7b:8f:17:86:13:86:1b:fa:7f:16:a9:
c5:fc:41:ac:c6:fd:5c:5d:38:d8:4d:5b:95:a6:6e:
35:2a:61:e9:d4:ff:95:71:e6:66:0f:b6:cc:48:5e:
31:5d:f8:30:5a:ec:20:26:5b:46:69:f8:83:18:22:
37:13:63:1c:4e:4d:d2:81:77:65:63:09:9e:23:6d:
98:87:95:1e:c3:0f:25:bc:90:87:58:00:38:fb:d5:
c1:90:88:b3:a6:98:04:08:0c:ed:ed:40:d1:ee:c0:
32:03:bd:c3:94:b9:72:8e:8c:21:75:1b:37:df:d5:
5b:84:42:60:c9:30:96:8a:34:0b:ad:6e:23:73:5e:
1e:60:f5:fd:bc:82:95:27:57:94:9d:00:9c:db:78:
1d:f9:cb:22:0e:a9:34:88:d3:4c:de:34:64:4e:2f:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:2C:9A:2D:08:78:EE:D1:69:53:A5:9D:4D:4B:CC:BD:2B:B7:8B
X509v3 Authority Key Identifier:
keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:b2:58:b4:92:ce:ad:38:f2:4d:66:27:44:ab:c6:7f:4e:
82:39:91:8a:89:71:a4:bf:2b:93:8b:be:b6:be:53:ca:45:2d:
16:3b:23:54:b0:1b:3d:56:92:f8:13:7f:c9:b1:03:74:16:a1:
e8:10:20:3e:e0:bc:27:c9:54:28:1a:dc:a0:15:15:b2:b9:2b:
bc:48:6e:8a:4c:fd:5d:7d:1b:25:e1:04:f9:10:f1:e6:b6:ee:
7b:42:31:9c:87:d8:06:fb:f1:0e:f9:f9:36:ce:f7:30:cc:c4:
31:8f:6a:c5:93:b7:55:a6:74:bc:17:5a:3b:6f:ed:89:04:d5:
34:4a:ac:b6:30:5e:cf:b0:67:ad:f2:e1:b1:0c:da:e1:28:38:
fd:a9:ec:98:0d:23:28:95:67:42:20:d7:49:87:bd:99:87:7a:
68:a4:e5:ff:61:e3:80:07:67:ef:db:2a:d7:48:a1:35:f7:a5:
75:73:ec:92:22:53:d2:f5:4b:cb:ea:08:a6:9d:a6:16:53:62:
cb:f3:e4:29:f2:f7:b4:eb:3d:53:43:6c:d4:82:de:a5:3f:cb:
54:23:70:aa:79:ef:5d:a3:f0:26:a7:25:d4:48:ac:cd:15:20:
f3:ad:0e:67:a0:54:a3:14:24:64:c4:9b:c0:80:dc:e7:bd:bb:
6d:e2:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:36:01 2026 by rpki-client