
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: eNu154dghm1uT/AYDWCD8oRV0NNK4p5cgqy3g6Z+Yd0=
Subject key identifier: B8:2B:AF:50:21:A7:9C:40:E1:2E:EA:E9:2E:DA:B5:C3:71:81:3E:DD
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0C00
Signing time: Thu 26 Mar 2026 18:45:18 +0000
Manifest this update: Thu 26 Mar 2026 18:45:18 +0000
Manifest next update: Thu 02 Apr 2026 18:45:18 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 6tTeNF8MdN/HNf5rkqX7FPwy1Ihd8dtdOtupSaFMo1Y=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Mar 26 18:45:18 2026 GMT
Not After : Apr 2 18:45:18 2026 GMT
Subject: CN=69c57ebe-bd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:b5:14:63:58:f7:04:16:1a:ca:8f:ee:bd:
6f:fe:40:07:77:42:f7:e4:41:bc:8a:c2:35:f3:5b:
cc:11:4c:be:49:6e:ac:f6:64:25:67:cf:d3:95:81:
ff:6b:76:ea:1e:72:7a:b2:97:d8:f7:0b:22:e9:96:
5b:37:48:f5:50:76:bb:76:b7:d6:ec:99:4a:66:a3:
9d:48:9a:15:ba:32:7e:5d:51:c8:29:fc:5a:4a:ae:
8c:19:5f:25:db:ce:cf:f1:59:8f:71:c4:80:f7:5c:
a3:5d:27:e7:aa:e0:55:1c:aa:7a:d7:9c:81:cf:e2:
f7:4b:4d:c3:72:9c:11:4d:f8:f1:3b:eb:0b:50:78:
68:fe:d9:12:e5:65:83:05:43:1a:df:14:47:77:5a:
79:50:3a:d7:80:a7:cb:f7:56:2c:cc:b4:b2:2a:b1:
50:15:54:97:72:f6:d4:d9:15:5a:75:74:fd:53:b3:
52:bb:ca:88:c6:c7:43:e8:2e:ca:aa:4c:4c:64:fd:
50:c7:50:f3:6a:4d:6b:79:75:ae:33:57:a0:6d:0e:
8f:f9:de:b4:e6:93:74:0e:b5:8e:96:8f:68:2d:08:
d2:55:0f:d9:10:dc:63:21:df:9e:3e:81:2f:9c:93:
c6:95:28:aa:13:9a:d0:9e:36:28:8b:90:c0:31:b3:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:AF:50:21:A7:9C:40:E1:2E:EA:E9:2E:DA:B5:C3:71:81:3E:DD
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:e0:a3:0e:f1:05:97:de:07:73:ae:6e:a9:a6:01:f9:4f:
b5:0a:49:c2:c3:dc:48:e6:3a:ac:97:df:3c:a6:77:1a:25:0b:
96:da:02:fb:f6:e0:4c:8b:03:8f:f2:9a:bd:20:5e:10:53:d1:
27:45:ce:b5:de:49:70:59:7d:a1:3e:84:73:06:0d:7b:af:6c:
ed:d2:08:d9:6c:ec:37:7e:5b:84:c3:8e:ef:d7:f7:d4:4c:66:
be:22:19:b4:5b:aa:76:cc:84:aa:8f:b2:16:01:71:17:5f:01:
fa:bc:26:e5:1b:f6:5f:72:ff:4c:2c:44:3c:cf:15:d0:20:23:
2c:c9:96:e6:7a:e3:ca:c4:12:be:63:f3:bc:d1:dd:cf:65:14:
f1:3d:b0:81:72:6e:ad:b8:70:d8:a0:76:2a:9e:90:d3:2b:53:
5c:67:21:6b:67:07:c5:e4:52:a1:13:e3:34:4f:01:e5:bc:b9:
90:33:c8:22:d6:14:fe:bf:80:41:09:60:e3:f1:b7:a9:f1:4d:
36:0c:c4:fe:1d:e1:ef:7b:40:3b:b3:ba:26:78:72:3c:bf:99:
1a:0e:96:2e:5a:16:b8:23:8d:89:3f:2f:ee:81:b4:53:54:07:
fd:32:33:e8:f4:68:59:3a:6d:9f:56:da:5e:1e:3c:68:74:1b:
f3:14:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:35 2026 by rpki-client