
$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier: D0cK/s2S/Q+ApM5vyMncMpU7lNkqwXvCi97Sqomue+w=
Subject key identifier: 8F:AA:B3:2C:55:8B:DC:CE:92:3E:36:FE:B8:D0:A0:1E:17:C8:85:EF
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial: 0BA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number: 0B9A
Signing time: Mon 02 Mar 2026 03:10:11 +0000
Manifest this update: Mon 02 Mar 2026 03:10:11 +0000
Manifest next update: Mon 09 Mar 2026 03:10:11 +0000
Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: WEDcZB9ffsx7hqA189/je9xu3IZ4CoDBSnH2WOiQ6BI=)
2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: ybu4TRi1kWC8ch99fNXPnIw41VP/i805qg2nqD/B1Eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Validity
Not Before: Mar 2 03:10:11 2026 GMT
Not After : Mar 9 03:10:11 2026 GMT
Subject: CN=69a4ff93-7bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:16:f4:90:56:f5:61:7a:e8:7e:fb:bf:12:
30:fe:3f:64:aa:0c:04:cf:2f:21:3f:0e:6d:c1:84:
4c:6f:c5:4b:28:61:be:1f:8d:fd:21:60:58:fd:8a:
8b:a5:0a:ab:63:4a:d1:2f:b4:e0:61:bb:d5:e7:f6:
e2:f5:ae:ee:29:45:7b:4b:63:b4:c2:c2:b7:97:16:
17:40:29:a2:fe:55:4b:3c:60:30:e0:f2:6b:32:70:
5e:0e:7d:e7:a0:02:a8:9e:0f:3a:6d:66:52:6d:b4:
f3:df:f8:a9:04:66:1d:3b:14:60:f1:7d:34:1f:16:
78:c7:f5:f8:83:6d:0c:2c:6a:f6:e1:99:c5:0c:f8:
f0:c6:04:7b:d7:d8:bd:5b:d8:3a:06:09:58:9c:27:
ab:1f:e5:80:8b:8b:20:b7:93:5d:8e:fb:f4:97:3f:
99:b7:96:8f:ec:0c:0d:e2:71:a4:65:52:78:0f:9a:
86:63:aa:5b:38:64:03:94:fb:fb:3b:e2:69:59:0b:
8e:5e:e7:ec:75:c0:f0:73:eb:a3:4d:35:dc:64:ba:
4f:5c:c7:ea:ed:bb:e9:14:9b:8a:4a:e8:c6:d2:2d:
f4:6a:b2:6f:16:66:80:74:e2:1d:7c:60:7c:55:6a:
ff:d1:33:f1:4d:f9:60:9c:bc:5c:e5:74:f5:ad:6d:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:B3:2C:55:8B:DC:CE:92:3E:36:FE:B8:D0:A0:1E:17:C8:85:EF
X509v3 Authority Key Identifier:
keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:4f:bc:13:77:d1:04:7c:9c:00:be:9f:06:6e:73:42:9f:a7:
39:41:f3:f8:1a:b1:65:ea:50:20:47:77:3b:4f:31:8b:40:9a:
8a:81:63:69:eb:9d:3c:f2:fa:1f:7d:d8:4e:e8:95:1f:f0:b7:
1a:7f:73:5e:d9:91:94:54:57:f1:ed:c2:2f:09:8b:95:fa:ab:
68:e9:1a:b7:cb:d8:f3:93:f5:3a:9c:3b:6b:4a:49:0d:08:01:
4c:37:04:f9:89:47:b4:cd:af:f5:97:1c:a1:50:c4:16:c2:d6:
b6:5c:2e:fb:c4:5c:77:a5:19:a3:45:38:2e:82:a0:b7:0a:fd:
fe:3d:92:fa:5e:3a:3b:41:80:16:69:75:19:8b:a3:b5:4f:68:
a3:91:74:51:c0:20:2f:f7:bb:77:a7:7a:7f:9b:41:05:70:38:
9e:24:2b:ba:e4:e3:32:87:c8:d8:f1:84:9d:c6:df:19:bd:67:
e4:6e:c3:12:88:ab:33:d3:cc:dd:65:bf:64:8e:63:05:5c:9b:
11:75:67:4f:de:a7:8e:ab:c6:11:a1:61:31:7c:66:43:e6:b0:
b9:d4:38:35:fe:a4:50:d4:a7:30:6d:db:22:8b:cd:63:06:67:
58:18:b8:3c:25:28:9b:56:86:3f:53:39:56:68:c8:e9:bc:5b:
62:39:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:23 2026 by rpki-client