
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier: kzaNCRuwujuQ7pzr9fJtgzjSknyi7JEjRZpWDTjaHYs=
Subject key identifier: 2A:32:F0:4E:FF:54:CA:23:A3:DE:A2:52:74:B0:A7:22:E3:7D:8A:74
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 23:27:34 +0000
Manifest this update: Sun 01 Mar 2026 23:27:33 +0000
Manifest next update: Sun 08 Mar 2026 23:27:33 +0000
Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 38hn0sPhu57cOghO5o8l9uVWZGH/QHFgy9avA+93saw=)
2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: M6ls0jXTH4pUjtm2iE2jOj7mJz7/jJFkAHSHdBjdY6o=)
3: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: ImLzfO9eYPkP8TeOeHFGuBUxwADU7Ur8U4TyxjSkGl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Validity
Not Before: Mar 1 23:27:33 2026 GMT
Not After : Mar 8 23:27:33 2026 GMT
Subject: CN=69a4cb66-195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:68:55:52:55:41:93:c7:d3:e5:e6:a6:c4:
60:d1:eb:5a:cf:40:fd:39:5c:20:3a:c7:fd:d3:10:
c5:91:44:11:68:10:d8:82:36:cf:8b:c8:b1:80:78:
5a:83:c4:6c:ed:cf:92:8d:7f:7d:06:e7:cd:af:b2:
ec:e6:2b:4d:7a:37:f7:f2:d0:3a:21:2d:73:3e:43:
78:55:f7:34:42:d6:ad:ac:78:18:27:e3:86:13:61:
f1:41:75:03:4e:72:35:16:39:02:7f:fe:e9:90:6b:
77:8f:c5:99:68:40:ff:a8:ad:8a:26:01:d4:48:54:
80:73:92:e8:0e:f4:be:60:72:63:73:c1:a5:6a:60:
ee:65:0e:70:a1:b7:d6:db:66:59:d6:4b:47:44:c8:
c0:35:9b:6f:4a:4e:f9:4c:29:7e:d7:50:05:91:cb:
c0:79:bc:8a:72:b3:d3:63:c7:f8:43:e6:cc:3e:ca:
7b:16:99:fc:bf:bc:c3:da:63:dd:76:d9:6d:97:14:
ea:3d:ae:64:e5:36:74:81:03:8e:af:e4:1e:e4:ad:
b2:3e:07:cb:85:c7:35:13:48:4d:ff:ee:9e:9e:f6:
e8:79:e7:3a:85:4c:da:06:97:68:3d:71:24:34:17:
08:ca:44:d1:15:4f:ca:db:3b:dc:a6:97:2f:67:3a:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:F0:4E:FF:54:CA:23:A3:DE:A2:52:74:B0:A7:22:E3:7D:8A:74
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:1c:2c:c6:71:b9:eb:8e:c8:7f:b0:db:85:6d:9a:4d:77:
f4:cb:86:e8:17:23:4f:5b:0c:84:dd:49:4e:b3:18:4b:cd:f8:
4c:7e:6c:3e:88:f5:d7:08:a0:12:f4:60:9f:f8:e6:f6:4e:ec:
ae:9c:50:d7:04:9f:37:46:ef:50:e3:89:56:a0:95:24:6d:0b:
61:4e:9d:04:e7:6d:ea:9e:58:41:d3:61:37:0e:39:da:54:68:
4a:6a:6d:58:b1:b9:af:fd:43:27:8b:84:8f:47:c6:eb:b9:d2:
c7:5f:53:cc:6f:9b:32:57:5f:ed:e5:5b:4f:85:99:b0:05:96:
fe:2f:aa:9f:3b:15:6d:22:34:f0:07:12:ae:05:84:61:ed:93:
05:c3:f8:72:59:39:a5:b8:06:40:f6:15:0f:c8:14:97:cf:80:
22:74:e9:a7:c0:d8:20:b7:4f:11:bf:92:8c:3d:48:1a:80:31:
c5:30:d9:40:bc:ee:70:e9:3d:ae:f2:33:63:b2:8d:07:36:8b:
6b:e5:2d:8d:97:17:75:49:21:3c:85:40:2d:d1:c4:70:44:1c:
06:ac:73:82:ce:cc:95:eb:07:ec:30:2d:95:cf:62:2e:2c:c9:
59:8d:2a:36:72:1a:f3:ab:6f:4b:07:6d:3b:d4:c6:6e:0c:00:
f1:66:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:18 2026 by rpki-client