
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: Fw3PaZ6sd1H90g42LQNLAYDB9KUkiFUzeCj0yK2bBJw=
Subject key identifier: 01:06:35:E5:FF:89:54:50:43:A5:C4:FA:F6:2F:5B:8C:EC:EE:74:94
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0626
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 061A
Signing time: Sun 01 Mar 2026 23:56:47 +0000
Manifest this update: Sun 01 Mar 2026 23:56:46 +0000
Manifest next update: Sun 08 Mar 2026 23:56:46 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: 4NHVOH2eiWmBGD4tgL6Sxz+1o57DCVg4QpRhpzsG1yU=)
2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: WB4/4aQXO0dmreo4i2lxjozeibXr37yGg+CXzqW0Gx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Mar 1 23:56:46 2026 GMT
Not After : Mar 8 23:56:46 2026 GMT
Subject: CN=69a4d23f-8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:ad:31:c9:98:c6:bd:ae:fc:90:f1:3f:a5:
54:4c:e8:33:e5:be:79:af:f2:12:a2:8e:05:e3:4c:
38:7b:f0:f0:2f:58:bb:52:71:2d:1b:da:de:51:96:
73:e6:e6:12:53:9d:59:72:ec:60:73:ed:4a:70:a2:
a6:9d:b8:2d:fc:58:ab:19:fa:d4:a2:4e:69:9e:4a:
f3:ac:70:4a:37:e0:c1:e3:4f:a4:fd:f9:59:4e:4f:
6b:63:a5:6c:3e:2d:e0:8f:ff:81:88:57:e6:fd:ee:
f3:48:05:5f:01:c5:0a:8a:0b:0e:99:3b:9a:49:40:
eb:f2:fc:bb:11:56:54:98:fd:f0:fd:be:34:a6:ac:
ee:3c:e2:fe:14:92:44:37:92:1e:62:fe:c1:3c:a3:
d3:bf:ac:80:8f:11:21:a0:9a:30:b3:c6:ab:57:65:
8f:b5:19:32:9c:f6:39:ed:9b:e3:1c:ee:a8:b1:b4:
2a:42:3f:c4:3f:e6:7d:c8:b6:18:c4:6e:63:ce:af:
20:99:a4:65:e6:7e:b1:db:80:0a:25:03:db:74:9b:
85:5d:46:b1:53:e3:6d:3f:5c:6e:89:1c:c9:d7:39:
72:9a:70:0a:ee:c5:94:3c:50:32:e2:26:56:6f:c1:
6e:03:4b:88:41:5d:9e:52:24:2d:0f:de:cd:56:88:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:35:E5:FF:89:54:50:43:A5:C4:FA:F6:2F:5B:8C:EC:EE:74:94
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c8:2b:59:39:25:43:ac:8f:d9:1f:0e:b2:7e:fd:44:0e:bf:
64:62:dd:66:10:7b:ef:55:b1:ef:2a:92:99:a6:66:3e:16:6b:
30:19:b9:d2:fe:75:e2:42:05:77:02:d5:ed:ec:c5:73:ca:fb:
e3:98:82:30:ed:ac:b5:5f:e7:e1:f8:81:a5:55:2d:7d:b1:7a:
5d:e4:3b:b1:36:93:89:0e:35:93:92:15:e8:c9:51:ff:7a:b9:
94:13:b7:f9:ef:dd:a0:06:db:26:af:76:ba:30:54:b0:68:de:
e1:96:fe:d5:61:c1:d6:64:b7:f2:5a:58:d8:e5:66:65:fd:4f:
e8:fa:85:74:be:09:84:24:9d:ba:8e:66:16:51:53:61:8c:53:
66:48:5d:5c:40:df:1f:8d:95:54:13:f4:9f:ca:ab:b8:6e:16:
83:df:6d:5a:45:7f:89:95:cb:bd:d6:d2:f0:83:80:e8:d8:48:
e0:9c:b2:f6:67:c1:82:64:3d:05:13:a4:9e:2f:00:bb:a7:d2:
a5:7f:76:6f:1c:20:ce:5d:c4:14:a2:fa:74:4f:09:4a:aa:4b:
70:38:f3:73:8f:5a:61:1e:88:42:95:8c:84:b0:3e:cd:89:74:
01:29:fc:83:c9:32:e0:7e:c7:47:96:1f:73:ef:99:31:d4:78:
a1:c8:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:25 2026 by rpki-client