
$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json)
Hash identifier: gUs5bls3O5MdMMjFS2hQm8YpS2LQ8ZO6nLjOKsB6XX8=
Subject key identifier: AD:63:44:2A:80:4D:AA:C1:47:24:44:9D:2D:4F:92:6F:8F:A3:C5:36
Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Certificate serial: 0D97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
Manifest number: 0D89
Signing time: Mon 02 Mar 2026 03:07:28 +0000
Manifest this update: Mon 02 Mar 2026 03:07:27 +0000
Manifest next update: Mon 09 Mar 2026 03:07:27 +0000
Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: 9c7nCp8AGGQtEhnWrPBJooN7uIuoaqjIT998U7WHfVw=)
2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: pbKdsMeBsvOeSomjFM8j6Bm6hC7ndk/6YYGFv0c3ANY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl
rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3479 (0xd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Validity
Not Before: Mar 2 03:07:27 2026 GMT
Not After : Mar 9 03:07:27 2026 GMT
Subject: CN=69a4feef-dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:c0:ea:f4:23:14:6e:22:38:cc:37:97:60:
f5:99:df:2d:4c:7e:15:29:fd:44:e5:39:7a:f2:7c:
fa:86:fd:8b:32:7c:36:de:73:d9:a5:8c:f0:69:81:
48:bd:68:03:c2:0a:ac:73:ac:3f:7e:71:91:a5:a9:
6c:6e:b8:ad:fc:53:99:bb:ce:02:44:bf:5a:f8:04:
dc:1e:76:a0:1e:20:a4:3e:08:4f:e2:a4:71:ad:0c:
05:44:87:8c:35:6a:f2:30:07:34:26:71:b8:9b:b2:
d3:7c:de:65:8f:1a:23:5d:ef:ab:d0:09:ff:66:02:
73:aa:02:ec:25:3b:e1:ac:e5:d7:54:12:1e:45:cc:
56:8c:c6:00:b4:bd:64:ca:08:74:7c:94:4f:f6:30:
55:19:4a:77:27:1d:98:f3:2a:c0:7b:b9:cd:90:d2:
e3:ec:13:0e:cf:1d:ad:9d:f7:d0:c9:cb:a4:1b:90:
35:58:a2:13:03:44:08:17:1b:6b:c7:76:44:2b:eb:
88:37:47:1b:22:df:3b:73:21:72:00:88:e0:4a:7e:
ac:fc:e1:d1:21:86:85:45:d0:d1:e5:6b:fa:b5:e1:
6f:9f:50:18:80:9e:4f:69:bd:34:f3:b3:8d:77:60:
4b:74:fe:d3:53:4b:90:1b:04:8e:a0:cf:7b:a4:62:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:44:2A:80:4D:AA:C1:47:24:44:9D:2D:4F:92:6F:8F:A3:C5:36
X509v3 Authority Key Identifier:
keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:90:23:17:f5:4b:7c:6d:29:86:73:ef:8a:57:8d:dd:e0:
b6:6f:1a:0d:26:fe:b9:4b:9c:61:fb:02:17:d0:99:aa:aa:ac:
3f:8b:06:ef:2b:81:6a:8d:16:e9:19:e7:26:e6:49:be:fc:d9:
ae:15:93:e4:f0:43:d3:83:12:cd:f9:d7:e1:b5:77:71:6d:a3:
41:09:da:b7:a7:93:21:b9:05:61:67:cd:6c:e1:63:ef:bf:72:
d4:09:77:f9:07:d4:74:86:aa:90:fa:2a:40:f0:6c:58:e7:54:
6e:da:e6:97:89:f9:5d:78:e8:c7:b8:71:9b:32:c7:16:43:92:
2f:37:f7:5a:f4:c4:47:86:ae:69:51:41:e0:1b:eb:da:c7:c5:
15:27:4b:67:c9:d6:f2:2d:9c:39:f7:df:fc:dd:48:f6:e3:66:
6e:d1:02:49:11:f0:a0:a1:15:ab:1b:e0:14:f1:c6:a5:12:9c:
3b:04:26:a1:0a:03:2c:f1:e1:69:a8:9a:c9:52:ff:41:e1:53:
2f:0f:bd:23:8f:d8:fd:aa:16:25:51:60:c0:ad:0d:2d:51:ee:
1e:06:42:64:19:ab:72:1e:6c:b1:1d:47:df:a8:d3:b8:f6:75:
fc:b4:ae:e8:57:74:3b:79:c9:e0:11:95:87:30:b0:75:fb:dc:
ea:0d:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:35 2026 by rpki-client