
$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json)
Hash identifier: NEYSVArAWNCo/CYPp7jVxekRfIDF6uKBG6enraJfpsw=
Subject key identifier: 78:8B:43:B8:37:4C:4A:5A:6E:96:2E:AF:46:55:40:3E:E7:C6:D6:93
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
Manifest number: 0586
Signing time: Sat 28 Feb 2026 23:51:46 +0000
Manifest this update: Sat 28 Feb 2026 23:51:46 +0000
Manifest next update: Sat 07 Mar 2026 23:51:46 +0000
Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: hiyNkov1waD+PXriHpTJtN83lGNkmMsnPRbZ9VlFJHE=)
2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: JmstrL5CTlNuaQ6A81EGJRNd/DiR/bvS/M8jrUz3m6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Validity
Not Before: Feb 28 23:51:46 2026 GMT
Not After : Mar 7 23:51:46 2026 GMT
Subject: CN=69a37f92-d2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:92:fb:04:d5:6c:24:94:4c:24:cc:fe:f7:
83:46:bf:7a:a3:9f:fe:d1:ad:a2:08:f4:b9:2d:fb:
fa:6c:76:31:56:5b:0c:ae:e6:61:b1:95:bd:5d:a7:
ce:fc:d0:43:d7:6a:b3:22:f2:c5:73:db:88:55:09:
7a:56:f2:af:e1:ec:29:c8:cd:38:e7:53:76:5d:52:
62:a3:e7:a2:83:d7:91:97:b5:62:e8:e9:15:71:31:
8f:c8:a1:0b:78:35:38:07:48:32:ff:ae:eb:36:59:
70:fc:f0:69:63:35:78:97:b4:4a:7f:36:af:4f:73:
a4:d1:e4:22:8b:7f:87:bb:e9:b6:4d:f6:57:06:ac:
6b:95:bb:bd:b0:15:ee:28:35:1d:7c:22:6c:d4:19:
70:7e:b8:7d:30:62:05:fe:c8:21:44:8a:fc:c1:63:
27:95:9a:30:c2:04:2e:b0:86:ff:eb:b8:bc:81:6c:
18:44:99:b0:8b:83:bc:2e:e0:61:de:5c:14:93:37:
5a:f6:75:2f:cd:68:e3:4a:dd:f2:ba:72:50:64:fb:
84:cb:95:13:85:10:90:5d:36:91:9c:d2:c3:70:81:
37:72:07:08:7b:e4:22:b2:b4:a9:47:02:26:ed:49:
6f:04:55:11:80:94:dd:a4:1b:01:f5:ef:bd:06:36:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8B:43:B8:37:4C:4A:5A:6E:96:2E:AF:46:55:40:3E:E7:C6:D6:93
X509v3 Authority Key Identifier:
keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:9b:f6:63:7a:ca:f1:ac:37:d6:83:ec:27:d6:d7:c2:66:
e6:0e:5d:12:47:85:cf:3b:a3:c1:20:9c:89:64:50:ed:b5:2e:
16:d8:4c:aa:00:47:94:62:c2:79:25:76:55:e3:bb:15:0e:24:
ac:d5:47:f0:36:28:01:08:9a:79:6c:fd:73:a9:fe:4d:3c:59:
e4:20:70:1f:e3:33:33:50:7a:f3:44:bb:df:ac:84:db:0e:5c:
aa:d1:57:c5:82:43:d2:11:05:51:b4:e4:b0:6e:26:35:79:7e:
ec:13:98:17:a1:1a:e4:8d:7a:b6:dd:5b:24:d7:f7:86:ad:80:
e9:b6:30:9e:af:d2:02:a9:2f:00:6b:61:db:08:99:ed:f3:bb:
c9:23:7f:e5:0b:a3:6e:62:70:d6:cc:ae:98:bd:fc:a1:b1:78:
e0:1b:95:9e:d7:5b:0e:94:9b:a8:96:52:fc:51:30:c3:5a:17:
4e:00:a6:25:65:bb:96:1a:49:f5:5f:1b:ad:65:a7:f4:2b:3e:
06:7a:69:aa:6a:a3:77:ce:b5:08:8a:2e:02:15:2e:19:1f:7f:
1f:b5:a5:24:17:88:48:3f:99:2f:6e:c2:8e:07:8a:85:c2:32:
b4:41:ff:11:5f:68:d5:d4:3c:25:11:24:0f:6a:02:73:1c:f4:
1b:69:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:05 2026 by rpki-client