
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json)
Hash identifier: 4DskYhplQmnM2oXOuhbBgH7s0vY4Zq9M1Ldve8L/Z/Y=
Subject key identifier: FA:BA:85:AC:BD:43:B7:E6:7E:A7:AB:96:D8:C5:22:64:1B:EE:E4:CB
Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
Manifest number: 0208
Signing time: Mon 02 Mar 2026 02:34:22 +0000
Manifest this update: Mon 02 Mar 2026 02:34:20 +0000
Manifest next update: Mon 09 Mar 2026 02:34:20 +0000
Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: JcHMiUgBMSw5IWbUnJYqlkrmRAR01yYBT4PqZZG/93A=)
2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: FFWol5YnwfZP+TKiyDIT69Kx3yIeCa0SCkT1OePuq3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Validity
Not Before: Mar 2 02:34:20 2026 GMT
Not After : Mar 9 02:34:20 2026 GMT
Subject: CN=69a4f72d-e7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:ef:84:53:d0:c6:45:af:b3:6a:95:4f:6a:
4e:fa:b5:ea:22:bc:8d:af:57:bc:40:85:0d:63:93:
7e:4e:c8:4e:70:2a:a2:01:33:82:33:17:79:56:74:
20:74:22:f7:e3:08:67:9d:f6:8a:58:af:40:33:ee:
98:15:2f:2a:c2:fd:b8:d9:21:d9:ba:33:be:c4:e3:
c4:81:8b:2a:8e:89:f3:24:5c:60:8a:b9:8d:2f:b2:
2f:97:30:45:1e:a7:78:c5:f1:f4:36:38:ba:c6:34:
a5:6e:2e:80:fd:36:fb:01:e7:a6:70:db:8a:b0:ea:
13:3f:85:77:cb:3e:d1:4c:41:bc:4a:d6:7b:1b:a9:
af:23:54:f3:3d:e2:5a:5c:04:83:b1:c3:81:b6:47:
c2:b0:52:da:bd:c2:fe:1e:fb:0e:37:aa:fc:96:65:
5c:49:a6:a3:68:e9:a5:23:f8:75:02:04:c1:e6:67:
f0:a4:8b:f4:fd:93:92:18:3e:53:b2:61:07:d7:ab:
88:13:d8:ba:4f:01:72:f8:f8:a9:80:45:74:b3:4f:
c2:46:32:74:b7:b7:49:b9:0a:1c:9a:d1:86:ce:02:
a3:9c:7b:88:23:14:93:7f:89:7d:c4:b3:8c:be:10:
5b:4d:b4:70:9a:53:08:db:4c:87:01:f1:db:1d:a7:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:85:AC:BD:43:B7:E6:7E:A7:AB:96:D8:C5:22:64:1B:EE:E4:CB
X509v3 Authority Key Identifier:
keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:4b:4b:99:76:a0:ec:e7:a2:1b:33:98:f0:7c:e8:df:b6:
a3:91:bf:58:e8:e4:5e:18:08:08:b5:4c:76:9c:7f:92:4f:9d:
80:a0:37:42:c9:9a:6e:e2:55:0b:c6:7b:7e:5a:95:c2:af:fe:
5a:c6:39:8d:d1:8b:04:8f:d9:80:16:87:6a:ae:26:2c:91:ee:
69:16:3e:4f:ee:e4:77:f0:b2:7a:7b:6c:6b:28:b2:7a:0e:ed:
b5:15:d2:86:e7:33:f5:87:70:d0:e7:79:3b:72:01:ff:9f:30:
1d:ed:76:d1:1f:a4:ae:b5:79:32:88:85:25:ed:08:9f:2d:03:
a9:de:49:88:08:e1:47:d1:74:a4:30:57:c6:44:1d:6e:42:cc:
b3:ba:d1:5d:a7:c9:29:b2:78:d3:71:db:43:62:ea:ee:70:7b:
29:d8:6c:8b:cd:2d:16:e5:15:a7:88:29:9c:39:38:19:d6:2b:
e9:4f:92:24:90:22:d3:1e:ea:a4:f5:c5:b0:94:d7:bd:16:0b:
ae:53:17:d8:ab:21:f5:5a:0d:4b:ca:a7:f3:16:05:5f:a2:97:
f8:2b:e1:e8:03:b6:57:52:8f:8e:9c:3b:08:2f:f8:bc:11:04:
4b:c5:24:1d:9f:a4:ba:9f:fb:42:26:8f:a6:02:20:ed:25:44:
b0:1e:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:12 2026 by rpki-client