
$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier: xhMdSyIUDrVzyVCyMbPTyvMsO57r/2AKe2VUmcRteA0=
Subject key identifier: 9C:BB:AA:96:5A:AA:CF:C6:82:1A:1E:98:3F:49:05:3B:B6:9F:57:81
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number: 0268
Signing time: Sun 01 Mar 2026 22:23:37 +0000
Manifest this update: Sun 01 Mar 2026 22:23:36 +0000
Manifest next update: Sun 08 Mar 2026 22:23:36 +0000
Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: 2UoM1bVN5n/Gekq3l4ErODYUWZET+bgaAf0vdC1EQ2s=)
2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: SrQLMleMB4YU3ZEQhfOBgMc2EpS7tNcL9YRSRP+wumw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
Validity
Not Before: Mar 1 22:23:36 2026 GMT
Not After : Mar 8 22:23:36 2026 GMT
Subject: CN=69a4bc69-a662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:6d:7a:db:e1:08:83:35:b1:e2:65:51:65:
94:e7:de:de:9d:a5:4e:1d:cf:e0:0f:5e:91:44:02:
28:48:ef:38:7d:d6:71:3e:d2:f8:a0:83:2f:bd:01:
1f:25:7f:1e:4b:a0:d1:ce:d1:a4:98:e2:5d:6a:2d:
20:01:f4:1d:7f:85:c3:d4:1e:a6:d7:a5:3e:e3:cf:
01:da:d0:88:d1:e4:0d:0b:e6:fd:49:85:c7:a7:9b:
ff:75:54:58:90:1d:00:c7:12:57:aa:bf:fe:ab:aa:
0f:27:d0:32:b9:8c:5f:ca:7a:c1:d5:db:e8:ab:e3:
88:02:d1:b7:f3:40:9f:b4:4a:2f:d7:ac:04:1a:e3:
84:4f:a3:65:61:61:03:9a:8e:f0:3f:68:0c:28:3d:
6f:9d:58:e3:dd:60:9d:63:66:8d:43:c0:31:f6:15:
04:18:36:aa:ee:6d:1e:a3:a4:f3:53:4f:44:b6:01:
f9:d5:d4:14:87:af:fd:5a:77:29:3a:de:54:1b:b6:
70:ce:cd:31:62:e0:c7:65:11:58:f6:6c:a3:3f:88:
66:4b:7f:b4:6c:d0:a9:7a:96:12:eb:e5:cc:2e:ec:
db:5f:ab:3a:de:d3:8c:37:99:fb:60:68:fc:88:a2:
71:b2:dc:a4:4f:ed:90:06:c3:fa:3b:8f:08:28:cd:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:AA:96:5A:AA:CF:C6:82:1A:1E:98:3F:49:05:3B:B6:9F:57:81
X509v3 Authority Key Identifier:
keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4d:bc:7f:83:b2:75:1b:db:9b:0e:2f:8c:20:6d:f5:61:cf:
6e:bf:c8:98:96:49:96:8a:7f:4f:99:e4:21:1d:a0:e6:53:55:
4a:b5:14:ee:45:1d:e4:49:73:49:b5:79:ca:b7:a7:c8:8d:51:
c8:aa:cf:ae:bf:1e:98:e0:73:b3:03:7f:55:d8:29:b8:63:82:
c7:81:2c:67:98:d9:fd:a1:1d:9e:fb:90:b2:7d:53:47:56:f1:
30:37:16:fa:7b:bf:22:6b:56:9d:47:52:b8:01:68:5d:8a:6b:
5a:9b:53:cd:50:eb:a2:b8:0c:b7:b0:d2:96:e8:64:ed:6a:fb:
15:b3:f8:74:21:f5:de:c3:f7:5b:c7:84:9c:60:3c:44:14:21:
92:2a:eb:44:a3:f9:c8:6c:c5:1f:b8:5f:9e:86:dc:63:de:d5:
35:e1:9e:e8:09:79:42:c8:9b:40:be:5b:c0:72:8d:9f:fb:16:
17:4a:63:a8:b5:56:07:0a:1a:32:de:72:4d:44:a1:43:95:28:
93:14:d2:26:45:21:67:9f:fc:bd:b6:54:ef:9e:33:64:98:00:
e5:e0:64:67:a1:ca:01:c2:7b:b0:4a:f5:3f:af:81:9f:49:c3:
8c:48:b4:1c:18:cb:1e:b1:f2:7f:91:52:13:6a:43:25:7d:04:
78:5c:3d:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx
QzQwOUJBNDQwHhcNMjYwMzAxMjIyMzM2WhcNMjYwMzA4MjIyMzM2WjAYMRYwFAYD
VQQDEw02OWE0YmM2OS1hNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/BtetvhCIM1seJlUWWU597enaVOHc/gD16RRAIoSO84fdZxPtL4oIMvvQEf
JX8eS6DRztGkmOJdai0gAfQdf4XD1B6m16U+488B2tCI0eQNC+b9SYXHp5v/dVRY
kB0AxxJXqr/+q6oPJ9AyuYxfynrB1dvoq+OIAtG380CftEov16wEGuOET6NlYWED
mo7wP2gMKD1vnVjj3WCdY2aNQ8Ax9hUEGDaq7m0eo6TzU09EtgH51dQUh6/9Wncp
Ot5UG7Zwzs0xYuDHZRFY9myjP4hmS3+0bNCpepYS6+XMLuzbX6s63tOMN5n7YGj8
iKJxstykT+2QBsP6O48IKM1ugwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJy7qpZa
qs/GghoemD9JBTu2n1eBMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2
NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3
RTR1amtESk5xVU1jUUp1a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtE28f4OydRvbmw4vjCBt9WHPbr/ImJZJlop/T5nkIR2g5lNVSrUU7kUd5Elz
SbV5yrenyI1RyKrPrr8emOBzswN/VdgpuGOCx4EsZ5jZ/aEdnvuQsn1TR1bxMDcW
+nu/ImtWnUdSuAFoXYprWptTzVDrorgMt7DSluhk7Wr7FbP4dCH13sP3W8eEnGA8
RBQhkirrRKP5yGzFH7hfnobcY97VNeGe6Al5QsibQL5bwHKNn/sWF0pjqLVWBwoa
Mt5yTUShQ5UokxTSJkUhZ5/8vbZU754zZJgA5eBkZ6HKAcJ7sEr1P6+Bn0nDjEi0
HBjLHrHyf5FSE2pDJX0EeFw9Pw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:38 2026 by rpki-client