
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier: 9F4idz568m88FqvVuDVe1UnXLlzSE9K1tlXxG4dsAXA=
Subject key identifier: 9B:C3:AB:10:03:DC:F4:83:EB:50:BD:39:DD:7F:2F:54:C9:91:C3:05
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number: 021C
Signing time: Mon 02 Mar 2026 00:24:10 +0000
Manifest this update: Mon 02 Mar 2026 00:24:09 +0000
Manifest next update: Mon 09 Mar 2026 00:24:09 +0000
Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: ziBaRPkkT/ix+x/SrpxBzfBxfuZRXSaQ7GVBlygVr5c=)
2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: zJka1MeJK7lnwqtIr5JF4dvCTJ8BDAuJUIST/U00HkI=)
3: FD678F40214E11F095B05918C4F9AE02.roa (hash: dwCv7pQVK29BHwFaFsuGflmejhNgA5PpUoP3YGaDUCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: Mar 2 00:24:09 2026 GMT
Not After : Mar 9 00:24:09 2026 GMT
Subject: CN=69a4d8aa-a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:0f:ab:0c:45:cc:e3:56:8b:40:68:35:ff:
ae:08:de:28:fa:a0:c6:df:26:05:a7:6c:a0:f1:cd:
aa:56:80:f6:e7:35:6b:b3:99:67:31:10:a9:9c:2d:
6f:fb:18:fd:f4:bc:21:59:34:f3:9d:9f:89:f3:b8:
72:4b:1e:6b:4b:42:30:6c:7c:ab:aa:7b:63:57:8b:
48:3e:4b:fa:34:39:9f:31:21:f4:0c:df:55:0f:cd:
f0:57:b4:11:2d:5a:78:9b:c6:20:34:b4:41:5e:0c:
27:bd:bc:17:a2:05:c2:19:d2:74:8e:11:9a:88:f7:
cd:c2:96:86:1d:f7:ce:62:e2:b1:5d:1c:e8:5b:80:
7f:16:cc:67:22:ec:f4:32:a5:f5:d6:29:50:49:1d:
bc:07:80:3d:57:98:ff:6f:d6:d0:ec:84:cf:eb:26:
77:e1:88:a4:21:c6:e4:df:a9:cf:10:f4:86:d1:da:
ec:fb:6e:58:5a:00:d4:23:87:ec:42:90:3a:df:8d:
54:db:6e:58:08:ec:6b:2d:12:01:b5:9a:ee:5d:43:
bd:77:59:a0:c4:ee:29:c8:03:ea:63:5e:d1:d0:42:
ae:5d:aa:36:b2:b4:3e:c7:e1:5f:f2:02:05:ed:1c:
bb:50:32:ed:c2:83:78:31:e4:c4:c7:b6:1d:f2:f5:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:AB:10:03:DC:F4:83:EB:50:BD:39:DD:7F:2F:54:C9:91:C3:05
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6f:da:a0:bb:a6:e7:ea:36:83:90:7b:42:90:3b:31:4d:1a:
f0:ae:99:ac:4a:c6:0a:68:f5:32:a5:af:b2:91:fd:a9:89:33:
c0:4d:d4:89:b7:60:55:ad:7a:4e:0d:62:98:41:e9:12:73:c6:
16:79:85:c7:89:27:86:3c:c8:1a:a9:11:88:39:5a:80:f0:e2:
e3:b5:32:df:f7:cb:2b:e1:e5:4a:37:3d:b8:d0:1b:54:d0:5d:
14:7f:8f:0e:fc:19:59:f4:11:82:af:79:f8:3e:85:42:3c:c5:
ec:e4:93:6f:a1:00:f0:7a:81:75:58:61:9c:37:f4:e9:e9:23:
0a:f4:49:70:3e:3b:f4:da:23:cf:77:98:c2:29:cc:5c:3d:7b:
3d:de:be:ee:18:eb:b5:55:3c:89:a4:af:84:69:61:ea:de:af:
85:6d:a6:72:ad:3f:64:f9:44:f0:41:da:b9:a7:e0:ac:af:e6:
fb:ff:48:9b:a7:44:83:34:d1:f4:7e:11:a7:67:ed:39:d8:93:
69:f4:71:d8:c7:12:8c:07:69:b2:59:29:b4:42:37:a2:fd:ca:
73:7d:7c:bf:00:8f:9b:8c:00:b3:76:b4:f3:cd:a4:80:9a:ec:
d3:c2:06:83:8e:f6:36:77:08:15:32:f7:dd:65:f7:7b:ed:73:
0b:df:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:04 2026 by rpki-client