
$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier: AXx+7LHi1uvvwIuAqFUQlZ0xA70nyfxPBPE1biBy+tQ=
Subject key identifier: E0:95:86:E6:2F:FF:8B:C4:BA:6A:3A:EE:18:90:62:AC:2B:B0:E8:7A
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial: 032F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number: 0327
Signing time: Fri 17 Apr 2026 01:00:45 +0000
Manifest this update: Fri 17 Apr 2026 01:00:44 +0000
Manifest next update: Fri 24 Apr 2026 01:00:44 +0000
Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: IhV/Z6FjCv+pCZJiekUOd9f05wmhUx3UdDJMak9Q6Fs=)
2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: ZS5cuNMtd6yQQN38E7lp5FQ2jmo2L2QBDwPjFbM0irs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Validity
Not Before: Apr 17 01:00:44 2026 GMT
Not After : Apr 24 01:00:44 2026 GMT
Subject: CN=69e1863d-7942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:32:b1:c5:f0:01:db:34:bd:84:fb:25:88:
c4:f7:b9:0c:4a:10:e3:6a:38:32:52:9a:8a:f3:33:
02:34:a8:93:8c:8c:94:ef:d8:78:f9:16:ec:8b:25:
50:7e:b4:48:a4:c3:d8:be:b7:d4:c7:fb:29:84:be:
ed:4c:d2:70:68:ee:9a:49:c0:2a:f4:c5:b3:10:89:
38:be:a4:f4:99:c1:66:d3:de:1e:f9:b6:7c:1f:09:
08:fa:ab:e3:fb:47:6e:56:8c:0c:49:2c:51:d3:e7:
81:0f:9d:d2:36:51:bc:84:c9:23:b9:7a:e4:20:d8:
9b:fd:d2:dc:60:28:be:8c:e9:73:e1:84:53:fd:30:
5d:58:bc:66:aa:6c:f1:5a:02:fd:4c:23:01:64:87:
af:f1:9e:bc:56:9a:f6:b6:bb:5f:96:58:5b:e8:c3:
e6:e3:0d:5c:58:8f:8f:26:da:72:3a:35:7c:28:93:
3c:71:5f:06:c8:0b:be:32:b9:13:6e:54:02:bd:25:
dd:20:4b:7a:01:e0:90:62:85:b9:2b:e1:02:8c:67:
af:78:ed:05:5c:a3:cf:a2:86:dd:58:11:60:47:64:
af:38:44:b6:ed:d7:ac:62:21:d8:ea:86:cc:2a:f1:
e4:cd:62:f9:7c:46:84:fb:d1:66:27:c7:a6:82:04:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:86:E6:2F:FF:8B:C4:BA:6A:3A:EE:18:90:62:AC:2B:B0:E8:7A
X509v3 Authority Key Identifier:
keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:a9:c3:36:a6:0a:88:9a:e9:83:78:76:29:0a:cb:9b:82:
4b:51:c8:7b:29:26:b9:d6:c6:b9:af:fe:12:fc:84:e7:6c:08:
8e:5c:be:ca:21:a4:a8:b5:98:2b:23:89:ac:bd:81:dd:16:24:
4b:f5:c5:fc:ce:58:be:fb:6e:ad:23:3f:2a:a2:84:98:42:9e:
52:82:39:c5:bc:64:7e:d6:e6:8e:2a:78:bb:9d:b3:cb:53:d3:
53:4a:5e:97:75:c2:06:66:1d:6e:41:b7:60:56:2e:e2:b2:22:
6d:e6:a4:2d:f1:b8:37:d0:ee:50:87:83:8b:29:4a:89:53:8b:
11:72:18:37:dc:7c:d9:e1:a7:51:8e:e2:03:c1:c1:e3:90:ad:
c9:1d:96:d1:84:c2:52:4e:4c:19:7a:31:f4:7d:5d:b1:9c:d0:
57:c2:b2:6e:0d:d9:ab:72:82:a9:db:04:3b:fd:32:c4:1a:f3:
94:98:20:d2:fa:40:f1:4a:67:3d:43:80:5f:c5:65:34:24:ed:
da:d3:33:4f:85:65:01:47:d8:e6:54:3c:a2:d9:76:b4:07:f7:
1c:27:0d:2d:2b:61:4e:21:63:fc:57:6a:71:9c:03:de:13:1f:
6f:dc:c7:bc:0e:14:f9:56:24:09:84:8d:88:e6:6b:92:2b:2f:
68:fa:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:44 2026 by rpki-client