
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File: JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier: kzyAymieN64YCz8Rgf1pxBQ4Q12gR+zGsv9uoGXMcVE=
Subject key identifier: E7:E9:42:72:C4:6C:D2:2E:02:CB:BE:E7:D1:9A:A2:AF:C6:47:42:72
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number: B1
Signing time: Sun 01 Mar 2026 08:26:57 +0000
Manifest this update: Sun 01 Mar 2026 08:26:57 +0000
Manifest next update: Sun 08 Mar 2026 08:26:57 +0000
Files and hashes: 1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: d6/BXf63aqG/kBa1ZOO5tIlgNaumNGlb57xlyfIKB5Q=)
2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: gLLXVBbnqOuYpmPZP1sg2HQN+ZDT78K787nO1Ano868=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Validity
Not Before: Mar 1 08:26:57 2026 GMT
Not After : Mar 8 08:26:57 2026 GMT
Subject: CN=69a3f851-f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:65:2e:be:e8:46:f0:0a:00:b1:2d:99:b5:
42:a7:83:b4:2c:bf:0b:84:d4:16:6f:b1:81:4d:f8:
33:cc:9b:26:e3:f7:cb:df:40:d0:24:ee:f0:08:14:
7c:6a:77:b3:e9:d6:0b:24:18:bb:bc:e7:4b:2a:c0:
a5:43:90:33:b0:fc:8f:9f:b8:cd:70:5b:33:78:b3:
ae:67:fb:2b:25:0a:a3:8f:d1:9e:fa:d9:05:e9:b7:
02:55:79:87:82:f8:d6:78:92:9c:27:44:22:ba:6a:
2a:10:8f:7a:82:4e:a9:e2:1d:b9:a6:8e:bb:da:f1:
a9:59:4a:c4:77:2e:26:a3:43:17:cd:60:a9:c7:95:
fe:e7:a5:ad:e4:08:0b:df:eb:86:97:21:d3:8b:35:
81:ee:96:f5:f1:46:85:d4:93:1e:73:e8:8f:9e:b7:
16:54:e9:e5:71:85:82:3c:5b:d3:64:9b:b4:99:ea:
94:04:d4:81:94:6f:9f:3d:71:f5:7a:a1:19:f0:87:
42:48:e5:0f:20:ea:bb:a8:f8:e7:eb:66:e8:09:96:
7a:9b:64:d7:b7:05:56:c7:4b:51:43:92:62:9e:10:
b9:cb:b2:22:15:a4:46:dc:fe:4e:95:72:1f:cc:57:
cf:ee:30:63:78:59:01:e0:fe:15:57:b8:e9:04:a9:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E9:42:72:C4:6C:D2:2E:02:CB:BE:E7:D1:9A:A2:AF:C6:47:42:72
X509v3 Authority Key Identifier:
keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:c3:96:cb:2d:8e:69:25:e6:89:99:cf:21:aa:f9:a7:dd:
e7:ec:8d:21:44:3c:00:e6:01:48:88:62:9a:2f:ab:ee:32:1f:
fe:bc:fc:6d:74:7a:4a:3a:15:1e:6e:64:97:80:b8:ac:c8:ef:
03:fd:de:c1:01:60:15:19:8d:74:b5:8b:76:ac:e9:72:d1:0e:
4f:25:5a:0e:33:44:e0:8b:37:a2:38:62:68:2e:8a:af:4a:b4:
ad:25:6a:f3:f1:b3:05:27:cb:9e:79:39:19:bf:12:64:bb:04:
da:2e:3d:5b:00:d9:22:ed:40:48:f9:5d:79:f2:bc:62:bc:92:
5e:19:3f:90:ca:ae:80:a8:86:b3:52:9e:bf:8d:9d:ec:20:74:
4f:c2:45:a0:49:45:65:ff:da:f4:66:cc:d8:3f:64:c9:5c:de:
08:50:f4:5b:40:01:b5:f0:72:a8:d2:f7:1c:62:39:a5:04:6b:
16:a5:c5:6b:c6:09:51:6e:90:98:2b:87:40:92:83:57:28:41:
a7:f9:2b:79:34:fb:6a:e7:05:81:59:9c:ac:22:86:ab:70:a2:
4d:08:9d:b0:8e:1f:2d:4a:28:95:5b:da:21:69:9c:f5:90:2a:
a9:93:4c:ad:fb:05:6f:d8:1c:dc:70:3e:0c:5e:19:d8:12:20:
5a:15:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:16 2026 by rpki-client