
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: vPWHMDrfT1aw2jrxADZqAzvUFWO8C2j1yzIs6j3hbL8=
Subject key identifier: E0:7C:8F:F6:1A:93:6B:9F:3D:EF:F7:90:E7:C8:68:C3:43:AA:AE:52
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0B39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0B30
Signing time: Sun 01 Mar 2026 23:49:02 +0000
Manifest this update: Sun 01 Mar 2026 23:49:00 +0000
Manifest next update: Sun 08 Mar 2026 23:49:00 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: SScZHMckqqPdwVt/2nycqRUnXDHa3BXlVRwWpaO+7bU=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: DcUVTslaphrLk/KxLHZep4B5CcXBtF/qJ6P0bf4shk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Mar 1 23:49:00 2026 GMT
Not After : Mar 8 23:49:00 2026 GMT
Subject: CN=69a4d06e-14c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:14:89:37:ad:d6:1c:87:f0:77:13:1a:00:
66:8d:5e:a3:0c:61:ca:98:48:b9:5e:39:a7:fe:4e:
bf:46:15:78:0d:89:1e:a6:ad:28:f7:ec:c7:50:b0:
3e:f0:7b:44:96:a1:6e:97:eb:1e:aa:e6:d7:69:f5:
cb:35:a0:46:0f:0d:ef:de:c4:f4:48:94:f8:ec:f2:
e8:9d:a6:b1:20:4b:81:fc:0c:86:c5:bc:df:96:f2:
cd:83:04:80:3d:73:d7:37:af:59:0a:d0:e1:75:19:
17:47:16:80:50:7c:a2:96:bd:20:13:7c:16:48:79:
5f:56:af:f2:59:e1:cf:d5:e3:cc:7b:f0:b0:93:55:
c6:07:30:7f:aa:f8:ba:c1:16:39:ac:cb:ae:0a:22:
47:c3:a0:f7:1d:1e:35:e8:e9:aa:28:a5:22:82:eb:
b0:80:22:b1:0f:33:0c:27:4c:6b:91:4e:2b:51:06:
b5:2e:88:c4:fe:d3:9d:db:84:85:d6:77:19:c2:c0:
6e:4d:20:3e:31:52:06:92:82:35:48:05:31:b2:4c:
92:55:a0:6d:d1:82:02:b9:12:8b:5d:4c:d9:38:ab:
de:e1:c0:19:ec:08:bf:b1:fe:e2:df:94:06:ba:d4:
4d:bd:2f:1e:8e:c6:a1:a1:e0:48:2b:15:55:93:9e:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:8F:F6:1A:93:6B:9F:3D:EF:F7:90:E7:C8:68:C3:43:AA:AE:52
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:4d:d8:ad:e7:e2:e8:2f:e7:81:eb:67:e0:43:46:c4:e0:34:
21:e3:52:68:9e:15:5f:44:d0:89:37:37:96:d0:19:0d:47:e2:
cc:a2:b5:c5:e0:0c:d1:3b:a9:fa:0f:ca:ee:54:c7:a6:7f:60:
98:77:83:82:8b:8a:34:9c:90:d2:72:81:01:1a:a3:e2:3a:de:
3d:d8:ec:fc:92:f1:93:87:13:a0:b9:e6:46:72:93:22:3b:3e:
fa:41:8d:0e:49:88:48:52:d5:ac:c3:25:9c:2a:92:f3:62:a9:
70:a1:0a:6b:01:7a:aa:62:75:32:7c:e4:3a:38:f7:38:b4:36:
b6:80:8a:f8:1d:18:e9:c7:4e:e2:91:22:b3:a3:a3:ad:46:fd:
b3:f5:e2:b0:22:1b:62:12:73:62:ab:7d:81:71:47:a5:c9:63:
46:64:32:50:ad:7f:06:cb:25:89:0a:0a:d7:84:58:2a:f8:39:
0a:cf:bb:89:90:de:ca:2a:ba:99:4d:ab:56:d8:9b:ee:01:91:
a7:99:94:e5:57:79:99:9a:82:43:f7:83:72:6b:c7:16:d4:72:
79:9c:6c:c3:b3:40:86:90:1a:b3:18:66:dd:ad:04:42:28:ad:
b4:20:9a:5a:7e:40:04:33:a7:48:60:f8:f1:a5:5b:a1:e4:64:
f9:56:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:16 2026 by rpki-client