
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File: J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier: WZgsm3rJ6VxiVzJihy6JuXbOWPIxa6Hv3YL49jIbYZc=
Subject key identifier: E2:D0:B8:22:48:DB:B0:CF:34:41:2A:17:DB:6C:7E:08:60:5A:AD:EE
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer: /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number: B2
Signing time: Mon 02 Mar 2026 03:08:39 +0000
Manifest this update: Mon 02 Mar 2026 03:08:37 +0000
Manifest next update: Mon 09 Mar 2026 03:08:37 +0000
Files and hashes: 1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: 0iNNjaPmW1bDzcr4kxuo/kZDgsIdehN6mVnDnYd+nzE=)
2: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: RmZJEnExUw2WVaDlvDUuaFpjpoieH5GbsGF3juvTi9A=)
3: E55629C4DFEF11F083E035D2586F56BC.roa (hash: sPWi5FiDO7fUcbp/+HtV4DEa+QjOMwHk89p0/p7kf+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Validity
Not Before: Mar 2 03:08:37 2026 GMT
Not After : Mar 9 03:08:37 2026 GMT
Subject: CN=69a4ff37-1a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:63:56:d9:f1:00:a1:c2:57:a9:4a:06:76:
07:24:fc:94:45:cc:3e:42:99:34:0e:c7:dd:62:bc:
d2:64:3d:f6:d5:ae:0e:68:f3:3c:0e:af:80:b6:af:
6d:33:e7:e1:bd:8e:38:2c:9a:a0:3b:6b:9f:bc:1c:
9a:24:67:9b:be:f5:9f:d1:f9:75:ed:43:ee:d2:10:
bd:59:ef:bb:d4:23:1a:1b:a2:47:90:77:ca:fe:46:
e6:8c:83:9c:19:d1:37:4f:c5:00:6a:c9:59:f7:51:
e5:f7:e7:03:0e:1c:53:1a:1d:a9:0f:c4:bc:bd:0f:
02:94:14:b4:dd:22:07:a4:98:f2:1a:1e:28:b3:fd:
27:83:3e:23:20:9b:80:ea:28:6b:f4:70:02:0c:1a:
35:c3:e7:46:55:59:87:32:15:dc:ee:c5:a8:fa:75:
b3:dc:2f:70:2e:c6:96:cf:d0:12:53:43:7d:14:77:
d0:63:a6:16:3b:59:a6:66:71:b2:a5:57:b8:ff:57:
2f:05:8a:f5:0b:bd:3f:2d:73:a6:41:98:84:96:1d:
65:84:e5:5a:43:90:00:c4:64:3e:06:1b:72:3e:34:
f2:91:50:05:0f:0f:d8:3f:ab:29:01:50:2a:ab:50:
bb:6f:f1:63:56:be:25:45:fa:99:8e:45:cc:73:e3:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D0:B8:22:48:DB:B0:CF:34:41:2A:17:DB:6C:7E:08:60:5A:AD:EE
X509v3 Authority Key Identifier:
keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:85:66:9c:26:b3:8e:c1:a9:da:8d:6a:00:17:85:5d:d0:42:
5e:bd:04:b2:60:e2:b4:26:d6:39:1c:aa:e0:ad:94:a4:c8:b0:
c2:cd:69:a6:b1:8f:06:8e:39:85:ac:65:3a:94:a0:44:d5:b5:
01:72:83:f4:d2:0b:83:f5:ba:73:dd:3e:d2:61:49:74:00:32:
c3:7a:87:fb:88:7f:d9:98:c4:71:fb:03:0d:17:e2:6e:50:97:
5a:b9:de:fd:77:34:73:d8:2a:b2:e5:a1:29:f1:d1:36:af:e6:
27:f3:00:ad:89:e5:ef:7d:63:f1:c3:e2:ce:19:3d:f1:a2:37:
8b:31:dd:09:21:76:d6:60:6a:b3:d3:99:89:7f:1b:c3:1e:b3:
de:b9:f9:ac:aa:ac:91:71:74:37:8c:5d:3d:64:c6:0e:54:54:
bb:de:32:c6:d9:bb:f1:b6:f5:55:23:18:1e:4c:a2:31:5d:85:
35:f7:7a:b6:56:f1:3f:f0:15:e4:14:39:51:62:1d:ba:e5:f2:
63:ec:a1:87:dc:7c:0e:55:7e:d1:dd:fc:13:cb:4a:89:ba:65:
37:42:50:4f:a8:29:29:1f:f6:f3:ca:b8:0f:f2:0a:6d:78:e4:
0f:41:22:be:41:3e:0d:2a:8a:bf:84:fe:c0:75:a4:2d:f9:2d:
78:2f:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:14 2026 by rpki-client