
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier: gxJHLA/DAIla3ezdeFTCj5B0ciCTDCTzKWCjwp9fZvA=
Subject key identifier: 80:73:B1:6D:7F:60:E6:83:64:95:CC:E7:A5:43:AA:66:2D:F5:76:59
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer: /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number: 3B
Signing time: Sun 01 Mar 2026 09:53:20 +0000
Manifest this update: Sun 01 Mar 2026 09:53:20 +0000
Manifest next update: Sun 08 Mar 2026 09:53:20 +0000
Files and hashes: 1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: j/q+ihj2v8/zaaIjFDLTYBvHLpc48U3uU5ZR1RzdQL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Validity
Not Before: Mar 1 09:53:20 2026 GMT
Not After : Mar 8 09:53:20 2026 GMT
Subject: CN=69a40c90-1879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:0a:de:5a:ca:ef:7d:b4:37:1d:c2:0d:7d:
c3:9c:0e:18:50:30:de:31:9b:04:0d:2e:bc:ec:cc:
ca:25:98:d0:4a:d4:a6:d2:ef:b9:1e:06:56:d8:2a:
25:be:68:51:7b:bf:9f:0c:45:e7:9f:01:bd:cf:60:
07:34:ef:73:61:09:cd:0b:e8:cc:99:70:2d:3e:b1:
71:e4:e5:cc:29:85:fd:90:e5:77:77:5d:fe:03:12:
52:3d:41:70:12:ab:a7:f6:28:e7:85:15:c6:fa:8a:
df:1b:ec:50:89:d0:2e:fa:fd:9b:fd:11:de:70:42:
20:53:36:fc:7c:c9:93:55:c3:17:ce:db:51:14:b8:
a7:54:92:d4:6d:19:57:12:a8:ac:e6:02:c7:ac:79:
60:60:64:54:ad:30:55:6c:65:28:b3:b7:bb:db:10:
2f:42:63:57:9e:86:2b:01:44:dd:2f:b3:5b:8f:b2:
38:25:a6:e1:25:bd:63:a2:9d:c8:1e:c4:66:6d:0e:
7b:c0:1d:9d:89:09:44:b8:3d:c5:8e:92:33:03:4b:
64:28:5a:3c:08:d8:0c:9b:09:0b:02:84:7e:38:f4:
66:7c:9d:b2:29:c5:e3:fd:59:b9:9b:50:24:f8:1f:
f7:9d:c6:e4:7c:30:f9:b3:bb:d6:eb:74:42:1a:d0:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:B1:6D:7F:60:E6:83:64:95:CC:E7:A5:43:AA:66:2D:F5:76:59
X509v3 Authority Key Identifier:
keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:45:e7:4a:0b:fc:3f:46:c1:6a:8a:34:dd:22:db:19:0d:
22:f8:0f:b9:32:fc:88:7b:8d:07:05:68:07:ed:d0:b6:33:71:
08:2a:65:cf:a9:fe:ee:ad:ff:b9:9f:f4:5d:1b:0a:99:f5:51:
d7:2e:9d:45:53:1f:4b:1e:2d:84:01:51:aa:b1:c9:1a:bc:1b:
db:89:49:55:96:d7:80:d7:ca:0e:87:b3:e3:5c:0d:b5:d3:45:
43:00:19:e7:71:f9:a4:95:a6:b6:e6:83:e2:78:6f:68:11:1f:
55:4a:b2:02:29:99:2c:08:e9:65:2b:ba:3b:29:16:67:82:6b:
e4:0f:36:8a:48:52:37:97:80:46:f4:04:1f:36:ca:0c:93:1f:
9d:57:70:ad:a8:a2:2c:00:8a:16:dc:a3:f2:20:08:0b:b1:8f:
31:33:58:f3:ad:da:95:2c:5e:75:7d:1e:82:b8:ee:2e:d2:d1:
16:0a:c2:81:02:d5:33:f3:b1:d0:a8:aa:43:79:fa:45:f1:3e:
84:e9:09:8f:91:4b:ac:38:6f:7f:e7:7d:ad:71:cd:f6:e0:07:
cc:46:e6:bb:d3:76:05:b9:7f:11:d8:af:26:cc:b7:1d:39:3b:
a4:b7:fa:f8:42:b4:a7:94:ce:30:de:9d:fe:7e:4e:ff:6b:78:
71:59:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:15 2026 by rpki-client