
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier: NQ2nIDHWVDP5YKiW3V3Hexa9BwDpRSYPeJw2afiK4aQ=
Subject key identifier: 42:81:C2:11:DF:C6:C6:3A:7C:60:F6:21:75:1F:23:4C:9A:67:D2:CF
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial: 1D61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number: 1D35
Signing time: Mon 02 Mar 2026 02:12:22 +0000
Manifest this update: Mon 02 Mar 2026 02:12:21 +0000
Manifest next update: Mon 09 Mar 2026 02:12:21 +0000
Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: 991XKWt3BuWn1tm19NA02HCnwoPVTK4R3bqhZEGfc8A=)
2: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: HaArSzXQPWVclTurOjmYRFehXALwDSZqwgKX4Y1qn/o=)
3: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=)
4: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=)
5: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: 5BzxW+L4vSDnf3Mt8f4xne60eMyftYTFgf6t3n4xIJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7521 (0x1d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Validity
Not Before: Mar 2 02:12:21 2026 GMT
Not After : Mar 9 02:12:21 2026 GMT
Subject: CN=69a4f206-f8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:b4:f7:bc:ee:4f:5c:f2:95:2d:a6:10:48:
92:eb:11:07:72:d1:e5:2c:76:ab:e2:d6:ed:4b:60:
b9:73:6f:0f:96:88:2a:6a:7a:bb:f3:f1:b9:43:e1:
1a:c8:37:21:9a:4b:35:4a:96:2c:dd:8d:2d:87:04:
40:2e:a9:0e:ef:a8:b2:42:45:eb:01:a9:2f:b8:c6:
bd:9f:b7:8d:69:35:3b:80:b2:b3:b8:2b:98:d6:4d:
6b:79:ad:92:ad:95:fb:a1:5a:fd:1d:66:22:b9:61:
5e:9b:06:c8:50:41:54:3e:ca:86:c2:83:06:0e:57:
8e:0f:7d:5e:2a:1b:a6:24:f2:bb:3c:eb:7b:fa:58:
0d:d4:84:81:2f:fb:b0:d2:30:b1:fd:3f:d3:11:b3:
0b:6f:90:e1:ef:ee:26:35:a5:5a:cc:4b:a4:f0:43:
05:13:8c:01:11:5b:78:89:ca:0c:f7:0e:a5:ca:e5:
d5:c2:a5:a4:06:00:55:f2:47:4f:9a:91:0e:d0:a9:
0d:b7:78:b5:09:bf:74:48:7b:f3:64:2a:f8:25:f9:
53:28:ba:37:55:9b:25:21:df:56:3f:a4:90:a3:d0:
a7:8a:06:62:6d:29:82:64:0b:55:92:36:f5:ec:05:
42:69:1e:33:42:78:ba:4f:49:7d:45:7d:67:83:2a:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:C2:11:DF:C6:C6:3A:7C:60:F6:21:75:1F:23:4C:9A:67:D2:CF
X509v3 Authority Key Identifier:
keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:00:00:c4:a2:93:71:11:9b:3a:09:01:7a:f6:0e:74:7a:ae:
d3:a5:19:b4:ae:d0:64:74:8e:e4:28:6c:ac:27:60:28:85:57:
f1:32:17:22:cc:a4:5a:04:ea:d3:99:bd:eb:83:c2:4f:bf:5b:
da:bf:4f:36:51:0c:f9:5c:2e:97:df:c0:c3:b2:74:66:5c:2a:
d1:6d:ad:b1:33:a4:b0:0e:f9:27:50:f0:05:c7:c9:3d:02:b8:
a4:fd:69:52:dc:a0:06:99:65:f6:10:14:cb:2f:f7:22:38:3f:
50:3d:2f:45:ef:cc:c6:6c:1d:21:9c:62:65:08:62:54:f2:b4:
8a:84:c3:ef:48:f0:de:e0:5b:ad:e9:c5:c1:f4:fb:b8:dd:4a:
ed:42:f4:32:1a:1c:a1:22:ad:e0:c2:b4:6a:9d:0d:a1:00:a3:
f9:1e:a2:25:6e:6f:fc:a4:97:e8:4f:a4:8c:ad:32:29:df:74:
15:25:1d:ad:72:3a:5d:18:ea:05:06:90:b7:fd:10:8c:bf:34:
1f:37:3b:1a:68:49:90:96:11:b5:0f:3e:2e:f4:75:a9:d2:39:
c8:63:09:cc:b5:38:cc:20:19:d2:2b:0c:3d:48:bc:74:1b:71:
40:78:1e:36:6e:e6:11:79:c9:fb:96:00:22:3c:cf:64:5d:6e:
9e:68:c2:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5
QkVEQjgxQjUwHhcNMjYwMzAyMDIxMjIxWhcNMjYwMzA5MDIxMjIxWjAYMRYwFAYD
VQQDEw02OWE0ZjIwNi1mOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3G097zuT1zylS2mEEiS6xEHctHlLHar4tbtS2C5c28Plogqanq78/G5Q+Ea
yDchmks1SpYs3Y0thwRALqkO76iyQkXrAakvuMa9n7eNaTU7gLKzuCuY1k1rea2S
rZX7oVr9HWYiuWFemwbIUEFUPsqGwoMGDleOD31eKhumJPK7POt7+lgN1ISBL/uw
0jCx/T/TEbMLb5Dh7+4mNaVazEuk8EMFE4wBEVt4icoM9w6lyuXVwqWkBgBV8kdP
mpEO0KkNt3i1Cb90SHvzZCr4JflTKLo3VZslId9WP6SQo9CnigZibSmCZAtVkjb1
7AVCaR4zQni6T0l9RX1ngyrfbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKBwhHf
xsY6fGD2IXUfI0yaZ9LPMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF
NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx
SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsgAAxKKTcRGbOgkBevYOdHqu06UZtK7QZHSO5ChsrCdgKIVX8TIXIsykWgTq
05m964PCT79b2r9PNlEM+Vwul9/Aw7J0Zlwq0W2tsTOksA75J1DwBcfJPQK4pP1p
UtygBpll9hAUyy/3Ijg/UD0vRe/MxmwdIZxiZQhiVPK0ioTD70jw3uBbrenFwfT7
uN1K7UL0MhocoSKt4MK0ap0NoQCj+R6iJW5v/KSX6E+kjK0yKd90FSUdrXI6XRjq
BQaQt/0QjL80Hzc7GmhJkJYRtQ8+LvR1qdI5yGMJzLU4zCAZ0isMPUi8dBtxQHge
Nm7mEXnJ+5YAIjzPZF1unmjCBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:29 2026 by rpki-client