
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier: mrKFAdQCDzd+ztgCTF/0K4QQKZK0WKFLv676jZgULVI=
Subject key identifier: CE:91:AA:F3:52:EF:89:43:49:07:DB:FA:42:A5:D3:5B:0B:F9:35:C9
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial: 1033
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number: 102B
Signing time: Sat 28 Feb 2026 17:32:16 +0000
Manifest this update: Sat 28 Feb 2026 17:32:16 +0000
Manifest next update: Sat 07 Mar 2026 17:32:16 +0000
Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: FcTjV12UAcDeEWAA5goQn+mixqh6apVooYjdq4BRrLQ=)
2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: nXcUac3MS90vWtMTrdvd36wOBCE4zfd0e2DObXaS7L4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Validity
Not Before: Feb 28 17:32:16 2026 GMT
Not After : Mar 7 17:32:16 2026 GMT
Subject: CN=69a326a0-3079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:c1:18:ed:23:cb:c5:51:9d:47:c8:b5:ec:
11:9d:0b:ef:82:18:7c:50:50:c1:9d:0a:04:3e:81:
ef:7d:f9:de:a0:a4:2c:78:1a:61:a5:0d:06:26:ca:
38:ec:16:28:52:85:4b:8c:22:7b:ed:a4:1d:1d:b7:
bf:ab:7b:ba:37:b2:a0:7b:33:40:62:27:da:8e:b6:
04:29:25:45:a6:26:3d:e2:9c:e2:5b:24:5f:df:f9:
1b:9c:67:7d:dd:a4:24:9f:6e:f0:24:ee:4d:f9:97:
89:f2:53:45:e8:f9:ae:76:7b:d7:a9:27:93:a2:75:
6c:ef:51:0f:1a:d7:6d:8c:d2:1d:d2:8b:7c:ea:7a:
91:bf:02:16:d7:f5:be:a5:41:6a:1d:1f:e9:f3:76:
0b:16:c7:99:18:ba:3c:2f:a0:5b:50:aa:2f:52:72:
36:0f:a4:59:d8:84:35:a6:18:a3:67:90:43:be:c7:
fa:7b:e4:7d:03:73:d9:30:94:31:b2:d1:bb:2d:48:
f1:47:18:a2:c0:ee:6f:88:de:c6:a9:a0:5b:77:48:
56:c9:f7:82:69:7e:81:2e:21:82:54:69:1e:e8:c7:
8b:e8:9b:d8:b5:3c:dc:35:c8:bd:ec:27:39:21:d5:
2a:dc:03:57:1c:3b:1f:dc:0e:e7:0c:2f:35:cd:0c:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:AA:F3:52:EF:89:43:49:07:DB:FA:42:A5:D3:5B:0B:F9:35:C9
X509v3 Authority Key Identifier:
keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:36:eb:ef:aa:57:18:21:da:cb:58:05:c2:c5:45:1a:b5:d0:
7e:ab:75:92:7d:9d:5b:21:09:04:b0:5e:f4:01:dd:36:24:35:
08:f1:50:ae:10:51:92:ed:59:45:03:e9:59:71:db:e1:ff:df:
10:07:91:b2:28:39:e4:2d:f6:0a:8f:c5:60:e7:8c:50:1b:2a:
b2:8c:1c:cf:4b:5d:76:80:94:69:42:0e:ab:4a:c5:0c:9b:34:
fd:bc:10:6b:de:a5:6e:7f:d8:49:5e:b5:e1:b4:d5:f5:ef:9a:
5a:94:21:c0:7c:c5:7e:f4:af:70:a0:18:2e:ee:31:5e:10:0d:
a9:0c:e5:dd:05:2b:5d:2e:66:1b:04:52:03:7e:d4:27:66:96:
b5:7b:de:d8:06:af:77:c2:c0:b4:87:e6:ab:79:0b:b7:ee:9a:
6d:8e:bb:c7:a8:0f:59:3b:90:e6:a3:bf:e8:cb:fa:ea:fc:4f:
c3:39:b9:df:a2:04:ff:2d:d9:49:50:ac:3f:5d:29:d6:b4:b1:
5c:bb:c6:d8:dd:26:08:72:bc:15:2e:cf:50:a9:be:17:bd:dd:
34:27:e0:85:a7:6e:21:6b:75:b4:3f:cf:63:ad:9c:ad:46:4a:
7f:e6:a6:4f:74:e1:80:b4:11:ef:6c:41:48:b6:b3:b6:f5:61:
26:ee:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:52 2026 by rpki-client