
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier: 6Z+R2HcXDlI+YEYP9UF8JQQyWTeiJ7xxmFGu+Y2HKqA=
Subject key identifier: BE:E3:6F:8D:E9:CF:B1:AA:94:89:B6:59:AA:EE:7C:5B:A6:C3:DA:31
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0CC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number: 0CB0
Signing time: Mon 02 Mar 2026 02:21:13 +0000
Manifest this update: Mon 02 Mar 2026 02:21:11 +0000
Manifest next update: Mon 09 Mar 2026 02:21:11 +0000
Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: HGyhF/ae3hIEnSF9ykD2toQgB/KKLI+y5CW8TP7meR8=)
2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Mar 2 02:21:11 2026 GMT
Not After : Mar 9 02:21:11 2026 GMT
Subject: CN=69a4f419-3f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:b2:b6:c0:db:ea:01:86:c4:4d:b1:ba:07:
b8:57:1f:3f:0a:4c:85:d3:14:da:a2:f0:d4:5a:81:
33:d5:71:51:9b:11:97:6d:f4:f4:d2:61:54:f6:cd:
c6:ff:f5:6c:63:e0:2b:99:76:5f:48:d1:67:b9:2f:
64:6c:28:14:a3:40:de:fe:35:66:42:e2:b1:a9:be:
4b:eb:d2:df:83:de:f2:69:3c:7c:2f:35:75:dd:30:
6a:fc:5c:da:02:59:c1:9e:3c:45:cc:f5:24:3c:9f:
f4:20:d9:d4:96:5e:ce:bc:ea:59:57:cc:c7:a2:a1:
78:69:96:5f:8e:82:4a:9f:4b:cf:32:ec:e8:e8:2e:
87:50:4a:32:3d:d4:9b:3d:c9:49:c4:e3:5d:e1:88:
ba:1e:90:8f:ff:1d:76:40:74:81:e0:8a:a7:fd:2f:
59:20:17:04:62:33:01:67:a3:8c:cc:de:b2:9b:99:
43:a4:b2:1b:07:e5:ab:24:05:95:2c:57:63:0b:52:
ff:f7:9e:c5:09:a6:6c:0c:0c:4a:ad:6f:99:16:c0:
62:27:8c:3f:46:66:5b:82:04:93:c0:b1:81:42:f6:
50:30:81:8d:fa:83:2b:e0:f1:59:88:39:54:a2:26:
ee:a0:5d:fc:f6:04:94:fe:c5:ed:3e:89:ef:69:ad:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:6F:8D:E9:CF:B1:AA:94:89:B6:59:AA:EE:7C:5B:A6:C3:DA:31
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:3e:4f:f2:92:be:12:5d:84:33:67:9f:a7:d7:91:c8:22:
b2:e6:02:b7:2a:72:f4:60:58:72:e8:88:25:8a:f8:b7:60:fe:
87:9e:8a:e9:d9:0f:7e:91:f0:37:8b:cf:7f:9a:cc:eb:a5:a5:
b9:33:57:25:07:be:e9:e0:b6:31:9c:3b:bb:64:c8:c5:55:2d:
25:9d:5a:72:3c:e8:da:bc:fd:03:ad:41:c0:f6:ab:6c:d5:aa:
f0:2f:a3:53:b8:06:32:7a:2b:e5:b5:cd:b8:4e:46:de:61:67:
a8:ee:5f:42:2b:11:2d:05:d3:b1:f9:4f:ff:82:4f:ba:af:e4:
5f:6d:de:21:49:09:eb:f0:93:a1:ba:cc:f1:0e:b0:3f:20:c3:
cd:06:fb:00:20:40:09:22:71:76:eb:1b:38:74:d6:12:f3:cb:
03:22:d5:39:cf:ab:85:86:4a:92:59:59:fb:b1:fb:a4:c3:f5:
2e:d6:3d:cf:de:b2:30:c0:46:a7:21:be:28:96:39:f9:4d:dd:
8b:e2:e0:ff:68:9f:5a:4b:e2:69:17:a0:ef:e1:80:c1:fa:62:
4e:b7:80:e5:f2:80:6e:02:13:ab:80:23:3e:b1:8f:4e:1c:b0:
37:b2:19:9b:66:6d:e5:db:6e:ac:df:15:94:38:24:45:cb:19:
43:7d:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:04 2026 by rpki-client