
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: Z9+UUJBfL+qw/ZjzHLmJSrVDW8J1icLeEZGeCnqycJI=
Subject key identifier: 43:AB:70:A5:2B:F1:A1:1B:65:C6:19:EA:BD:14:CB:AB:08:3F:C8:29
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0B6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0AAC
Signing time: Mon 02 Mar 2026 00:21:57 +0000
Manifest this update: Mon 02 Mar 2026 00:21:57 +0000
Manifest next update: Mon 09 Mar 2026 00:21:57 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: amCy6Na9HrtoB9LHcCdl4Oqe4qiTV+qR04kKJB2hojw=)
2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Mar 2 00:21:57 2026 GMT
Not After : Mar 9 00:21:57 2026 GMT
Subject: CN=69a4d825-620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:24:e8:b0:48:6a:ef:c6:93:e9:fc:07:b2:
0e:7a:a9:e3:4f:83:06:41:62:a6:a1:37:17:49:60:
1b:fe:ab:63:a6:c2:ee:65:aa:8e:2f:46:f0:0a:77:
d2:8c:f1:1f:8b:51:57:9b:fd:b3:99:a7:d6:e2:92:
1a:15:19:07:1b:5e:42:88:0f:d8:6b:d3:ac:18:9c:
69:c6:1f:77:9f:80:3c:47:a3:a8:f9:30:50:16:dd:
3a:bd:2f:74:4c:7a:39:1b:da:7d:8d:98:ae:de:92:
c9:fc:09:8a:89:9c:f1:25:a9:36:22:5a:b1:92:ae:
3b:71:14:d3:04:32:b2:63:00:a6:19:1d:49:02:75:
93:65:47:c7:89:f2:b6:c0:91:55:61:e5:3b:6d:4f:
3d:02:e5:5c:f8:18:da:ed:9d:2a:a1:5a:9f:c2:c1:
4c:e6:57:5a:86:cb:77:8a:c0:33:ae:50:0f:6a:79:
15:61:4a:ae:49:f0:46:f6:67:2b:e8:7c:cf:63:57:
2d:ea:c2:07:b3:14:ea:f4:31:b3:ad:37:84:e4:cb:
2a:82:88:fa:9f:d2:76:da:66:22:63:55:ba:a7:9c:
6b:22:c4:97:f1:6b:59:af:6d:44:24:62:3e:28:63:
f0:80:3c:ff:e6:2a:f6:e8:60:1e:b9:28:fc:49:2c:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:70:A5:2B:F1:A1:1B:65:C6:19:EA:BD:14:CB:AB:08:3F:C8:29
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:b4:48:ce:13:31:f5:1b:b7:91:ce:00:74:b8:06:bb:9b:
ba:cf:8a:9c:08:d1:8b:6a:f0:c7:7f:de:e3:31:94:8d:47:1e:
5f:b2:1d:cf:1d:e6:24:9d:b9:dc:23:77:1f:ed:73:b3:88:9f:
aa:30:6a:1d:bd:e6:88:be:23:d2:87:cb:73:3f:5a:b3:98:0c:
f3:6f:21:25:81:15:bb:5f:ee:15:57:84:5c:df:a9:dc:bd:d8:
74:d6:1c:3d:ea:2f:8b:c3:70:d9:76:dd:f3:d5:c8:86:51:00:
7b:3c:db:28:a6:9b:2e:91:7c:35:58:fd:61:24:26:ee:d9:c1:
15:5e:a4:49:72:0e:80:d0:3b:cd:e3:be:20:49:8f:5a:05:66:
60:31:4a:36:54:67:c2:cf:ab:b3:2b:2f:5b:ba:28:f3:c1:da:
f8:ad:05:90:0e:08:8a:6e:24:ae:6f:ec:01:36:e6:b4:76:f0:
a3:e9:19:21:a2:39:f1:d0:1e:ca:bd:6f:4f:1d:84:54:ec:91:
a0:e5:f8:6a:28:e9:af:ca:07:7e:c5:e8:eb:ea:2d:da:d1:0b:
ea:e5:78:e0:cf:e3:0d:51:a2:99:88:ea:92:d0:e7:32:2b:5a:
3d:66:cd:5f:de:2a:4f:93:91:e1:e9:ed:df:30:1b:1e:98:8a:
54:ef:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:51:38 2026 by rpki-client