
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: bc4IG1cH7N9r2ItesyqhOyFXPDd557G2y/NAjzm4iQA=
Subject key identifier: 0D:59:C8:1C:A1:4B:5D:D3:16:F4:09:5D:D7:D7:64:2C:35:05:FD:41
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: 0116
Signing time: Wed 15 Apr 2026 05:27:37 +0000
Manifest this update: Wed 15 Apr 2026 05:27:36 +0000
Manifest next update: Wed 22 Apr 2026 05:27:36 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: lBtxexCO/tEO/3oyiudukAVuubMF/csg1rEHUqDchb8=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Validity
Not Before: Apr 15 05:27:36 2026 GMT
Not After : Apr 22 05:27:36 2026 GMT
Subject: CN=69df21c9-7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:84:3c:b0:c2:93:b3:16:4b:b0:d3:91:54:
39:7d:a3:74:0f:3e:a2:33:41:d9:01:a0:8c:dd:33:
5e:45:e9:6a:4c:2f:79:6c:c6:06:a0:1a:53:e7:dd:
f5:ae:2b:55:f2:61:6e:7e:6b:24:8c:63:27:3e:10:
96:10:8e:96:08:b7:06:88:d5:87:63:6d:39:71:53:
7a:d2:f5:8a:1f:a0:e0:28:8e:76:a7:f4:e9:ad:af:
08:4f:a4:fd:cd:ca:e4:dd:18:3f:3d:88:04:f8:e6:
c2:67:58:cd:1e:37:be:75:89:b9:93:12:8a:e0:ef:
f2:17:ea:a1:68:78:8a:3f:1e:b5:44:1e:51:a0:36:
b7:2f:a1:d5:4b:1c:77:dc:cd:10:92:43:ca:b5:9a:
67:da:1b:b8:d6:74:53:74:9a:ba:ae:a9:a1:7e:ac:
2e:ea:41:a4:71:e8:fa:6e:d6:47:59:3e:65:d3:4e:
bb:f5:a9:7a:d4:7a:60:51:35:d9:4e:21:ed:79:a5:
b8:eb:1d:74:d8:0b:61:fc:98:60:26:01:e8:dd:75:
13:ed:83:93:7b:a9:c2:76:15:59:f2:25:17:af:05:
0b:aa:0b:de:9b:48:49:bc:9b:21:9f:74:0b:81:4c:
ce:c3:74:fd:9c:77:e3:18:40:a9:7b:48:9a:58:64:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:59:C8:1C:A1:4B:5D:D3:16:F4:09:5D:D7:D7:64:2C:35:05:FD:41
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:32:06:e7:51:a5:f1:01:4a:76:89:90:e9:2d:fe:c1:01:43:
8d:1e:00:d9:dc:a4:a2:40:7b:17:a0:75:7a:72:c2:df:ad:f8:
6f:12:f4:05:f9:fe:1c:88:a7:c5:c4:6e:00:df:d1:e3:40:94:
2b:40:f9:28:86:4f:68:a8:75:ac:d0:b5:f3:36:78:dc:5a:63:
13:30:41:cf:2a:a1:12:b7:f5:d4:77:87:65:92:10:50:22:da:
bf:36:f9:dc:7f:bb:f1:90:ec:5d:5f:53:6d:67:6f:f5:16:36:
77:88:ad:29:86:f3:9c:9c:7a:5a:33:bc:b4:99:88:0b:a1:13:
6b:a3:9c:f6:d9:15:14:b6:43:27:f5:7e:86:f7:2e:af:bc:bb:
b4:e3:53:81:c1:cb:6a:cd:7a:46:96:88:47:62:b4:dc:df:ca:
38:08:3a:62:6b:f8:65:db:c8:4e:ee:51:9b:b7:8b:39:58:24:
87:b8:d1:4e:d3:55:01:91:38:e5:72:6f:6a:eb:99:ec:d6:4a:
85:20:23:db:38:c9:4a:62:b2:53:d1:02:19:26:dc:08:44:d3:
c1:c0:05:d0:d3:50:28:c9:06:85:fd:fa:1f:ca:8a:df:48:fc:
1d:fb:00:f5:2c:7e:b0:1a:ef:9f:96:cb:d7:06:06:12:46:d1:
b7:59:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:54 2026 by rpki-client