
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier: ORl0wbISO+eUhSwbyuxGn68m7HVeeRsfkTs061BJoQc=
Subject key identifier: 15:AF:8B:CD:96:92:52:DE:6F:5A:ED:20:9B:8D:F4:C6:95:93:C6:19
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0ACC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number: 0ABE
Signing time: Sun 01 Mar 2026 23:47:56 +0000
Manifest this update: Sun 01 Mar 2026 23:47:54 +0000
Manifest next update: Sun 08 Mar 2026 23:47:54 +0000
Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: Mp82hnFvWd9qC0ybpbdPdD/gak6VkfLgNVpNlgBtj6s=)
2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Validity
Not Before: Mar 1 23:47:54 2026 GMT
Not After : Mar 8 23:47:54 2026 GMT
Subject: CN=69a4d02b-83ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:8f:bb:58:33:e7:9f:60:5a:40:30:11:d5:
0e:a1:15:07:e8:86:89:cb:c2:ac:61:e1:9d:41:1f:
11:3f:78:bd:bc:01:80:74:c3:bb:a8:e0:54:6a:be:
b3:51:75:19:b7:cf:80:62:d2:bb:bf:4c:b7:43:d6:
9e:21:a4:24:20:8e:17:e3:57:60:ae:d5:ef:a3:a9:
47:12:d7:f4:52:6f:51:80:21:ab:19:b5:1f:9a:00:
27:23:43:e2:c6:95:c1:f2:79:b6:ef:dc:b7:5d:2a:
25:93:df:e8:0a:f4:6b:b3:6e:07:0c:a1:79:aa:0c:
3f:8b:5e:c1:07:d3:df:4e:c2:d9:19:ee:9a:54:1d:
6e:59:17:05:77:81:e4:26:5b:85:cf:d5:29:ae:7e:
84:67:81:cf:42:87:08:e0:ef:0d:5c:ca:ad:a4:85:
2a:d9:b6:18:6d:8e:f7:29:09:0a:b6:06:b0:21:dc:
d8:57:3b:25:58:34:41:18:bd:55:bc:d9:9b:1e:cb:
4a:03:13:77:09:94:0c:c6:f8:26:5a:64:d8:5e:01:
9b:56:6f:1f:c2:cd:85:ca:ab:e1:ca:62:78:01:a4:
3f:2a:1d:72:8c:02:b3:a8:58:13:ed:4c:98:34:7c:
1f:a5:52:c9:c9:b4:08:a0:bf:f4:94:75:7a:6a:3b:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:8B:CD:96:92:52:DE:6F:5A:ED:20:9B:8D:F4:C6:95:93:C6:19
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:4c:82:2b:59:eb:79:5e:71:5e:81:08:02:ca:61:9a:be:54:
24:a9:a0:e0:50:9e:4e:82:7c:61:9b:4b:5d:99:5a:db:a5:82:
05:7a:d8:3c:8b:19:b0:dc:94:4a:c0:6c:0a:d7:1f:e7:79:43:
4a:a8:42:16:c3:bf:e8:69:da:d8:38:8a:64:f3:60:31:ff:df:
03:87:ad:c8:6d:d9:38:78:e4:b9:7f:30:f6:52:dd:ea:82:1f:
12:19:71:af:75:e9:56:50:fd:ea:18:95:94:82:55:68:f0:69:
3f:cb:80:f2:0c:d7:25:fd:25:da:02:ae:70:28:7c:fb:26:8c:
46:78:65:59:59:06:13:2b:26:50:f8:3f:be:10:11:5e:b2:88:
52:d2:02:3a:16:95:3c:b9:72:b0:2e:6f:21:e9:b5:64:4b:f1:
12:dc:df:00:49:7e:86:bd:c5:0d:76:ce:d7:e5:98:88:58:98:
a4:34:fc:7c:4f:aa:d7:6f:62:80:db:77:eb:b1:aa:88:4d:17:
a4:18:9f:2e:18:41:a6:8d:55:7a:0f:19:77:7d:35:c5:30:0f:
5d:55:29:71:bd:d3:03:99:b2:88:3f:a0:30:80:6a:1d:32:f9:
35:ca:e8:81:02:12:bc:3a:b8:f5:ac:56:91:30:df:fa:d4:80:
ae:48:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:01 2026 by rpki-client