
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier: jVI1IOeQ/AtKZm2l8Rp1XwSOpcvE6MhL+Pu7hcv+TzA=
Subject key identifier: 1E:1A:75:A1:52:7F:FA:1D:E8:E7:9F:C0:73:58:7D:69:04:45:5F:04
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number: 07AF
Signing time: Sun 01 Mar 2026 22:55:40 +0000
Manifest this update: Sun 01 Mar 2026 22:55:39 +0000
Manifest next update: Sun 08 Mar 2026 22:55:39 +0000
Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: bPcLZgKymhCY7ukja2MNK5ao81C802mIhtaXR2SPexM=)
2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: cFqGeqvAp4+H9D3Go8EW1NlfA3DNb+FcP3oMJfoNMaY=)
3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: 3VO026Z1Sl5k+dt0+oenlD8Lk6M27d1xuB0vo/m4844=)
4: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: MGgDBuK2ozCNY4Vjvqi7F7BY4x+uvNZ9GpBczQ7FuCg=)
5: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: mfLPXcvsn2GPwPl0nmYTUbj8MnwQ+nd3JJseLaE/iN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Validity
Not Before: Mar 1 22:55:39 2026 GMT
Not After : Mar 8 22:55:39 2026 GMT
Subject: CN=69a4c3ec-ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:1a:77:ec:cb:45:bb:44:42:76:ac:be:5f:
c2:e2:95:99:be:f5:2a:c7:45:77:65:3e:f7:a1:59:
53:9d:d2:ea:0c:61:b6:22:a7:f7:24:b9:db:52:60:
ab:e9:2d:bc:f8:3d:4e:af:cc:d5:b0:0e:a4:5f:83:
66:3e:a6:52:7d:da:5e:92:d4:fe:f3:b2:5f:f4:4a:
ea:23:04:8e:3f:0a:b7:6e:8d:28:be:16:ea:00:25:
60:44:5c:48:c3:70:ce:29:db:28:83:e6:ac:89:9b:
ec:66:1f:55:cc:9c:c0:c0:59:48:c8:b1:63:5b:bd:
0c:47:62:be:e7:2b:e7:9d:27:55:3e:51:07:6a:9e:
c4:96:b5:46:77:f4:8d:4e:5d:1b:81:db:0a:d6:26:
6a:6e:e0:22:67:df:cb:80:4b:d8:fb:e4:bc:aa:8a:
38:3e:2c:49:65:c0:76:0e:01:1b:a5:7f:9c:04:2b:
ac:66:0a:c3:11:03:a6:52:f9:f7:7b:03:f2:ec:f3:
8d:0d:61:58:06:4c:c6:78:78:ec:d2:3f:e3:91:fa:
4a:c9:80:46:54:f9:01:4d:74:c1:4f:af:92:6c:82:
73:6f:b7:f5:76:b6:3b:af:bf:fe:75:34:fd:8d:01:
19:a1:d6:fa:13:bf:20:b9:8d:f1:2b:d1:f8:9b:81:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:75:A1:52:7F:FA:1D:E8:E7:9F:C0:73:58:7D:69:04:45:5F:04
X509v3 Authority Key Identifier:
keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f9:ec:06:f9:af:7c:3b:81:57:6f:12:6c:b2:c6:38:5e:99:
c3:77:30:1c:ee:4f:d8:2e:6c:03:97:b0:fe:72:63:41:54:81:
0e:40:6b:a3:27:de:f9:7f:62:65:1d:55:47:21:5c:9d:18:dd:
83:a7:bd:3c:6f:52:db:c7:f3:84:bf:2f:e0:1f:d8:31:b0:5f:
e1:69:82:7f:e8:f6:5b:20:dd:24:6a:d6:fc:d1:74:ef:24:4d:
e6:46:3c:96:64:9d:84:66:05:84:f2:0c:c1:78:17:fc:c1:14:
03:84:5e:76:a8:b5:2c:43:c0:75:90:55:41:5a:95:f6:6b:b4:
53:0c:e5:b4:ce:3c:d5:53:e1:86:c9:8d:e6:60:f7:28:ab:86:
fc:f8:7e:20:5b:6a:8e:f5:c4:3c:03:7f:7c:3c:9e:83:9b:24:
d9:27:25:a8:ec:67:84:48:62:76:56:e5:cc:8d:43:3f:44:b2:
3b:f4:49:26:af:88:fa:1f:9d:8e:38:03:2f:52:c8:f4:3b:40:
5e:ff:5b:26:83:b5:de:1d:2f:5c:82:56:0e:a5:8a:55:83:ee:
09:98:10:5c:cf:90:20:23:5a:f9:69:eb:89:7c:96:5a:3c:f4:
4e:94:86:74:02:82:97:c7:c2:a0:b3:76:36:ed:d7:44:cc:f2:
37:5b:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:24 2026 by rpki-client