
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: xW4/ARH/8d2qeIQLBzVowASxdw5LsxcrjgyXdFgrFp8=
Subject key identifier: 9E:2F:39:93:0E:2E:84:7F:82:34:9C:18:71:48:06:4F:D0:EA:10:BC
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: F4
Signing time: Mon 02 Mar 2026 01:50:17 +0000
Manifest this update: Mon 02 Mar 2026 01:50:16 +0000
Manifest next update: Mon 09 Mar 2026 01:50:16 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: wNPiO2AxV7jcoxDA1LiPMx5UoKOYmXr+X78zLUUfnt0=)
2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Mar 2 01:50:16 2026 GMT
Not After : Mar 9 01:50:16 2026 GMT
Subject: CN=69a4ecd9-8f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:48:c8:87:54:de:ec:bb:93:0c:07:9c:15:
59:29:7b:7e:1c:f6:5a:9c:db:c7:37:88:ee:79:8d:
2e:44:45:92:84:14:13:1d:cd:13:58:4a:3d:a6:1b:
06:38:34:20:b8:62:ba:01:ef:db:c6:b4:35:58:ae:
0d:3c:ff:6d:33:e0:f2:ff:d7:c4:c2:8b:1c:e9:be:
99:0f:d2:96:99:a7:85:43:76:e9:7d:09:16:b6:74:
3a:04:52:6a:c5:7d:70:63:d4:42:1c:39:8f:43:50:
f1:09:44:de:01:f4:16:e6:c4:a6:cd:4b:b7:0c:13:
ab:8b:74:e6:89:c1:6d:da:d9:dd:c6:ac:3e:67:ef:
ec:4c:61:34:1f:b1:fc:d5:ea:9b:5d:64:f2:a2:dd:
99:0f:e4:18:cf:87:45:d9:5f:98:7b:bb:0e:e6:b2:
6a:0f:34:a2:22:ff:e5:48:ed:02:2b:84:b2:89:66:
af:b6:c2:62:cf:b6:c3:dc:c0:a6:1f:ab:ba:cc:43:
7a:13:04:20:de:4b:27:fd:31:98:96:28:f7:62:fd:
5e:64:ef:be:88:ac:08:06:e9:e3:6b:d2:0b:95:2d:
20:e2:1c:61:5f:30:0d:35:0d:e7:9d:75:cb:dc:f6:
25:a0:c7:74:43:45:67:4c:42:65:b0:5a:b1:0f:0e:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:39:93:0E:2E:84:7F:82:34:9C:18:71:48:06:4F:D0:EA:10:BC
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:32:44:5a:bd:5e:55:78:1b:af:d3:91:1d:c0:78:3f:5e:
00:b6:79:df:11:a0:78:23:88:cc:00:f1:90:81:d3:8d:79:7e:
5c:7c:56:e1:ce:f9:6b:4b:58:ea:52:8f:cd:2a:89:f9:da:7e:
83:7d:58:6c:16:d5:3b:d0:a6:65:91:9e:51:74:7c:2b:9b:ca:
2c:38:18:38:0d:c7:79:9e:53:a3:80:27:62:b5:e6:d5:a1:af:
97:d5:7c:c3:2f:d2:62:f2:55:fd:72:5d:68:0d:40:74:aa:67:
66:d7:3d:f6:91:04:17:60:23:38:fe:73:02:f4:57:ed:8d:1b:
bf:14:9d:ed:2c:06:ad:8f:2f:ac:38:4b:0a:3a:81:ee:85:fb:
c9:a6:8c:f5:8d:90:44:43:09:e8:9f:ff:4d:f6:6f:82:a6:43:
ab:d8:89:d9:39:76:80:28:23:07:0d:de:ed:59:ca:d0:91:38:
a8:57:a3:6a:c8:0c:64:4e:b7:00:e7:9b:a5:24:9c:6d:83:04:
5b:43:aa:f7:ba:18:5d:c9:07:94:6a:3d:fb:67:90:99:ec:1a:
c9:21:73:e2:86:b4:14:c7:fe:10:fe:03:f9:d3:67:b6:54:a3:
f0:f1:d8:bf:5b:ba:8b:36:12:fe:ca:9b:cb:11:f4:a3:bb:3a:
f3:5f:36:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNGRTczOUZFNEVC
NzE5OTY2QjYwHhcNMjYwMzAyMDE1MDE2WhcNMjYwMzA5MDE1MDE2WjAYMRYwFAYD
VQQDEw02OWE0ZWNkOS04ZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0e5IyIdU3uy7kwwHnBVZKXt+HPZanNvHN4jueY0uREWShBQTHc0TWEo9phsG
ODQguGK6Ae/bxrQ1WK4NPP9tM+Dy/9fEwosc6b6ZD9KWmaeFQ3bpfQkWtnQ6BFJq
xX1wY9RCHDmPQ1DxCUTeAfQW5sSmzUu3DBOri3TmicFt2tndxqw+Z+/sTGE0H7H8
1eqbXWTyot2ZD+QYz4dF2V+Ye7sO5rJqDzSiIv/lSO0CK4SyiWavtsJiz7bD3MCm
H6u6zEN6EwQg3ksn/TGYlij3Yv1eZO++iKwIBunja9ILlS0g4hxhXzANNQ3nnXXL
3PYloMd0Q0VnTEJlsFqxDw4PwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4vOZMO
LoR/gjScGHFIBk/Q6hC8MB8GA1UdIwQYMBaAFCd/EiRKULxlTuVj/nOf5OtxmWa2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODlBQS84NUQwRjM0NkJD
NjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZHVk81V1AtYzVfazYzR1pa
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZH
Vk81V1AtYzVfazYzR1paclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR/UyRFq9XlV4G6/TkR3AeD9eALZ53xGgeCOIzADxkIHTjXl+XHxW4c75a0tY
6lKPzSqJ+dp+g31YbBbVO9CmZZGeUXR8K5vKLDgYOA3HeZ5To4AnYrXm1aGvl9V8
wy/SYvJV/XJdaA1AdKpnZtc99pEEF2AjOP5zAvRX7Y0bvxSd7SwGrY8vrDhLCjqB
7oX7yaaM9Y2QREMJ6J//TfZvgqZDq9iJ2Tl2gCgjBw3e7VnK0JE4qFejasgMZE63
AOebpSScbYMEW0Oq97oYXckHlGo9+2eQmewaySFz4oa0FMf+EP4D+dNntlSj8PHY
v1u6izYS/sqbyxH0o7s68182QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:28 2026 by rpki-client