
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: YxuGltxNGgp7UqfEle/SwFlU38CpEdOckZZ+hsbGMTE=
Subject key identifier: 22:ED:E2:AF:3E:3B:D6:1F:95:D6:50:4F:B4:DE:9C:12:48:0A:21:FB
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: 85
Signing time: Sun 01 Mar 2026 08:56:08 +0000
Manifest this update: Sun 01 Mar 2026 08:56:07 +0000
Manifest next update: Sun 08 Mar 2026 08:56:07 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: HHAlUyVqfWwaanPcCQfOnycawZrzSJEBaAx9n9STJ3g=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Mar 1 08:56:07 2026 GMT
Not After : Mar 8 08:56:07 2026 GMT
Subject: CN=69a3ff28-a2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:2a:61:c1:a8:df:c9:1a:03:4f:77:e7:84:
f6:48:84:86:ee:b7:04:93:25:7d:ab:69:3f:e6:07:
ed:7e:d3:b3:28:cc:0c:5a:54:72:3c:37:8f:83:a7:
5c:56:d2:23:8b:2c:97:d5:37:45:7b:e7:cf:45:ba:
e5:6e:14:72:98:3b:b3:75:2a:c4:e0:5b:1b:24:2a:
1d:fa:cc:b8:f8:ed:26:5b:70:47:7e:1b:94:e8:66:
b0:ba:74:5a:df:a5:b3:01:45:ca:75:02:99:e4:a4:
e7:29:19:38:a0:c6:f1:39:99:ea:81:2c:a2:f2:29:
74:84:e9:76:b8:50:a5:49:f7:a1:18:df:db:6e:27:
b7:9a:15:07:dd:7a:82:e5:ac:9b:89:31:66:45:3f:
59:e6:da:f2:7f:7d:37:b2:f3:7d:da:96:91:d5:7a:
1d:30:63:13:87:ef:2b:35:6e:35:22:d3:e9:60:09:
75:22:ff:9f:18:9a:28:18:42:e9:81:99:83:6a:94:
8c:25:9a:7a:27:3e:3a:09:5a:0c:6b:e2:34:cc:ce:
8a:b5:7c:40:42:44:31:f1:f8:aa:81:dc:a5:eb:f7:
a2:4f:bc:40:da:7f:fa:b3:6b:79:67:80:ca:93:9a:
8c:df:91:b3:0d:66:9a:84:9c:7a:bd:de:b9:89:e3:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:E2:AF:3E:3B:D6:1F:95:D6:50:4F:B4:DE:9C:12:48:0A:21:FB
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:4e:92:3b:54:b8:49:a8:b4:fd:cb:c5:08:dd:d7:54:fa:
fd:9c:b2:2b:55:1f:f5:21:2a:7f:56:c6:76:4d:a3:dc:f8:74:
ed:2d:52:79:d7:17:ba:b3:40:11:ff:7a:24:16:0d:51:85:67:
38:dd:50:fe:32:3e:76:9f:92:9e:e5:e4:36:36:10:98:d8:b4:
ec:f9:01:67:8b:8a:82:a9:63:fb:93:5b:92:4c:6c:1e:f3:8a:
e5:62:7a:85:9a:8b:18:a6:ca:24:a9:c7:66:dc:0d:11:35:9a:
72:10:f6:0f:63:eb:d3:6d:1f:9b:ad:1b:f7:6d:42:1e:1b:f4:
2b:61:1a:d8:5a:3c:79:68:95:94:1f:ca:1b:0d:f2:6c:e2:0d:
24:bd:20:7a:1b:19:12:7b:ff:2d:1c:16:40:35:8c:16:40:75:
76:44:9a:c6:da:78:88:72:32:24:88:30:66:fb:1b:36:a3:9f:
2d:03:ee:a2:e0:75:5a:f1:b7:4f:b2:5e:31:03:06:cb:5a:ec:
4c:0b:4f:78:88:b2:d7:8b:71:89:25:7a:73:f6:84:4b:df:e3:
eb:91:86:49:f6:5f:13:1c:11:4a:4d:3c:e3:26:84:aa:aa:20:
eb:a6:cf:72:cd:be:1a:1a:08:1c:ca:c0:c1:aa:22:98:83:64:
cf:41:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:31 2026 by rpki-client