
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json)
Hash identifier: 9Fp0HWiZ4BbBTANIGeOl7mFreGMz97fdrFUEIm36ois=
Subject key identifier: 05:99:CF:4C:1B:1A:18:32:01:AC:83:E1:80:DC:B6:7A:9F:CB:EA:26
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
Manifest number: 024F
Signing time: Mon 02 Mar 2026 01:18:01 +0000
Manifest this update: Mon 02 Mar 2026 01:18:00 +0000
Manifest next update: Mon 09 Mar 2026 01:18:00 +0000
Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: MHbvEKX16cZFaw7MTeseVr7Z7WZrSRhXYKS6luVBI5U=)
2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: OwTmdvXh/fVgIelq52MoT3QNfZLp7zkcbYsPTc6P3yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Validity
Not Before: Mar 2 01:18:00 2026 GMT
Not After : Mar 9 01:18:00 2026 GMT
Subject: CN=69a4e549-1551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:7a:d8:94:aa:8b:8f:f0:5f:b6:de:d9:0d:
31:b9:bd:94:5f:b5:3e:2a:ab:fe:25:ca:ad:c4:50:
c9:1c:88:fc:99:4a:97:b0:79:5c:0d:f9:3e:14:a1:
cf:b2:80:6a:f2:cd:ce:71:ff:df:46:23:d2:a9:8b:
f7:bd:97:5c:ab:bc:3e:88:8e:16:36:a5:a1:cd:31:
27:87:3c:23:c3:2a:01:0d:89:9e:4c:b9:0f:49:70:
c8:50:d6:bc:bb:e2:a4:ab:43:67:ab:1a:59:ad:7a:
6e:7e:9d:69:ae:7a:13:5e:39:85:e9:4f:82:9e:a3:
cd:6c:c5:ed:2a:88:53:aa:df:ed:16:a7:6e:31:09:
07:08:3e:2c:15:10:43:08:1c:d6:70:59:b8:61:7e:
a1:2a:2f:9a:d4:58:cf:6a:29:7f:72:bf:a0:1c:21:
60:6f:c5:b7:d9:77:51:60:62:8a:23:7e:58:3c:21:
14:02:63:b5:f9:8c:82:20:61:33:09:48:e9:56:af:
72:11:9c:65:68:18:32:a4:08:e2:fe:42:98:34:87:
4e:93:85:75:fe:12:af:1c:99:c2:6a:fb:b4:cd:d7:
f7:9a:46:4b:63:61:b0:34:f2:dc:1d:65:1d:fd:6e:
b2:f4:9d:b1:0c:d2:29:a8:cb:60:d7:b4:3b:78:83:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:99:CF:4C:1B:1A:18:32:01:AC:83:E1:80:DC:B6:7A:9F:CB:EA:26
X509v3 Authority Key Identifier:
keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a0:b2:17:ba:99:15:ad:e5:8a:2b:84:25:3c:4a:e5:79:57:
36:ba:91:d8:45:13:69:a2:1c:65:cd:01:b8:36:07:67:68:1b:
a8:6c:29:77:d1:07:cb:7d:5c:8c:d3:bb:a0:78:ce:47:b5:59:
4b:46:b2:f5:67:ad:80:ec:97:cc:74:a3:ed:10:77:5f:a3:63:
07:4b:f1:46:28:24:0d:5d:b2:75:a6:63:f5:e6:b2:0c:76:51:
38:43:1c:73:c5:d1:9e:ac:37:84:31:6b:5b:2a:38:2f:59:c9:
db:f7:0b:64:85:5b:f4:45:6f:0d:7f:ae:c6:86:07:41:57:d1:
97:37:7d:e8:97:47:0f:e7:44:32:a5:b9:4f:07:d0:2f:b0:73:
f1:39:ae:e5:61:3e:eb:2d:b8:df:dc:6a:24:9d:99:fa:2f:3e:
23:51:df:a0:ee:6f:c8:19:72:92:ed:37:e4:7c:78:60:31:b2:
05:3a:b2:99:8a:93:09:79:a6:1b:56:7c:ea:de:26:15:60:18:
4f:78:86:ca:87:16:66:92:fc:bb:0e:18:98:3f:cf:7c:b2:49:
70:c6:0d:12:ad:15:13:30:dd:46:b5:62:4b:bd:d4:a3:18:fa:
22:c1:a9:d5:43:46:92:f5:10:39:d0:1c:1f:5c:72:8b:eb:c4:
2a:4b:04:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC
QjE3NEVCMDgwHhcNMjYwMzAyMDExODAwWhcNMjYwMzA5MDExODAwWjAYMRYwFAYD
VQQDEw02OWE0ZTU0OS0xNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQR62JSqi4/wX7be2Q0xub2UX7U+Kqv+JcqtxFDJHIj8mUqXsHlcDfk+FKHP
soBq8s3Ocf/fRiPSqYv3vZdcq7w+iI4WNqWhzTEnhzwjwyoBDYmeTLkPSXDIUNa8
u+Kkq0NnqxpZrXpufp1prnoTXjmF6U+CnqPNbMXtKohTqt/tFqduMQkHCD4sFRBD
CBzWcFm4YX6hKi+a1FjPail/cr+gHCFgb8W32XdRYGKKI35YPCEUAmO1+YyCIGEz
CUjpVq9yEZxlaBgypAji/kKYNIdOk4V1/hKvHJnCavu0zdf3mkZLY2GwNPLcHWUd
/W6y9J2xDNIpqMtg17Q7eIN0nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWZz0wb
GhgyAayD4YDctnqfy+omMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw
QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN
aERidFU4QTBQT3E3RjA2d2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs6CyF7qZFa3liiuEJTxK5XlXNrqR2EUTaaIcZc0BuDYHZ2gbqGwpd9EHy31c
jNO7oHjOR7VZS0ay9WetgOyXzHSj7RB3X6NjB0vxRigkDV2ydaZj9eayDHZROEMc
c8XRnqw3hDFrWyo4L1nJ2/cLZIVb9EVvDX+uxoYHQVfRlzd96JdHD+dEMqW5TwfQ
L7Bz8Tmu5WE+6y2439xqJJ2Z+i8+I1HfoO5vyBlyku035Hx4YDGyBTqymYqTCXmm
G1Z86t4mFWAYT3iGyocWZpL8uw4YmD/PfLJJcMYNEq0VEzDdRrViS73Uoxj6IsGp
1UNGkvUQOdAcH1xyi+vEKksEcw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:38 2026 by rpki-client