
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json)
Hash identifier: ypdEh3qVIYaYqG/vlLmUnAbRGdPipZ7YpVrdenRePAc=
Subject key identifier: 58:A0:73:D6:AD:7F:A5:14:37:BA:BB:F9:5E:8E:20:2D:B5:17:DF:B1
Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Certificate serial: 0928
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
Manifest number: 0921
Signing time: Sat 18 Apr 2026 20:07:10 +0000
Manifest this update: Sat 18 Apr 2026 20:07:10 +0000
Manifest next update: Sat 25 Apr 2026 20:07:10 +0000
Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: WWiu+Kd3gjykqxU5u0pvqHZZ7Z4D+MQxsRgoJAbbe3I=)
2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: XsfyCgy8g5kHLYmZ6IEzpkYjqKuCoWEp9cV6g7rlqWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344 (0x928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Validity
Not Before: Apr 18 20:07:10 2026 GMT
Not After : Apr 25 20:07:10 2026 GMT
Subject: CN=69e3e46e-e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:03:ed:79:4f:0f:1c:f6:fc:f9:bd:14:5d:
90:f0:cd:6f:14:c8:02:e5:fd:4d:68:f0:e1:e8:e7:
9a:d5:90:52:00:65:f9:9b:45:16:29:d0:80:c2:b4:
37:71:3e:b0:e1:9f:77:40:b0:ca:b7:12:58:43:ae:
1a:40:5b:e0:fa:a7:a5:bb:4a:37:b2:64:6f:57:3e:
ec:87:28:6d:92:73:e5:07:8a:63:d8:92:d5:a3:06:
f8:74:53:f1:50:1b:bb:81:52:aa:0f:62:6d:f0:96:
37:d6:9b:13:f6:c0:a5:0d:95:32:95:ff:c5:1a:5d:
ab:cf:7d:4c:62:09:6e:3d:cf:1d:1d:7e:5c:5c:f8:
b1:6b:81:06:ba:ff:8f:5a:28:e0:e7:96:fd:62:35:
9c:6f:b4:ca:54:4d:a7:cd:c4:e7:4a:05:a8:c3:97:
b1:6d:1e:56:8e:94:ee:56:f1:76:35:b8:93:ed:ca:
d6:89:f4:d3:b4:f4:8e:52:c4:79:46:ba:fc:46:a6:
3f:da:57:0e:f4:9d:bb:86:2a:8f:fa:7a:c4:22:31:
ce:61:11:99:6b:e8:c4:d1:5b:4a:cb:99:88:ed:e2:
f2:11:46:18:4e:14:18:6c:a4:e5:d8:b6:30:22:16:
fd:2d:89:58:ee:50:a3:db:1f:f8:01:d4:fd:19:51:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:73:D6:AD:7F:A5:14:37:BA:BB:F9:5E:8E:20:2D:B5:17:DF:B1
X509v3 Authority Key Identifier:
keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d3:0f:60:f8:77:88:50:c2:8b:58:ad:b4:cf:11:58:59:70:
f3:8d:dd:8f:33:5a:62:37:e2:39:22:70:a5:d9:3e:39:58:fb:
06:57:4e:e4:9f:39:d7:0c:82:8f:00:6c:4a:bb:f7:83:c2:08:
a1:b4:9a:a9:97:3f:c5:b4:7e:d3:23:84:5f:0d:b8:7d:b5:db:
8b:64:ab:96:8c:d0:56:22:c1:e7:68:de:d8:a7:c7:83:85:2a:
43:47:d6:8c:8f:19:7c:96:71:56:a7:09:56:d4:d4:de:dc:d9:
fb:fa:f1:be:3f:8d:11:b5:65:35:af:d8:cb:f6:4d:1a:de:af:
00:d2:ca:c8:5e:84:76:8c:33:ac:c4:d9:b8:50:cc:5e:00:41:
c4:6c:88:13:e5:da:f7:62:42:be:fb:a9:dd:bf:1a:72:b5:3a:
ae:d3:ba:1a:85:24:39:58:b0:7a:2e:54:a6:56:ff:ae:58:98:
e4:32:41:fe:02:9e:58:07:6f:99:91:54:90:ff:30:cf:ee:ae:
82:62:c5:9d:17:c5:b6:08:6d:d8:02:68:08:a8:b5:21:67:45:
24:44:bb:a7:ac:d2:6a:64:be:e5:95:d9:5b:e8:b4:cc:66:16:
01:45:da:ec:da:50:9b:b4:05:6b:fe:3e:98:2c:5b:93:91:e8:
94:75:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:44 2026 by rpki-client