
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier: FAHPWWNRAzBOxLUSzIGp5YO8VsTU++iFo86S5Zw4unI=
Subject key identifier: D1:AF:8F:9D:18:B0:91:20:79:71:60:93:0A:2E:63:BB:ED:7B:FD:35
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number: 72
Signing time: Sun 01 Mar 2026 09:13:56 +0000
Manifest this update: Sun 01 Mar 2026 09:13:56 +0000
Manifest next update: Sun 08 Mar 2026 09:13:56 +0000
Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: yVoc8MpJ5k0yYVJxTkiZr9Z0Zf6EZd/BhvaXuQj4TfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Validity
Not Before: Mar 1 09:13:56 2026 GMT
Not After : Mar 8 09:13:56 2026 GMT
Subject: CN=69a40354-6538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:34:f8:94:e9:22:7c:da:80:f6:06:33:a4:
3c:7a:e4:21:f5:73:a4:03:fe:4a:b4:7c:9f:b1:10:
9a:25:1d:01:92:16:3a:9a:ee:92:82:e8:17:19:36:
6f:89:5e:06:d8:7f:86:2f:9b:ea:c5:44:b2:af:19:
db:66:cb:63:28:94:ac:ef:d2:02:cc:21:b1:0a:12:
17:1f:83:00:df:76:8f:f1:7a:dd:19:82:17:b8:d7:
b8:9a:82:be:14:2b:41:cc:5a:9f:01:be:12:a0:79:
22:db:e5:3f:90:fa:20:4e:ca:a0:01:13:aa:23:56:
67:ca:a3:23:86:c4:01:ef:c3:df:9e:78:73:bf:f4:
5a:22:eb:78:37:29:f7:c5:99:f8:2d:a0:5d:8e:61:
51:cd:49:4e:e5:b6:0b:f8:fe:14:17:3f:b6:80:43:
10:43:03:88:25:f1:17:5f:7b:8d:e0:93:f7:8a:cd:
2b:47:17:81:c2:da:6b:46:41:3d:b0:f8:cf:25:7c:
67:e4:10:37:d3:11:7d:69:33:2e:44:6d:ec:12:0e:
6e:23:b7:ce:d9:86:dd:f1:ac:e4:a1:6a:e9:50:5a:
db:8a:7c:96:9a:26:ec:a3:39:b2:75:dc:da:08:04:
a4:b8:79:a7:94:01:50:16:cc:45:9e:7b:d7:ab:33:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:8F:9D:18:B0:91:20:79:71:60:93:0A:2E:63:BB:ED:7B:FD:35
X509v3 Authority Key Identifier:
keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:db:85:08:10:31:fb:cc:a7:d9:0c:98:6b:47:c4:ed:ae:
fe:dd:f1:9c:28:b4:2f:e8:ae:8b:5a:c6:48:f1:60:0d:a6:c1:
26:7d:98:52:e2:80:1d:61:a3:90:6a:38:c4:fe:66:05:39:a7:
eb:b6:b2:b4:af:4b:1e:05:01:4c:f2:72:1a:49:18:2c:65:94:
30:88:b7:bc:fe:69:6e:56:76:bf:d2:78:17:79:a9:28:b7:2b:
89:72:90:be:71:d6:2f:37:1e:e5:45:88:42:fc:09:9a:2c:51:
a7:f5:b2:6c:9c:c2:13:d2:bf:df:7b:a7:fd:26:a1:cb:03:8f:
b5:ca:d5:62:6c:ea:f6:3a:fa:d1:56:36:02:26:2f:8e:dc:db:
35:7d:ce:8d:b4:e6:34:7a:4d:55:1a:01:75:8b:86:d7:97:d6:
e2:57:99:26:10:ec:bf:a3:8f:d3:0f:95:19:02:a0:7b:d6:a0:
23:7a:32:5b:4a:09:91:6c:1c:8a:07:98:69:36:a2:a8:c4:55:
08:89:f8:82:11:b6:e8:d9:8a:8e:a1:9e:22:32:a9:71:5a:d3:
ec:eb:d5:f4:7b:2f:12:10:c0:15:42:f1:ad:e1:62:ea:ae:71:
7e:f3:7f:db:8d:e3:79:9d:b3:8f:43:70:6e:96:37:d6:8e:29:
1b:26:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:04 2026 by rpki-client