
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json)
Hash identifier: uTH4ya1h/q4lsUK+RyCI9dz+KODYTuYqgSQUc7wfz2s=
Subject key identifier: C4:A4:88:EA:95:48:4A:8E:29:C0:2F:18:7A:90:59:33:EF:C3:9D:C4
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial: 0713
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
Manifest number: 070D
Signing time: Mon 02 Mar 2026 01:30:28 +0000
Manifest this update: Mon 02 Mar 2026 01:30:26 +0000
Manifest next update: Mon 09 Mar 2026 01:30:26 +0000
Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: 0yaNGWQEEls3wNtXha/Q0DRVmS5+J38tqwrfWPT3dcY=)
2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 5p6KcnLc05tJjviw0bQLNNvRQf/lT9uBBLbX63CSm5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Validity
Not Before: Mar 2 01:30:26 2026 GMT
Not After : Mar 9 01:30:26 2026 GMT
Subject: CN=69a4e834-a29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:b7:b0:b6:28:84:34:8b:cd:13:58:a4:95:
b7:64:35:c2:13:f1:86:0a:94:e2:0d:90:f3:49:77:
e5:9a:cb:0e:ce:e7:e9:d5:fc:f0:ad:db:e8:02:9d:
c8:3d:e3:30:31:23:16:3f:95:dc:8f:00:3e:9c:ee:
27:5f:1d:ad:7d:db:c1:a0:7a:57:9a:6a:33:ff:6a:
c2:55:52:79:a5:20:b9:0b:1b:bd:db:4a:51:31:7b:
5a:76:32:93:1f:c7:45:cd:ce:e0:09:d0:63:14:1b:
64:fc:76:a7:9a:4a:aa:c7:f8:ae:9a:01:fd:d5:4d:
58:f1:3d:b0:0a:e3:ff:51:39:dc:bc:57:d0:a6:fe:
0b:c0:db:7f:4b:99:a4:41:c2:be:8d:e1:91:8d:e7:
e0:8d:ed:ee:96:54:4a:f2:a1:f2:77:45:51:d7:49:
0f:22:94:e7:f8:77:4c:65:a1:d1:c0:98:7d:3b:c0:
49:19:43:71:25:75:e2:a6:29:ac:c0:7e:d2:78:a8:
72:f6:d5:d7:c0:aa:26:6d:ca:81:6d:95:05:dc:fd:
43:cf:60:dc:8f:42:89:56:38:ef:ab:15:20:cc:d6:
e3:d7:01:45:53:de:ab:10:e2:75:1f:7a:6e:52:55:
8e:4e:37:e7:9c:e1:40:c9:5f:5d:be:5d:b4:aa:b1:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:88:EA:95:48:4A:8E:29:C0:2F:18:7A:90:59:33:EF:C3:9D:C4
X509v3 Authority Key Identifier:
keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:2a:98:a5:b9:70:52:ae:2c:cb:27:bb:3d:e6:46:d1:aa:
76:57:f6:51:a2:3e:97:18:5f:e4:63:b8:73:b9:73:26:52:84:
a1:61:d5:84:a2:e7:ba:e6:9c:f5:b7:d1:b0:b2:41:b5:ed:3e:
59:76:3e:4e:ef:b4:25:35:24:80:e7:b1:74:7c:66:bc:1a:3c:
1c:d8:e2:8a:4b:52:6a:6d:84:2a:fe:32:22:b4:cd:7d:36:8a:
dd:47:83:5f:d3:5a:a9:ab:74:c8:35:65:fa:ad:84:17:e6:88:
d4:8d:78:0c:4c:ca:a8:71:25:dd:44:1b:e0:95:c5:53:b4:e4:
3e:1e:88:7d:2d:dd:0b:96:da:e2:e4:b5:88:6f:cc:e1:e3:ee:
b8:16:dd:e4:d5:70:ea:4b:6c:f8:76:c7:d6:4b:74:d1:c7:a8:
3e:e3:fa:25:33:2a:49:ec:c8:00:6d:79:c0:41:b4:74:1c:02:
5c:1c:c5:84:9c:4f:42:55:d7:a4:b1:7e:38:0b:2d:94:e1:6a:
30:26:27:9b:31:5d:68:1e:7b:21:76:02:d1:ce:4d:87:86:ec:
19:67:72:ff:f3:1d:04:d6:6d:3f:32:a2:c1:a5:ea:86:55:e5:
02:33:e7:4b:37:1e:3d:9a:6e:4f:bc:b2:d2:94:30:80:ca:9d:
20:99:3b:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1
NTc5RUMwNjkwHhcNMjYwMzAyMDEzMDI2WhcNMjYwMzA5MDEzMDI2WjAYMRYwFAYD
VQQDEw02OWE0ZTgzNC1hMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3M+3sLYohDSLzRNYpJW3ZDXCE/GGCpTiDZDzSXflmssOzufp1fzwrdvoAp3I
PeMwMSMWP5XcjwA+nO4nXx2tfdvBoHpXmmoz/2rCVVJ5pSC5Cxu920pRMXtadjKT
H8dFzc7gCdBjFBtk/Hanmkqqx/iumgH91U1Y8T2wCuP/UTncvFfQpv4LwNt/S5mk
QcK+jeGRjefgje3ullRK8qHyd0VR10kPIpTn+HdMZaHRwJh9O8BJGUNxJXXipims
wH7SeKhy9tXXwKombcqBbZUF3P1Dz2Dcj0KJVjjvqxUgzNbj1wFFU96rEOJ1H3pu
UlWOTjfnnOFAyV9dvl20qrGs6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSkiOqV
SEqOKcAvGHqQWTPvw53EMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1
OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD
YUFaLVd2NUotdTlWZWV3R2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdskqmKW5cFKuLMsnuz3mRtGqdlf2UaI+lxhf5GO4c7lzJlKEoWHVhKLnuuac
9bfRsLJBte0+WXY+Tu+0JTUkgOexdHxmvBo8HNjiiktSam2EKv4yIrTNfTaK3UeD
X9Naqat0yDVl+q2EF+aI1I14DEzKqHEl3UQb4JXFU7TkPh6IfS3dC5ba4uS1iG/M
4ePuuBbd5NVw6kts+HbH1kt00ceoPuP6JTMqSezIAG15wEG0dBwCXBzFhJxPQlXX
pLF+OAstlOFqMCYnmzFdaB57IXYC0c5Nh4bsGWdy//MdBNZtPzKiwaXqhlXlAjPn
SzcePZpuT7yy0pQwgMqdIJk7mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:24 2026 by rpki-client