
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier: rXBQb2Wdk4ZwNqE4S/iHRPDSdLbKQ6rqpcaE6k9txcU=
Subject key identifier: 2A:4B:14:B5:66:51:81:55:46:10:91:04:A5:85:0D:AE:FA:89:81:60
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number: 0221
Signing time: Fri 17 Apr 2026 02:32:44 +0000
Manifest this update: Fri 17 Apr 2026 02:32:44 +0000
Manifest next update: Fri 24 Apr 2026 02:32:44 +0000
Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: deOXQITxzidYWCk1MpXP4xeeOMDsVCwPs4RdHL04Qf8=)
2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: mVpGi+39/Ahcjv+ekq0PpEG9jvYwKXVC4QVppE2Htr8=)
3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: oB5JBkNKyPLzP2gSGsWtUBpF7gy+qEDEj6Z9Is4zAyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Apr 17 02:32:44 2026 GMT
Not After : Apr 24 02:32:44 2026 GMT
Subject: CN=69e19bcc-c0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:08:34:76:1b:c9:06:c1:15:2b:62:98:ac:
4a:fb:ce:c5:ec:8a:74:b4:ae:a8:0a:1f:8a:e4:3d:
dc:9b:75:f9:b9:a0:49:7d:43:6d:9b:bb:e9:0c:8e:
d1:a1:8b:72:e1:25:f5:ad:c0:ca:d3:2c:b3:7b:13:
5a:7f:f5:8f:bb:5d:10:c9:da:08:1e:4e:0f:62:d4:
9a:ec:c2:68:57:94:e5:74:05:2b:d9:7f:f0:8b:dc:
18:cc:5e:93:ca:06:00:8a:10:01:5b:61:0e:53:90:
e5:d6:18:d9:8f:c4:60:16:fe:5c:56:f0:c4:44:6a:
3a:a1:09:ac:49:0c:9a:77:f3:54:ae:fe:6f:da:2f:
f4:4c:e4:1f:bb:de:e8:d7:d0:32:a7:43:55:e8:85:
39:2a:50:a3:44:5e:7b:d3:f5:f4:6b:fb:07:47:7c:
08:93:24:b9:78:16:ee:42:09:3a:a0:8b:e4:40:20:
4d:38:f4:3c:83:2b:0a:bd:94:4d:8c:59:30:ed:61:
84:77:a4:a9:50:ac:6b:98:45:4e:28:bf:75:93:60:
2a:d4:17:5b:5a:dc:6b:a0:97:15:4d:00:3d:0e:ac:
18:a4:b4:33:be:51:e6:d1:24:4e:a7:97:ba:b0:32:
ef:a1:ac:ff:e4:7d:82:7c:41:ad:30:b1:8c:70:f7:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:14:B5:66:51:81:55:46:10:91:04:A5:85:0D:AE:FA:89:81:60
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3e:2a:93:74:4f:11:cd:12:41:b7:31:df:3f:2b:62:6a:18:
22:d5:57:29:70:7a:92:21:58:00:6d:40:f2:2a:57:33:5d:5e:
5a:66:e9:3a:18:64:5a:56:cd:17:01:aa:02:e0:0a:b9:2c:37:
63:17:69:17:20:77:25:fb:9a:14:c8:65:b2:59:59:9e:a9:aa:
d2:72:e2:bb:e7:47:d6:fe:bc:19:99:be:bd:c8:b1:9e:2f:6e:
30:9b:f9:15:2d:e3:82:63:79:93:51:d0:80:ab:0c:61:36:fb:
a0:f6:e9:98:b8:e7:18:f6:84:a7:ab:f3:9e:48:30:03:af:ce:
07:b9:9d:5d:22:38:c1:90:4c:8d:80:18:54:23:21:bd:3b:79:
84:fa:8e:a5:38:57:ac:1b:af:ed:16:9d:64:f7:5a:cd:b2:e8:
e0:96:f8:ae:65:06:12:5a:60:b6:30:f5:a1:ac:0e:cf:37:46:
c6:82:c9:2c:0c:f1:37:be:e7:cf:61:6f:72:1a:4f:1e:fe:84:
42:19:cc:dd:7e:11:fc:16:f8:74:23:d4:c9:61:e0:ee:82:11:
d6:0b:d2:48:79:08:89:90:af:a0:32:d3:01:03:1a:59:db:1d:
ee:45:0b:27:4f:8e:64:16:7f:a1:f2:d7:20:d1:d9:68:24:55:
8f:72:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:15 2026 by rpki-client