
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier: fywMxtN1U+iSpWbI4wwbKfhEKzb9kUzzMo5Vv2+fqWw=
Subject key identifier: 1F:C9:66:2E:BC:CD:4C:ED:B8:C0:30:6F:F2:C4:61:B5:D5:D2:60:59
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial: 0454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number: 0445
Signing time: Sun 01 Mar 2026 01:04:17 +0000
Manifest this update: Sun 01 Mar 2026 01:04:17 +0000
Manifest next update: Sun 08 Mar 2026 01:04:17 +0000
Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: wqvDS1IoEJGaSQg7Dszu6NhINANTXpKGhpNa28o5C0I=)
2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: OQIkbwlCViwSOj9dfBW5VkaYDNYnAz/ZF6UE1oh8y0o=)
3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: XHc1dhpX7haJHAKy33sEPcQZqIDszCFHxQHHfnH+Its=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Validity
Not Before: Mar 1 01:04:17 2026 GMT
Not After : Mar 8 01:04:17 2026 GMT
Subject: CN=69a39091-857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:77:e7:ac:4c:eb:e4:14:54:b8:5a:02:6c:
2c:fb:8e:06:13:bf:ca:3f:12:bd:ab:93:22:76:6c:
29:4e:77:b1:44:0d:9d:fc:a6:ba:da:4d:7e:8d:7b:
4c:67:99:64:5c:05:71:b0:f2:22:c5:53:55:04:97:
bd:57:13:01:9e:13:29:8a:f6:03:e6:b7:ec:e7:a7:
c3:4c:97:14:f9:24:cf:0b:16:ab:7b:89:35:cd:29:
f0:49:f4:5a:8e:4a:d6:3e:c3:d0:db:1a:1f:0c:30:
56:a7:2f:50:cb:15:a3:ef:92:4a:42:d7:0d:50:cf:
99:b0:fb:27:49:27:ef:1f:21:56:b2:1d:f9:ee:1e:
10:c5:a9:a5:71:6d:a5:29:a8:5c:3b:d7:fc:8f:2a:
d3:10:9d:a8:cf:18:2c:cb:0d:56:28:17:7c:01:e6:
60:6d:f4:1b:ce:26:7e:bf:96:72:2d:56:b4:e5:f8:
80:46:f3:12:ad:1d:03:ca:64:9e:3f:cf:a4:f1:65:
a5:5a:5a:bc:4f:ec:7f:be:57:61:54:7e:05:ac:39:
ca:e4:75:10:73:90:57:8b:d3:56:6d:3d:82:e4:82:
c9:2d:b0:99:36:67:69:60:fc:51:12:98:74:d5:cf:
b1:ec:6d:5c:d1:2c:4d:9f:19:ad:6c:f4:52:fd:a8:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:66:2E:BC:CD:4C:ED:B8:C0:30:6F:F2:C4:61:B5:D5:D2:60:59
X509v3 Authority Key Identifier:
keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:58:87:b7:d9:7c:60:67:0a:b6:5e:5d:53:1c:8f:37:99:
d1:80:f5:c9:6e:c1:03:7b:40:d8:fa:67:25:ae:e3:3f:8b:2b:
c1:8f:d4:36:82:dd:6b:b1:15:e6:a2:5a:5c:32:f5:73:f2:f9:
64:d0:76:22:34:11:83:64:d0:2c:43:f9:87:6d:fa:35:7a:ea:
d9:5e:e6:b5:1e:02:a5:6c:d1:85:c6:f2:3c:53:97:71:74:e1:
a2:69:81:ac:65:ec:18:60:fb:25:5c:0a:80:72:04:94:ce:f1:
8f:29:f6:18:ee:66:f0:37:de:c0:cf:a1:d4:e1:4a:32:46:6d:
b3:73:b8:d1:b6:94:a3:1e:ca:41:ee:12:90:0b:86:30:f2:6d:
d1:a3:e6:3b:bd:21:f8:f9:87:06:23:d6:1e:72:33:b0:76:09:
7d:ab:e7:df:de:d8:0c:14:49:e4:93:80:c8:d2:ff:8d:c4:72:
bf:07:6f:db:72:7d:f5:e6:f0:88:0c:94:c8:8d:0d:d7:e1:a8:
4c:bd:b1:e8:d0:86:25:07:60:ca:a7:e0:34:04:c6:4f:cb:6b:
0f:1b:49:fe:19:18:8d:8a:9d:08:e2:98:14:88:de:f5:81:07:
31:89:86:97:78:7c:81:18:eb:21:94:24:04:8f:8e:56:1a:53:
08:79:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:50 2026 by rpki-client