
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier: C5QMd+JPM3a2MJIblxDmiDZJK8bWfsntKvkz6PDUfEA=
Subject key identifier: 2D:91:11:55:51:4F:2E:91:CD:68:8F:05:2D:89:EC:4D:E0:08:D2:A1
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number: 1FEE
Signing time: Sun 01 Mar 2026 23:57:55 +0000
Manifest this update: Sun 01 Mar 2026 23:57:53 +0000
Manifest next update: Sun 08 Mar 2026 23:57:53 +0000
Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: DNmHwErTvvbapF4Ftj/+O5YO6T95XGaCl4ZZKwEg1UU=)
2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Validity
Not Before: Mar 1 23:57:53 2026 GMT
Not After : Mar 8 23:57:53 2026 GMT
Subject: CN=69a4d283-933a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:05:25:7f:9f:46:c2:94:06:4d:46:91:3f:
dd:2e:2a:ea:ba:ca:d5:90:b7:3c:bf:e4:66:ac:d8:
ce:1e:97:f5:1b:5e:30:f1:7f:4a:bd:ce:11:17:07:
6e:7d:30:bf:14:69:b6:d5:84:fd:27:90:37:7b:5c:
1d:12:e7:00:bb:64:91:96:cd:91:08:20:b2:6f:74:
e0:c0:25:5f:65:55:7d:da:9a:77:62:a9:12:91:cf:
94:6b:6a:fa:29:6a:fb:dd:45:38:55:15:59:6f:54:
e2:86:35:e9:ce:20:f6:72:cf:48:c7:4d:e6:c3:e2:
5f:19:66:88:10:29:ef:35:4a:23:cb:74:4b:f1:7a:
c6:8e:31:aa:8c:a9:c4:5f:15:42:ff:d5:9e:6d:da:
71:06:48:01:0a:0f:3a:12:40:5e:41:9d:37:77:7e:
06:08:cb:ac:6e:df:9a:4a:b4:c0:bf:26:0b:cc:2d:
30:b9:80:c8:3a:b4:29:19:f1:3e:28:a5:3b:66:f1:
05:c1:96:ed:93:f5:38:9e:95:ee:3c:bb:b0:d4:d2:
ab:41:7b:c1:56:3c:12:fa:af:b6:0f:18:e3:a5:83:
bd:56:6b:fa:d0:56:82:7b:14:ba:fe:56:8e:00:61:
99:a7:90:d9:ca:10:e8:cf:82:4c:46:82:3a:38:af:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:11:55:51:4F:2E:91:CD:68:8F:05:2D:89:EC:4D:E0:08:D2:A1
X509v3 Authority Key Identifier:
keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:e8:e5:d3:6f:1b:4a:46:43:69:88:64:d5:72:9a:74:1f:
4c:a1:8c:ec:0f:f1:ff:26:43:4c:63:fa:ea:87:51:7a:75:36:
b1:47:88:f2:d2:a4:62:2c:b8:39:72:75:d8:0d:03:c4:b3:14:
7c:e5:14:77:ee:34:48:71:a1:2d:8e:35:63:0d:5b:22:1e:5c:
4c:5e:5f:0a:3f:81:a3:df:36:4b:cd:2f:d2:28:0e:c8:74:ce:
83:f0:41:48:d3:31:f4:21:f8:42:c6:91:26:68:8a:c7:b4:c4:
04:69:34:cb:be:31:f9:21:54:f2:43:5d:e3:18:23:b9:1d:7f:
f5:e8:90:50:0d:9d:12:44:e6:9a:84:82:20:16:e6:81:94:86:
19:d9:bd:29:a0:08:ea:78:42:0f:dd:c8:a4:80:85:92:16:7b:
a6:cf:12:5c:e4:01:82:2a:72:2f:0f:e1:ab:2b:e9:a1:27:68:
ec:d8:3e:1b:d7:14:cd:57:ac:f4:b4:56:be:00:6c:55:5e:51:
e0:c3:e1:a0:6f:25:0b:2d:1c:a9:db:05:92:69:5b:bc:18:f6:
52:7f:f8:e1:3a:98:9e:c3:13:65:b9:0b:81:50:75:90:02:29:
94:a5:72:92:3f:9e:52:56:c8:68:74:55:35:ce:1a:9a:1a:be:
35:5d:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:21 2026 by rpki-client