
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json)
Hash identifier: wrzIPJmQgJZrgTBKQDuTg1+F/aJaCQKvc3FafEs3Ycg=
Subject key identifier: 3B:2B:EF:CA:DC:A6:15:F4:E8:EB:B9:9B:92:A1:49:3B:5C:96:43:3F
Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Certificate serial: 3549
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
Manifest number: 352B
Signing time: Sat 28 Feb 2026 15:16:09 +0000
Manifest this update: Sat 28 Feb 2026 15:16:08 +0000
Manifest next update: Sat 07 Mar 2026 15:16:08 +0000
Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: zRgTaaBaVE7gYe9ZT/iGpT+5lnwaaadakaXBdNRMRxo=)
2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 6cC6tQeQd87kGRdq2QumL1i69ExtEnVSm6iU0IQLUOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13641 (0x3549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Validity
Not Before: Feb 28 15:16:08 2026 GMT
Not After : Mar 7 15:16:08 2026 GMT
Subject: CN=69a306b9-0534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:de:9b:ff:93:9c:b4:30:b3:8c:1a:10:6a:
4f:8a:bb:e7:52:29:63:b3:a2:2c:96:a1:f1:fb:cd:
71:69:e5:51:56:15:7e:db:94:33:d7:ff:e9:47:f0:
3b:7e:8c:f3:c9:b1:b4:87:ee:d2:4d:98:f3:c6:0b:
26:7f:62:7d:54:a3:97:73:0e:54:95:65:b2:b0:c0:
99:e4:52:64:15:80:74:ea:ae:74:14:1b:4a:37:df:
cd:ac:7c:8c:31:32:73:8c:a5:d2:af:5a:da:d6:9b:
f1:6f:53:8f:4a:ab:8f:fa:0b:ba:ad:ad:48:a0:41:
ec:8b:be:9e:59:83:13:f0:fd:79:a7:84:46:91:e2:
b3:2e:39:aa:fe:50:fc:eb:2c:ab:4c:6c:2b:58:eb:
27:4e:e5:fa:e1:9e:50:56:78:5b:7d:14:09:61:8f:
27:87:78:a6:88:ea:22:d9:74:ba:5e:a7:a3:71:f2:
7e:71:b5:98:0d:cc:07:92:7d:63:cc:e8:3c:7a:11:
c0:07:c4:64:3f:8a:37:1f:06:c1:7e:6d:d1:a6:38:
66:3a:5e:3f:a2:a1:8d:d9:f7:a9:87:55:43:b7:d9:
ac:3c:aa:30:d5:12:a6:68:27:57:cc:d4:94:de:fd:
02:b3:c9:93:28:5c:f8:06:b7:dd:d7:b8:2f:34:3d:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:EF:CA:DC:A6:15:F4:E8:EB:B9:9B:92:A1:49:3B:5C:96:43:3F
X509v3 Authority Key Identifier:
keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:3d:32:f9:6a:c7:15:db:8a:d6:8e:ff:08:7a:77:b0:c7:
af:f6:00:35:3b:55:20:be:99:fe:cc:8a:d5:0c:29:d4:0f:fe:
b1:c5:d4:fd:bc:4d:a0:a8:79:b4:06:99:9e:90:d4:34:38:07:
ff:ac:cc:e1:a1:29:64:92:67:30:b1:e4:4d:4d:e8:cd:b5:9b:
70:ef:85:d0:99:1a:8c:2d:5f:40:e6:96:fa:b4:e1:98:63:9d:
52:fd:a9:8a:45:ef:c5:1c:67:d4:c9:f2:21:9a:90:bd:03:ff:
35:9a:8d:b9:5f:4c:32:f4:48:54:18:71:6d:e1:82:8f:d2:7d:
fc:15:5a:ad:a1:b6:38:6f:54:e2:1b:3b:46:7a:90:b9:d3:d7:
2c:ca:ea:b0:eb:78:28:6b:68:c7:33:f8:a4:27:e7:02:60:ec:
0c:76:dc:44:ad:11:46:66:9b:2b:72:f1:0a:26:6d:6f:1e:d3:
8d:c7:d4:d3:72:c6:0a:ca:05:f3:a1:1a:1a:0d:d2:38:59:3a:
62:f1:52:a8:f7:a1:1d:82:8a:57:7b:78:4a:0b:11:81:2d:88:
ab:cc:bf:04:28:33:f3:ea:a5:30:2b:bb:68:a4:39:cf:6b:13:
b9:6c:37:de:51:39:e7:fd:66:01:c4:6d:4f:22:d7:e8:24:70:
80:fe:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:09 2026 by rpki-client