
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: NrfTwa+J8g53YZQE0RQONnpniF1i6IYq19pTNdFzucA=
Subject key identifier: 9C:A6:A3:9F:D2:4E:95:38:26:A6:EA:80:A4:40:4A:1C:05:40:D8:B4
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 3536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 3523
Signing time: Sat 28 Feb 2026 15:18:40 +0000
Manifest this update: Sat 28 Feb 2026 15:18:39 +0000
Manifest next update: Sat 07 Mar 2026 15:18:39 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: LKUUEkk4ggHtX615sA50Z2VdVbJtYcQr7BZrPlJk1lQ=)
2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13622 (0x3536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: Feb 28 15:18:39 2026 GMT
Not After : Mar 7 15:18:39 2026 GMT
Subject: CN=69a30750-cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:93:17:5e:6c:82:51:73:12:9c:cc:cb:b9:
69:3b:90:d7:c0:da:ee:e5:f2:0e:8f:b4:4c:35:43:
1d:a6:83:7f:de:77:20:79:27:91:7d:d6:77:02:a4:
fb:f7:f7:3f:a0:89:21:24:e8:0d:fc:36:e3:bd:ae:
98:ed:f7:69:2e:76:74:15:ea:9a:c0:ab:c2:bd:44:
31:b5:8e:7b:78:50:3c:43:88:16:39:ed:c0:a2:2a:
15:3a:6f:a7:df:15:f1:15:a3:ed:6e:cc:b3:55:a9:
35:cd:ba:c6:79:36:d5:cf:48:bf:21:2f:43:34:ae:
cf:09:b5:a3:1f:a4:16:f5:68:75:0a:2d:66:e0:a0:
97:cf:17:0e:28:81:13:3c:7d:88:93:53:aa:2a:a8:
8b:0b:88:09:2e:03:26:c5:0a:45:d4:c9:81:5b:75:
27:07:51:e4:bb:b7:f6:72:f5:f9:27:cd:72:64:77:
b3:67:3c:55:a5:79:27:de:c2:b6:26:87:b2:1b:f4:
ce:51:59:da:9c:4b:2d:e9:72:a7:5f:83:07:b1:9c:
f5:07:84:3a:db:f4:00:4f:e7:b1:52:45:ea:b2:f8:
c9:71:3a:d0:c2:3a:b2:35:87:3c:34:22:5a:76:ee:
96:4d:74:dd:db:7e:85:c9:8a:6b:9b:f6:51:2b:86:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:A3:9F:D2:4E:95:38:26:A6:EA:80:A4:40:4A:1C:05:40:D8:B4
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:30:34:5f:38:c1:4b:a6:03:ca:23:29:9c:80:7a:6a:eb:
65:7f:4d:63:a5:ca:a5:b1:ef:02:26:ae:91:80:d3:b4:55:ce:
b3:46:1b:11:c3:7e:cc:7c:a2:9a:be:14:a7:4d:00:54:e9:54:
4a:a6:94:1b:a0:b8:1c:f2:d7:89:b4:b8:74:95:3c:52:00:d3:
4e:be:01:27:58:bf:5a:63:45:d8:77:d6:6a:2c:86:3c:b0:54:
02:c8:79:c6:df:86:f6:92:a2:54:14:ee:dc:69:51:74:48:99:
3b:59:06:04:77:d3:c3:93:68:46:b3:24:03:0e:1a:ad:88:49:
d2:9c:ec:3f:8b:7e:9d:61:eb:93:e9:95:13:75:58:1d:5c:00:
0c:4d:5b:c1:8a:79:fa:aa:a0:b2:32:b8:9d:e0:a1:ad:d1:29:
f8:b5:41:ff:a6:52:37:bd:57:a8:53:bd:75:15:e6:f6:2f:0b:
70:e9:43:32:15:bf:c4:48:6b:55:60:54:07:1b:2d:b1:94:32:
42:e2:00:30:1f:c9:d7:04:3c:32:cb:22:6e:30:95:29:44:82:
23:03:f3:56:67:87:16:f9:a1:e7:7d:21:af:9d:fb:64:6a:ca:
15:ac:1b:e9:3a:08:d4:73:3a:64:51:2e:ab:d9:5d:bd:fd:0b:
83:37:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:24 2026 by rpki-client