
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier: vbokhzd5tHsUUcYwtpgy+uRSdTu4uWoX6DauFm/gQB4=
Subject key identifier: FC:5F:68:FE:53:F5:EE:3D:1F:B4:67:0E:03:21:4B:52:DA:91:F6:5F
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number: 0260
Signing time: Fri 17 Apr 2026 01:57:28 +0000
Manifest this update: Fri 17 Apr 2026 01:57:27 +0000
Manifest next update: Fri 24 Apr 2026 01:57:27 +0000
Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: tNCfTa3FJh/smeuKb07QI3zuxLkl4uKXqEEXiUK5oDM=)
2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=)
3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=)
4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Validity
Not Before: Apr 17 01:57:27 2026 GMT
Not After : Apr 24 01:57:27 2026 GMT
Subject: CN=69e19388-02d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:59:fe:f2:c1:00:72:76:c3:84:0b:5f:13:
d1:c5:be:64:12:2f:28:0f:0b:77:42:af:72:8c:5c:
45:da:39:8a:ba:24:18:87:07:51:58:15:5d:ec:10:
db:d2:1e:ff:b5:41:23:01:92:76:77:c6:dc:c5:3b:
1e:a0:50:aa:08:fb:80:c4:9c:6d:d3:4f:24:e8:93:
70:cd:cd:a1:05:c5:df:ce:a0:6e:66:f8:43:b9:2b:
2e:52:17:87:6d:a8:0f:b0:21:98:c2:07:a9:6c:26:
bf:41:c7:e6:98:51:25:cc:a7:1d:b0:c9:8a:9f:ea:
0f:4f:36:c3:57:54:32:9e:f0:75:4e:e8:f4:58:88:
46:26:50:93:d8:bf:fd:8c:93:4f:1b:62:ec:79:98:
44:c8:14:7c:96:ac:4d:b0:8d:67:80:8a:96:51:d5:
81:d0:78:ec:76:68:00:9f:d5:77:e6:3c:74:23:96:
2b:89:03:fc:df:3a:17:63:7a:c9:89:cc:7b:9a:e6:
5e:7a:e2:67:be:91:01:74:72:95:0e:fb:07:43:82:
9f:c5:91:c5:26:89:74:24:70:30:a2:70:46:14:24:
0e:60:28:89:9b:31:31:35:b0:73:2a:b0:52:05:62:
ca:78:59:46:75:c3:c9:7e:df:c6:3f:a2:47:2c:0c:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:68:FE:53:F5:EE:3D:1F:B4:67:0E:03:21:4B:52:DA:91:F6:5F
X509v3 Authority Key Identifier:
keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:b0:74:c7:49:09:c7:cf:b8:37:3b:c2:98:b4:1a:37:ce:
5b:3a:f2:32:01:80:0e:d8:19:a8:6f:74:b7:7a:01:9b:5f:46:
68:66:21:02:ba:77:c0:e8:58:3c:d0:81:96:4a:c4:5a:86:5c:
b3:50:61:27:ab:e1:cd:ff:f2:87:d3:04:f1:ed:c3:8c:81:31:
d2:94:83:ac:a2:12:ca:57:d6:27:c5:ca:9c:cb:83:cd:04:0d:
f1:2c:6f:bc:95:55:10:c1:2e:d7:53:88:60:5a:b9:67:e9:19:
68:2e:d2:5f:d0:39:d9:16:a2:2c:8b:07:61:00:c0:a6:02:7b:
1b:92:17:c2:09:46:fa:c5:d4:46:6d:2f:d1:0f:d2:bc:db:3f:
04:75:1a:ca:92:3a:1c:de:fa:76:e9:ae:3e:90:a7:2d:4c:17:
2a:86:03:40:ee:f6:e3:08:29:29:c7:cf:b8:f2:63:50:81:17:
7a:df:75:99:71:48:87:74:41:b3:11:3a:00:73:3d:55:05:c0:
1f:9c:fe:02:75:9d:e2:19:ab:3d:55:59:0f:42:a3:b2:4d:84:
d8:17:9d:e6:14:95:d9:0a:aa:ab:47:1c:44:cf:20:ae:71:ff:
44:7c:ce:ab:13:f7:b5:4f:3f:e9:7c:ab:df:4a:5e:02:7c:e0:
7c:92:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:12:14 2026 by rpki-client