
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier: +xL4gjadkBJDgGhJW8niN8skLPvPP6j2B6C5xRWxnNI=
Subject key identifier: C5:C5:1D:F1:2F:BC:D8:D0:94:71:04:5A:24:81:AC:24:FB:BE:BE:CA
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number: 0246
Signing time: Sun 01 Mar 2026 03:06:31 +0000
Manifest this update: Sun 01 Mar 2026 03:06:30 +0000
Manifest next update: Sun 08 Mar 2026 03:06:30 +0000
Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: i4BKZq1xSp9xoArbk03zIgKfPs5m8vkbGkBUyayDq14=)
2: 660CF80498C711ED81343D33C4F9AE02.roa (hash: uheRD5R108rfOXweynaljqfwmSw850yqoXx0a1F97Fw=)
3: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 9jnw1aARjHyF52AZmLzz1KZPU/gVKpTI8tsdq5qbfSk=)
4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: /wwDND7QccrcqJxhHF46a4yMNxr2Ty/mu+4DhWd/iqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Validity
Not Before: Mar 1 03:06:30 2026 GMT
Not After : Mar 8 03:06:30 2026 GMT
Subject: CN=69a3ad37-f9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:07:3f:33:b4:61:f3:00:29:ce:5d:31:7c:
81:58:b6:01:8d:5b:ba:24:05:58:f0:9f:d0:76:ad:
f5:9f:a5:23:99:5f:82:6a:a7:65:90:89:01:dd:72:
ad:59:80:22:3d:94:fe:41:cf:e2:ae:66:0c:b2:86:
40:67:74:67:02:83:3e:bc:a1:e6:58:03:f4:79:c9:
b4:36:08:14:0c:2c:a7:9c:34:ff:ee:82:32:86:4e:
d0:7e:e4:d1:1e:e0:14:93:fe:91:f7:25:34:23:eb:
3d:d5:0c:6d:df:a1:32:ba:99:e3:9a:53:5c:b1:92:
31:18:2c:50:5d:41:93:0a:f3:b3:dc:fd:f9:65:38:
11:1d:d0:0a:bb:87:5a:cb:b6:a4:fb:fb:3e:b3:66:
13:d2:52:71:2f:62:f4:37:23:5c:5f:5d:d5:65:83:
fc:8a:80:75:25:1f:6d:1e:95:f0:92:6a:cb:f3:6b:
7a:4a:24:70:c4:73:ce:e7:26:e2:de:7e:b2:6d:8d:
6a:91:07:df:14:8a:81:ad:7c:38:92:62:f0:a9:e7:
e4:c5:24:07:04:d5:8d:ce:9c:23:d2:f9:f1:dc:01:
69:88:69:11:f8:80:39:96:ee:84:0f:10:79:0a:10:
09:62:48:bf:fc:36:d3:10:b6:99:72:23:27:16:7e:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:1D:F1:2F:BC:D8:D0:94:71:04:5A:24:81:AC:24:FB:BE:BE:CA
X509v3 Authority Key Identifier:
keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:11:ed:df:12:10:1e:0e:f9:0c:52:6b:4a:78:b2:2b:7b:15:
2d:7e:a0:b8:40:14:60:42:19:a8:39:2b:82:b9:0f:36:93:c6:
24:5b:f0:9e:25:ce:24:43:fb:b3:79:79:5b:a2:00:5f:20:c9:
ac:e3:ca:2c:75:7a:55:42:d5:23:c2:f8:58:bf:06:0f:ac:82:
6a:93:90:5b:63:47:2f:48:14:82:2f:4d:51:9e:26:bc:23:40:
71:8c:c4:dc:7e:ad:26:33:92:cc:c4:67:7b:76:49:36:dd:09:
56:3e:95:dd:00:96:ca:5f:b2:b9:30:e1:a7:3e:68:a3:38:47:
aa:6c:d1:45:6d:44:e3:fa:c3:5c:1f:fb:cb:bc:79:6e:6a:31:
f7:ef:b8:02:be:36:67:81:b0:e4:ca:eb:c6:76:3a:a9:1d:1b:
9d:13:c6:b7:1e:2a:53:73:fb:4f:b4:61:65:2d:b1:85:54:65:
75:93:3a:f9:7e:75:8a:2d:7d:f6:50:90:60:d6:3b:a1:71:12:
e1:d9:70:d5:88:7c:d4:74:1f:12:f4:4d:00:cd:91:56:e3:6d:
34:66:14:4b:27:15:d7:60:ad:95:7c:a7:ea:c9:cc:f9:cc:3b:
25:78:53:ef:96:bc:db:7c:27:ce:ea:a1:af:bb:06:4d:58:64:
b3:b5:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:34 2026 by rpki-client