
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File: JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier: ZtluR5SlAYrPaaXFAUf6p8nDgj3JbC5+Q3WU8qxC76w=
Subject key identifier: 10:09:56:0E:93:68:77:38:29:B0:AC:80:78:88:D5:3C:3E:6D:76:67
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer: /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number: 11
Signing time: Sun 01 Mar 2026 10:33:53 +0000
Manifest this update: Sun 01 Mar 2026 10:33:53 +0000
Manifest next update: Sun 08 Mar 2026 10:33:53 +0000
Files and hashes: 1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: GaCw4VprvPUJN5BGPIlyE59/rMABuUnJjJM/Yo/rCME=)
2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: JPKaHD9g59Drip87bbN1VDuP/rPfzOVx/tfNDNfE3/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Validity
Not Before: Mar 1 10:33:53 2026 GMT
Not After : Mar 8 10:33:53 2026 GMT
Subject: CN=69a41611-01f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:c8:03:14:b7:38:05:19:eb:cd:f2:f0:df:
4f:4b:2b:9a:62:06:ad:d1:b7:44:38:23:42:4a:d0:
ac:9f:38:91:dc:d8:0c:11:4b:50:1a:3a:9a:ed:f0:
e4:96:26:a5:b9:c1:c4:c8:a4:d3:25:58:45:db:af:
77:36:de:a1:d4:45:b9:a7:8e:8b:6b:37:ba:c7:0d:
e9:15:f9:c9:c2:19:06:88:7c:15:5c:08:98:2f:3a:
87:28:27:cf:73:22:8f:99:c0:ca:27:29:a7:38:2a:
88:c6:6e:e8:6f:61:cd:5d:00:27:c0:52:53:45:57:
00:a9:ab:d0:c4:ba:dd:a9:8b:01:2a:30:33:2e:37:
a1:09:23:01:08:9a:11:3a:6c:1d:c4:b3:02:5c:61:
63:b0:8e:7d:81:9d:90:b8:cf:29:67:dc:73:20:1c:
5a:d0:13:38:5a:70:7d:9a:65:b1:46:45:ab:45:a7:
06:88:58:e6:f2:12:a7:23:d2:b0:e9:68:bd:95:42:
5a:b3:f5:d2:92:64:71:7b:b3:99:74:42:1c:e4:ec:
57:31:12:19:0e:3e:53:22:b1:c6:e8:de:9f:b4:f6:
e6:81:aa:31:2f:f0:68:a5:63:59:01:e6:9a:a0:b8:
19:72:3c:3a:74:b0:a9:d9:17:58:41:5b:b6:ec:81:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:56:0E:93:68:77:38:29:B0:AC:80:78:88:D5:3C:3E:6D:76:67
X509v3 Authority Key Identifier:
keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:20:bb:0b:1a:02:2f:88:b3:49:c8:f2:b5:3a:f1:5b:cc:79:
b7:d8:f6:dd:6d:cc:49:80:05:ac:e8:db:d1:30:7a:d6:8c:5a:
bb:27:f7:cd:fa:4d:cb:90:86:fa:64:07:17:4a:2e:8a:d8:63:
4f:48:f1:d2:ed:17:fa:19:ed:31:66:b9:38:0c:96:33:d9:a4:
72:22:5e:35:a6:60:e1:78:68:fc:83:1b:af:e7:0b:a1:67:a8:
52:01:4e:6f:5a:af:c4:a9:3c:ab:0e:cf:2a:ec:ab:e9:be:7a:
e3:d8:ce:50:5c:df:ad:47:ab:2b:0b:72:22:f2:64:05:73:ed:
31:24:8a:61:f2:9e:a2:fe:4e:62:b9:7a:8d:98:69:ed:37:77:
1d:81:f1:b4:42:bf:f5:a8:d3:80:6b:43:6a:9e:e7:60:46:76:
48:10:3d:23:4e:f2:84:eb:00:ec:d1:33:74:0b:b8:11:ac:77:
39:56:fd:f0:82:4e:43:81:91:35:21:1e:33:4c:24:eb:59:b8:
c3:b4:d7:cc:54:8e:b3:9c:db:d3:2a:52:ad:b0:a9:8c:70:e0:
68:30:b3:ca:84:4c:17:27:c6:71:2f:60:fe:06:67:cf:e4:73:
73:f3:ce:6c:d8:71:97:98:96:14:f1:5a:1f:42:10:5d:02:b9:
31:e6:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:01 2026 by rpki-client