
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier: ncQbtkWw7CQ1scoi51rZ1G4GwNQeT/p5OkuoH6ntpv4=
Subject key identifier: 51:E9:FB:2D:3D:21:18:53:40:BF:41:A6:10:47:CC:94:8F:43:F7:3C
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial: 0486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number: 0480
Signing time: Thu 16 Apr 2026 23:57:06 +0000
Manifest this update: Thu 16 Apr 2026 23:57:05 +0000
Manifest next update: Thu 23 Apr 2026 23:57:05 +0000
Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: x6xkXX0hDIVXVs1EFIRYGrbNsYu77jMYLVS7q7qaZak=)
2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: ISYvVSKYiERQAYBzI/jF083BOrfksWj3XaooDHkbCsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Validity
Not Before: Apr 16 23:57:05 2026 GMT
Not After : Apr 23 23:57:05 2026 GMT
Subject: CN=69e17751-a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:fc:f1:d7:79:d8:0b:bf:40:51:19:f1:8b:
f3:77:70:76:49:79:1a:2c:02:54:93:f2:a6:70:4d:
fb:25:12:60:00:db:8f:ca:f7:fb:52:a9:42:d4:98:
2f:a1:c6:52:d4:06:bd:8a:91:f8:4a:97:49:99:6f:
dd:52:5b:09:70:61:8d:a9:3a:72:a5:6b:1d:08:cd:
2a:0e:c2:70:e9:96:57:c2:18:37:1c:cc:e6:12:45:
90:6a:ef:c1:89:d5:76:81:41:e8:99:58:07:d4:19:
c9:1a:96:02:ba:2f:61:8b:4e:f9:2b:a2:c8:80:5d:
cc:a3:ab:b3:06:a5:0a:7f:72:e2:b8:06:e6:ab:77:
17:14:04:45:9c:88:f6:e9:b5:6e:6e:a2:10:8c:fb:
63:fd:32:db:3b:5d:51:bf:60:6f:8e:76:7b:5a:d1:
41:72:e0:db:79:8d:8c:90:d4:ab:1b:36:39:41:c8:
51:d2:53:7f:01:11:13:ca:f9:df:b9:f2:73:e3:ac:
9b:58:ed:cd:3f:14:de:c1:9f:a3:14:ce:4b:60:04:
98:89:67:e1:53:9b:ce:e1:70:32:aa:a9:10:6b:d9:
d9:e4:3d:90:4d:15:7a:ba:e4:26:eb:a9:1c:4f:07:
c4:c3:c0:c1:60:fa:90:42:eb:4a:54:34:1b:37:c2:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:FB:2D:3D:21:18:53:40:BF:41:A6:10:47:CC:94:8F:43:F7:3C
X509v3 Authority Key Identifier:
keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:e4:bd:9d:57:4e:13:ac:78:7b:fb:73:67:3e:fe:d1:d0:62:
d7:9d:01:33:ae:cc:9b:f5:69:c4:a8:f5:53:6e:b9:d2:ad:93:
2a:d3:41:d7:6b:88:68:cd:6c:33:ab:11:4d:8b:41:8c:85:55:
d4:f5:96:f9:d0:50:42:df:9c:a5:72:05:f0:a2:89:e4:49:fc:
96:56:a6:d0:6c:c5:ab:37:1c:cb:c5:8a:e9:29:ee:82:ea:37:
f6:a3:c8:0b:77:0b:0b:48:d4:ae:9a:b9:db:3e:9f:cd:2e:60:
3c:5f:77:d1:bd:22:7e:b2:96:b4:f9:da:fd:7d:fc:1b:44:ac:
72:ee:6d:4a:06:5e:e6:88:ec:0d:de:ec:d7:e2:bc:e2:b9:d1:
0e:52:cf:03:21:1d:40:89:63:f7:7c:55:26:87:da:92:95:77:
ae:80:4d:ff:dd:ab:70:d3:bc:17:a6:42:f6:a8:c9:52:4e:33:
de:6b:7d:27:7b:d3:cc:a0:bd:63:ab:85:1d:d4:73:04:e4:7a:
26:28:08:ac:7e:b3:73:cb:a3:13:b6:41:92:be:3e:b3:be:0b:
65:3f:5b:9c:d9:0e:14:67:ce:67:73:b1:87:aa:12:ba:1e:38:
d4:3b:8e:ba:b9:72:9e:1e:02:04:6e:a4:03:81:76:49:67:7e:
15:0b:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:24 2026 by rpki-client