
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: Xd9DIEvXtP+5ipBbel+rbb1xptmndEJhp4/hlFZboZQ=
Subject key identifier: A7:1A:FA:03:E3:57:43:34:63:C4:B2:21:02:E9:AF:07:5E:33:03:9D
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0C0B
Signing time: Thu 16 Apr 2026 18:44:39 +0000
Manifest this update: Thu 16 Apr 2026 18:44:39 +0000
Manifest next update: Thu 23 Apr 2026 18:44:39 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: aZTy4iiCSko1tXSafXoA5+b4tzDrjrdv5qs8orqN+s0=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Apr 16 18:44:39 2026 GMT
Not After : Apr 23 18:44:39 2026 GMT
Subject: CN=69e12e17-b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:59:5b:44:3d:92:ad:ad:b2:1c:44:72:e4:
d1:72:43:39:b9:3c:26:f2:65:c2:9c:16:d7:9d:9b:
e2:f7:14:ae:1b:82:f3:86:e8:7e:ac:71:75:78:56:
09:87:39:42:c5:72:e3:1d:79:72:63:c6:63:69:8c:
a5:a2:71:10:40:df:0e:13:df:e5:b9:3b:59:d6:26:
1b:64:53:45:81:da:58:56:90:06:9a:fb:48:27:5b:
0b:d1:81:d2:10:81:27:98:ca:6d:75:34:93:f7:a5:
4f:21:63:15:8d:41:67:0d:a5:bc:af:53:46:0d:1c:
95:c8:ec:a8:8c:d7:01:93:69:4a:22:2d:cd:1c:1f:
f7:0a:db:70:1a:3d:e9:11:f5:17:9a:ae:9a:1c:4b:
2b:93:14:4c:8a:ec:5f:8c:8c:bc:0e:63:dd:86:3e:
a5:55:3d:35:4b:c2:50:02:59:80:90:54:ad:a3:16:
89:aa:e5:bc:10:14:fa:00:70:9e:dc:14:95:36:62:
21:50:bb:b7:d8:22:59:71:5c:48:7e:bc:b2:c6:af:
c8:06:7e:11:b7:21:31:de:57:60:72:4a:51:23:c1:
8d:2f:a9:8a:96:f8:f8:87:8a:01:d5:13:63:e3:3e:
6e:d1:df:b3:45:72:83:32:d7:fc:fa:af:21:d3:89:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:FA:03:E3:57:43:34:63:C4:B2:21:02:E9:AF:07:5E:33:03:9D
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:73:16:c9:58:55:2d:a2:61:12:97:d6:85:84:d7:19:97:ca:
c1:21:48:25:10:f2:cf:76:5f:ba:77:9a:1f:95:7e:e9:57:2b:
f1:0a:3a:ae:d2:f9:71:5d:1d:4c:15:dc:ea:29:1b:be:72:1d:
5b:aa:b4:bc:cb:e4:9d:3c:76:b0:d3:14:c0:64:0e:9e:fd:50:
60:47:04:0a:8f:46:4a:ee:a7:5c:d2:a8:db:30:e6:e2:c7:1b:
cc:78:07:43:6d:af:d8:43:45:fe:6c:39:77:a3:4e:9d:9d:b5:
cd:d7:49:f7:7a:30:9a:e3:a0:e1:4f:c9:cd:9f:bc:24:87:8d:
a8:52:51:ca:95:5b:bf:0a:a5:39:ca:76:fc:96:f6:b4:f8:b1:
e2:4c:53:fb:5f:9e:83:53:17:05:b3:bd:2e:43:66:8a:24:cb:
7e:c9:e6:8b:39:8b:46:f5:32:87:d9:30:4d:2f:ee:67:1d:a8:
f5:2c:68:22:a8:8d:1b:ba:38:03:be:b6:8a:56:33:5e:6b:51:
d0:df:7e:07:8b:d6:5f:e4:d2:d9:db:e4:7a:06:47:30:a8:32:
99:0e:e8:d7:e7:d4:f4:1a:e2:60:6e:b6:c9:19:6d:85:a7:95:
42:39:6d:21:01:e3:4f:94:ea:a7:60:33:55:2d:3d:62:70:03:
b1:29:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:26 2026 by rpki-client