
$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
File: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json)
Hash identifier: zZxmBFHVJlNjue1Hs4PgstxNe5SLck2Uhmfz3H7uO4I=
Subject key identifier: 0A:0A:E3:9E:C8:29:80:D3:81:50:4B:4D:2E:0A:84:6F:2B:D2:DB:D8
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
Manifest number: 75
Signing time: Sun 05 Apr 2026 07:21:25 +0000
Manifest this update: Sun 05 Apr 2026 07:21:24 +0000
Manifest next update: Sun 12 Apr 2026 07:21:24 +0000
Files and hashes: 1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: dF9WF+7H0KD8AWgkQXQuB2YfUZtUV/oBDVb6Nfv86Ho=)
2: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=)
3: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Validity
Not Before: Apr 5 07:21:24 2026 GMT
Not After : Apr 12 07:21:24 2026 GMT
Subject: CN=69d20d74-1c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:32:b9:fa:5c:d7:ef:bf:9a:14:0a:dc:c7:
df:ad:cc:f6:3e:fb:a4:30:98:17:4e:75:39:1e:e2:
77:61:32:8b:0f:a3:01:d4:fb:a7:39:ba:b2:51:f9:
43:ba:b4:c4:9c:f1:07:66:10:7f:7e:24:43:78:0d:
2e:8c:10:e6:4f:ed:46:9c:44:1d:78:99:d6:a9:42:
c4:bc:75:e1:99:03:ba:a4:02:5e:30:ce:84:97:36:
0d:f2:54:34:13:13:97:1d:f5:49:66:6a:85:2f:22:
93:43:a5:3f:f2:86:81:21:01:9b:2c:60:dc:41:f4:
54:6c:04:b7:88:88:e4:8c:4c:30:89:35:73:31:cc:
4e:69:31:d4:5b:d2:90:eb:ce:d5:76:cb:81:db:ac:
8c:2c:6f:02:a8:2c:c4:b9:c7:5c:9a:48:29:96:15:
bd:43:4b:22:4a:8a:88:24:02:27:e0:b1:d8:71:db:
01:d3:91:dd:8c:eb:87:4b:c1:3a:e0:d8:85:1a:fd:
2d:c0:66:f7:15:98:b4:98:ab:ef:aa:9c:b1:24:ab:
b3:2d:2c:8a:2d:b1:6c:ea:ad:08:09:6c:41:4a:6c:
79:30:17:13:49:1c:69:9b:b9:31:b8:a7:ed:a1:75:
ce:ac:8e:81:a5:94:1c:d4:e8:14:a1:ae:94:ae:d4:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:E3:9E:C8:29:80:D3:81:50:4B:4D:2E:0A:84:6F:2B:D2:DB:D8
X509v3 Authority Key Identifier:
keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:8e:4f:e8:12:cf:7b:f2:c1:0f:58:24:ca:ca:97:16:e1:
13:90:60:3f:f1:92:d4:46:19:e0:e7:90:30:39:50:30:4f:cc:
10:3d:8e:95:95:88:13:eb:f9:71:f3:ab:65:3e:16:0b:91:7e:
34:39:b4:23:03:40:e7:67:f8:d3:9a:5f:0c:9a:6c:5f:f1:a2:
49:12:36:dd:fc:3f:93:f1:f6:0c:ef:8f:9e:b5:a5:97:04:fe:
c5:8b:a7:31:8f:90:bf:f4:37:0b:a3:9b:a9:b4:73:5b:61:11:
f2:2e:08:30:4b:e7:da:84:d8:c2:a3:25:43:36:cd:6c:5d:f1:
07:d0:fc:8d:86:6b:8f:9b:48:7d:c6:a8:3d:0d:ac:3d:ae:c7:
ef:e3:77:11:ae:59:af:e3:82:af:2e:a1:92:33:cf:7a:5d:3d:
ea:62:42:88:d8:5e:4b:4b:58:05:93:b1:82:87:40:04:99:0c:
ae:77:e8:04:c7:16:fc:ef:98:a8:1d:c1:f2:c1:d8:da:af:4c:
8b:ef:24:a1:74:3d:63:10:18:a7:53:3e:76:7d:70:92:a7:53:
7d:6d:49:2c:ad:84:6f:38:70:87:af:06:ce:ae:7f:f3:f7:8d:
39:4c:27:30:5e:87:a0:81:87:28:c0:8d:5d:50:cf:9e:b7:bf:
7e:3e:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:40 2026 by rpki-client