
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier: BOgeXsA8zyxBOu7yV0Y1dekXc1Yh4TIXzfGzOnMYQ+k=
Subject key identifier: B8:75:42:1F:81:C3:78:79:3C:F7:0C:61:B2:B7:43:C2:74:62:31:83
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial: 1D73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number: 1D47
Signing time: Sat 04 Apr 2026 16:03:09 +0000
Manifest this update: Sat 04 Apr 2026 16:03:09 +0000
Manifest next update: Sat 11 Apr 2026 16:03:09 +0000
Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: ILsI6yNWx27UsqyG5Pr6ZXW9gvOUZwU34Dra9vTopZw=)
2: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=)
3: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: HaArSzXQPWVclTurOjmYRFehXALwDSZqwgKX4Y1qn/o=)
4: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: 5BzxW+L4vSDnf3Mt8f4xne60eMyftYTFgf6t3n4xIJQ=)
5: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7539 (0x1d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Validity
Not Before: Apr 4 16:03:09 2026 GMT
Not After : Apr 11 16:03:09 2026 GMT
Subject: CN=69d1363d-8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:94:c6:54:72:79:b3:3e:71:60:1e:16:d5:
61:cd:7f:2f:33:22:0b:43:79:15:19:0a:9b:01:49:
3e:46:39:f5:29:44:10:e1:39:d0:8b:34:69:13:6b:
98:02:88:54:b7:c4:04:f8:2a:c5:50:ac:a3:a6:7b:
e0:22:ef:fa:7e:38:37:6d:be:98:a1:4b:9f:f1:ce:
c0:bb:90:65:9d:a4:5c:f7:fb:00:3b:1d:4f:2c:85:
a1:c2:76:36:9b:c1:a2:ad:ab:39:83:50:9c:59:5a:
f5:31:15:84:aa:87:f3:77:0b:ab:f7:a4:14:c3:96:
21:0e:f2:89:26:0d:2b:4a:b5:7e:a9:da:2e:ff:1e:
2d:65:a2:66:82:67:70:d0:90:61:68:cb:f1:aa:55:
f1:d3:0d:7d:a0:95:14:9a:74:43:7f:b1:54:88:d2:
1b:81:e3:14:7f:70:b8:91:80:92:31:72:46:12:5a:
6f:20:a0:ef:d2:8b:85:f1:7b:da:5f:c0:2e:9a:58:
c8:75:e6:5c:87:32:6a:d4:b4:4f:00:55:a0:47:1a:
52:51:ab:54:c0:f9:cd:ca:9a:17:89:1e:10:e6:70:
61:b5:91:07:84:d3:8f:4f:d4:38:f7:cb:0e:df:c9:
c4:b3:fd:e6:87:5f:65:6c:aa:0b:52:f6:b3:06:7b:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:42:1F:81:C3:78:79:3C:F7:0C:61:B2:B7:43:C2:74:62:31:83
X509v3 Authority Key Identifier:
keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:31:10:e0:e5:6a:8c:5a:01:69:d3:e1:0c:a4:a0:9e:d7:b7:
50:8e:dc:45:21:92:e4:a7:e2:ed:a8:98:64:34:4f:19:cc:00:
f1:7d:9b:2d:a6:8a:cc:11:c7:83:f7:b4:a2:19:49:e6:10:35:
d0:78:ee:29:78:cf:55:63:ad:d4:4d:da:51:16:7a:12:ba:88:
34:2c:04:e6:56:97:87:f8:a8:db:cd:49:1a:0e:f1:21:19:8b:
0a:ea:14:63:73:c2:92:bf:3a:09:51:c1:ee:27:fc:e6:2c:38:
5c:14:49:7e:dd:5b:f9:71:ce:27:6c:f2:26:c8:61:a8:d6:20:
93:93:31:0c:e8:19:ea:54:3f:31:17:4a:3c:6d:ed:2f:c0:39:
6f:22:c6:0d:d0:ef:9f:03:9e:89:5b:81:11:79:24:fe:0d:ed:
c5:b3:3e:e6:e5:f1:bb:70:c9:cc:06:c1:b0:f8:7e:94:67:cd:
a1:ac:61:4f:d0:95:d0:b1:a5:50:c4:a1:da:4e:ee:c8:3f:60:
ff:e0:5d:57:49:90:44:83:e3:ce:ed:31:7c:eb:5e:74:33:52:
21:cd:29:b2:ed:f8:b4:f2:ce:0a:08:56:f7:c9:47:cf:49:1a:
1a:55:94:be:3b:d6:dc:45:19:f5:26:3a:50:ce:05:4e:06:6b:
9e:90:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:10 2026 by rpki-client