
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: e92Uqy7C6OcsLjhjU0KULl7HPhq1rSXuYn9DDKstVJg=
Subject key identifier: CE:82:00:60:11:36:2C:B5:81:B3:AC:B2:39:D6:26:0B:E6:18:4C:7E
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1DD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1DC5
Signing time: Sat 04 Apr 2026 16:01:40 +0000
Manifest this update: Sat 04 Apr 2026 16:01:39 +0000
Manifest next update: Sat 11 Apr 2026 16:01:39 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: ieQv3PPSwZoAK67ZIvOxL2oXSm6/BUXEWKzjx63nlfI=)
2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7638 (0x1dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: Apr 4 16:01:39 2026 GMT
Not After : Apr 11 16:01:39 2026 GMT
Subject: CN=69d135e4-510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:6c:00:72:a2:ca:f3:8b:bf:82:29:fb:b2:
35:72:ac:1f:a7:5f:bb:00:d5:82:90:35:10:78:a7:
ac:ae:e6:47:d5:d2:92:5e:a1:b5:7d:89:32:fb:7c:
55:33:b7:8e:52:99:b6:8f:52:ec:51:b5:d8:8b:57:
fe:f3:0c:fe:a4:fb:c9:5b:27:63:30:29:50:28:70:
e5:fb:32:34:78:7d:20:63:70:da:ad:6b:47:00:7f:
45:3a:62:d7:06:37:dc:68:e8:9c:d6:e6:7a:dc:6e:
59:3d:53:24:1e:a3:a0:28:13:1f:3f:ec:8a:21:62:
81:4e:f2:0d:5c:09:49:eb:26:bb:09:b6:79:44:bf:
77:9a:95:a6:2a:c2:19:40:62:a0:79:b6:0d:d6:80:
d4:d5:a7:24:3d:80:1b:c2:81:fb:a3:a3:12:28:c7:
ee:7c:b3:22:4c:72:94:e2:f6:38:88:6f:47:a1:81:
ae:ba:f6:7a:1a:f9:96:d6:bc:3e:18:3e:0b:46:4d:
8c:a4:7c:ba:77:71:55:5f:01:a8:d1:34:f5:b7:fc:
dc:d5:db:7d:a3:67:85:c7:33:0e:a0:37:c0:65:02:
43:e6:af:5a:37:3e:9b:39:c4:1c:b7:62:6f:67:5d:
22:0e:81:d9:8e:5c:d3:cc:9a:c9:b0:53:a8:ad:43:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:00:60:11:36:2C:B5:81:B3:AC:B2:39:D6:26:0B:E6:18:4C:7E
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:f5:21:74:b5:36:83:2e:49:62:d3:9f:f6:c1:16:d0:9b:
1c:d6:b6:eb:47:09:f0:cf:88:8f:22:05:08:84:04:76:5c:e4:
c0:dc:61:38:76:fa:f3:d3:f7:6c:91:a6:6a:9b:95:0a:e5:37:
1a:22:0d:ee:1d:71:d3:b1:3e:07:ff:c4:e8:d5:ff:c6:fe:a2:
6c:96:60:1a:a6:8b:b7:5e:e0:84:95:55:15:0d:20:6a:b6:77:
f6:60:f2:f2:dd:e0:a6:d6:f0:c8:21:99:4b:bd:c5:94:da:7d:
15:c7:aa:3e:29:f8:eb:ed:7a:63:da:79:7f:cd:72:b6:a3:76:
fb:49:1b:f0:3d:50:47:48:99:b0:ef:90:ef:d5:52:4b:ef:12:
2a:0e:46:f1:82:e7:15:76:aa:99:84:0d:26:57:83:a0:63:1a:
8f:25:34:9a:2a:3c:38:28:81:df:74:09:e6:5e:17:7e:e6:cd:
e3:35:53:91:00:be:54:7c:b3:1c:67:0e:4b:79:b0:19:1f:af:
36:4d:e4:e2:75:8f:e4:36:6a:33:aa:34:59:26:bf:83:5e:99:
fd:2c:d1:c6:4a:a6:7b:1c:f0:15:a4:99:7d:79:ef:c0:5c:42:
df:28:bd:a8:b4:2f:5f:0c:de:87:f0:b4:23:17:ca:ad:a0:ee:
44:a7:3a:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIzQzUxMTAvBgNVBAUTKDI3MzQwNDdENkU5NzhENTA5QkE4QTUxQTZGMTA2NDg3
OEY0Nzc1REEwHhcNMjYwNDA0MTYwMTM5WhcNMjYwNDExMTYwMTM5WjAYMRYwFAYD
VQQDEw02OWQxMzVlNC01MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZBsAHKiyvOLv4Ip+7I1cqwfp1+7ANWCkDUQeKesruZH1dKSXqG1fYky+3xV
M7eOUpm2j1LsUbXYi1f+8wz+pPvJWydjMClQKHDl+zI0eH0gY3DarWtHAH9FOmLX
BjfcaOic1uZ63G5ZPVMkHqOgKBMfP+yKIWKBTvINXAlJ6ya7CbZ5RL93mpWmKsIZ
QGKgebYN1oDU1ackPYAbwoH7o6MSKMfufLMiTHKU4vY4iG9HoYGuuvZ6GvmW1rw+
GD4LRk2MpHy6d3FVXwGo0TT1t/zc1dt9o2eFxzMOoDfAZQJD5q9aNz6bOcQct2Jv
Z10iDoHZjlzTzJrJsFOorUN60QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6CAGAR
Niy1gbOssjnWJgvmGEx+MB8GA1UdIwQYMBaAFCc0BH1ul41Qm6ilGm8QZIePR3Xa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNDNS84MzFBMjBGRUI1
QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpWQ2JxS1VhYnhCa2g0OUhk
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6UUVmVzZYalZDYnFLVWFieEJraDQ5SGRkby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjNDNS84MzFBMjBGRUI1QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpW
Q2JxS1VhYnhCa2g0OUhkZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZfH1IXS1NoMuSWLTn/bBFtCbHNa260cJ8M+IjyIFCIQEdlzkwNxhOHb689P3
bJGmapuVCuU3GiIN7h1x07E+B//E6NX/xv6ibJZgGqaLt17ghJVVFQ0garZ39mDy
8t3gptbwyCGZS73FlNp9FceqPin46+16Y9p5f81ytqN2+0kb8D1QR0iZsO+Q79VS
S+8SKg5G8YLnFXaqmYQNJleDoGMajyU0mio8OCiB33QJ5l4XfubN4zVTkQC+VHyz
HGcOS3mwGR+vNk3k4nWP5DZqM6o0WSa/g16Z/SzRxkqmexzwFaSZfXnvwFxC3yi9
qLQvXwzeh/C0IxfKraDuRKc6jg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 03:37:54 2026 by rpki-client