
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json)
Hash identifier: JVsgMPJNOUkAm+O9wSnasd+aaTlu7SsXRS+XAfmmT+k=
Subject key identifier: 40:D1:D9:FD:F9:04:22:5D:83:E5:D6:3D:FC:03:52:16:E2:66:9A:DE
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 0322
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
Manifest number: 02DB
Signing time: Sun 05 Apr 2026 01:34:21 +0000
Manifest this update: Sun 05 Apr 2026 01:34:21 +0000
Manifest next update: Sun 12 Apr 2026 01:34:21 +0000
Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: 30PClsivk0OI4Jxk4sp39lTd6mh5MoFK21uk1nz6p90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Apr 5 01:34:21 2026 GMT
Not After : Apr 12 01:34:21 2026 GMT
Subject: CN=69d1bc1d-57ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:24:36:3a:81:c2:40:84:21:8d:b6:81:a8:
6c:fe:81:30:03:b4:39:fc:4d:02:1e:6c:a5:af:11:
6b:8d:63:06:6e:0d:4f:d9:c6:97:f4:c1:c4:f2:4c:
0b:a4:0c:1e:5d:e0:c6:9f:c2:0b:b8:80:02:52:ae:
f2:3f:e2:1a:5c:ee:08:41:1a:c4:5b:f3:16:e2:2f:
ff:8f:69:07:32:be:3c:89:c9:0a:3e:5a:d5:d3:3f:
83:1a:76:9a:94:ca:25:de:ad:b0:f8:be:da:b5:f6:
51:c8:91:6d:b1:aa:f7:1d:17:a1:d4:68:f0:ab:7e:
ad:fc:17:2b:d1:dc:f1:7a:e4:39:07:9b:71:16:93:
ed:9d:59:2c:3b:70:eb:f4:01:ce:d6:cc:4a:1b:49:
37:75:63:d8:df:75:58:c9:56:93:62:39:df:8f:8b:
51:25:1c:97:fd:76:8b:d9:3a:68:f9:f7:ec:eb:88:
7b:b4:b8:f1:08:5a:1c:bf:0f:05:78:c3:20:9b:3c:
d6:50:77:73:99:bc:1c:15:91:1a:a0:59:0b:a1:fb:
5d:57:9c:4f:b4:27:91:8a:eb:69:20:a4:87:2a:af:
af:d2:e2:49:c2:95:6d:01:ce:cc:39:fd:9c:86:9a:
31:c2:ea:c2:df:9d:ca:08:cc:88:53:7f:50:9c:f9:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:D9:FD:F9:04:22:5D:83:E5:D6:3D:FC:03:52:16:E2:66:9A:DE
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:8c:17:60:0f:11:3a:13:8c:63:83:7b:0b:35:17:bb:60:
b2:b7:02:5e:92:65:ca:ee:37:fd:e2:fd:bd:1b:88:ff:06:ec:
57:a1:58:7b:37:09:93:c8:bf:b7:38:bc:97:c5:0d:19:9c:9a:
46:c9:65:a1:3b:6c:c6:a8:03:84:cf:46:ac:dd:fd:6a:6f:bd:
c5:66:90:73:1f:fe:e2:ec:9a:6a:e9:92:fd:a4:e3:fd:64:ff:
90:d9:76:fe:56:00:1f:ff:ed:f0:3c:04:00:63:04:91:e7:51:
36:31:b7:56:4b:86:1b:43:3c:9f:52:92:6f:b4:cf:e8:40:da:
3b:64:86:d1:b8:c9:60:82:ca:55:10:c6:c9:b6:7e:93:eb:d7:
c4:62:8f:0a:fc:b7:97:8f:c1:63:b4:ca:f5:d8:4f:b7:db:77:
94:a6:c8:3f:de:42:50:89:d3:ec:17:f0:24:7d:91:ff:33:ab:
b6:3f:6e:10:38:c3:fe:1f:de:8d:ec:3e:c0:d5:ba:b3:01:6a:
f2:7c:a1:5c:8c:74:ad:9d:14:51:22:fa:4f:a4:ae:01:f3:54:
9f:49:2b:87:03:12:50:dd:44:94:ef:85:3a:71:94:19:77:a4:
d5:d8:3f:9e:cd:ba:7b:12:af:f7:a2:d5:e9:9a:02:2c:4d:b4:
8c:fd:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:21 2026 by rpki-client