
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier: GMyGvM4rWmTcLasqvylwSULQoyw9WFNZepRXXRUknUU=
Subject key identifier: 2C:63:94:A8:DB:6D:BA:FF:9A:A5:6E:C4:67:89:56:28:3C:6B:C8:5A
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number: 2012
Signing time: Sat 04 Apr 2026 16:16:31 +0000
Manifest this update: Sat 04 Apr 2026 16:16:31 +0000
Manifest next update: Sat 11 Apr 2026 16:16:31 +0000
Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: YwRXHsCjmgNY0v6A/wWkEClyc1Hrobg/njHc+ylwnok=)
2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Validity
Not Before: Apr 4 16:16:31 2026 GMT
Not After : Apr 11 16:16:31 2026 GMT
Subject: CN=69d1395f-7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:d1:b0:d2:b1:1b:79:b5:2c:62:c5:58:ba:
cd:ea:b5:a5:27:5e:da:1b:de:e5:a5:4a:d2:e8:99:
51:be:b7:8d:5c:59:f5:76:ea:78:13:dd:d8:b5:f0:
fe:93:86:ec:17:17:0f:24:24:3e:a8:12:bd:80:cb:
da:d6:5c:01:48:4b:c6:37:ad:b8:82:75:3c:5d:d5:
31:7f:48:a3:58:69:c7:35:04:90:ea:51:66:9a:a6:
3c:ca:b7:5e:bf:94:d9:8a:a6:fd:7a:5c:88:3e:19:
4f:37:49:af:44:dc:bc:21:6f:50:00:71:ad:9a:dd:
a0:0d:30:2e:a9:b7:16:bf:4a:6f:67:0b:2a:02:ad:
4e:2c:2d:93:5e:3f:96:17:5b:a1:e8:d6:a5:06:ab:
e8:87:a4:bf:57:8b:90:ce:63:0d:36:e5:60:a7:e7:
06:1f:1e:77:63:6b:18:99:44:44:04:6d:53:13:43:
12:eb:2b:a7:18:af:91:d4:ac:49:26:b8:71:26:01:
f4:5f:ae:98:00:d6:7d:76:2a:b0:13:cb:7d:cd:ab:
fa:d1:57:38:20:9a:9b:71:a9:66:ce:e6:12:43:c9:
ec:26:5c:b9:0f:53:8e:c6:fd:e5:9e:4a:65:f3:5d:
4c:e5:28:1c:7f:9e:49:76:b0:8a:ae:fe:1c:d3:13:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:63:94:A8:DB:6D:BA:FF:9A:A5:6E:C4:67:89:56:28:3C:6B:C8:5A
X509v3 Authority Key Identifier:
keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:30:7c:dc:0c:46:5e:1a:9c:fd:dd:61:a3:44:93:57:5f:6e:
98:07:01:e5:13:f3:73:df:15:ae:b8:dc:4e:24:b4:2b:41:30:
bd:b6:78:dc:bb:9b:a1:29:a3:c3:58:de:a3:9d:b8:9f:10:78:
98:99:85:eb:bd:b9:b0:3e:13:06:f6:13:5e:03:98:9b:51:9a:
6a:e2:22:a7:d7:87:c5:d9:47:4b:69:fa:60:b1:5c:39:5d:bb:
75:d7:88:89:b6:1c:de:ea:5a:1a:dd:ff:55:d6:e7:b2:58:8d:
a1:84:66:f7:fd:01:0a:92:c0:f5:3b:d8:a6:b9:e8:30:c6:e5:
0c:55:8b:4a:24:32:06:7b:40:fd:6d:2a:9e:1f:ae:1d:e1:4a:
1e:8d:5f:89:0b:24:d8:76:2c:c3:ff:a5:c9:ca:9d:3f:0d:27:
5c:4f:f9:38:05:e6:d0:3c:f9:9d:99:6c:60:d6:fd:10:87:2f:
a8:00:4e:1e:f0:73:73:c9:39:80:18:0d:75:5f:9d:79:dd:5b:
08:34:d2:59:10:77:c8:b6:34:e3:ac:09:80:e7:45:32:34:3c:
01:54:cb:40:a0:59:af:5c:8b:95:c9:df:22:82:44:fa:b5:84:
16:f1:55:de:ae:b4:95:44:7f:3f:05:fc:0d:98:a3:80:5b:f4:
df:00:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client