
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
File: jM-30IneJP53MO8rXFeIrgdEhCk.mft (raw, json)
Hash identifier: uAwP5zxcOubJNAZkYe6Ci09Q7SdABAFtbjra9uD6znU=
Subject key identifier: B0:75:C0:DB:09:00:44:A0:11:E0:EA:A3:A1:08:71:65:6F:40:54:44
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Certificate issuer: /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
Manifest number: 31
Signing time: Sun 05 Apr 2026 07:58:09 +0000
Manifest this update: Sun 05 Apr 2026 07:58:09 +0000
Manifest next update: Sun 12 Apr 2026 07:58:09 +0000
Files and hashes: 1: jM-30IneJP53MO8rXFeIrgdEhCk.crl (hash: dHb1lta2U52W82Hbz6hLbX3quPOJN84PTkcgVjvvk4M=)
2: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (hash: TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Validity
Not Before: Apr 5 07:58:09 2026 GMT
Not After : Apr 12 07:58:09 2026 GMT
Subject: CN=69d21611-36c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:22:57:3a:c3:6d:65:f8:26:9d:97:eb:57:
97:84:f9:70:a4:77:82:96:6c:bb:44:4e:e0:7c:6a:
4a:ba:9d:84:73:4c:12:cf:dd:bd:cc:ab:38:ce:2f:
a5:1c:40:e9:05:7c:a5:c8:72:a3:94:2a:37:f2:86:
d8:71:9c:eb:d3:51:80:82:e4:64:12:27:61:ae:4e:
b7:7f:5a:5a:9a:bb:fb:20:a6:3d:9f:ba:e2:69:e3:
12:98:19:ec:5a:45:5c:96:23:27:6a:80:7e:e3:70:
73:f4:a1:94:6f:f4:35:be:2f:b5:dc:32:5c:f7:80:
9b:6d:bc:6e:ec:6a:0b:aa:bc:8f:87:d4:a3:51:da:
f1:af:cf:09:59:4c:a6:b2:54:a4:07:d8:f6:a0:b1:
61:8c:44:c3:0b:7c:22:42:26:c8:4f:f8:f3:06:eb:
42:b3:64:05:ca:81:33:6b:e3:57:93:c1:68:9c:d4:
81:2f:fc:dd:fe:5d:75:4b:90:fc:e6:4c:6c:50:5f:
81:64:c0:d7:da:89:8d:36:87:3c:a6:48:f8:47:9b:
54:c6:53:de:22:ef:96:7d:df:e6:27:f5:7e:9a:4c:
5c:03:78:82:54:be:0a:e5:6a:7e:17:2e:67:04:de:
dc:3b:00:4e:dd:24:98:58:32:fe:be:61:2e:35:90:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:C0:DB:09:00:44:A0:11:E0:EA:A3:A1:08:71:65:6F:40:54:44
X509v3 Authority Key Identifier:
keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:68:e7:47:66:86:d6:25:23:37:c4:59:ea:87:a8:3b:9d:
65:65:65:aa:0f:2f:c1:4c:88:02:57:3f:e9:ca:9a:0f:ee:70:
ae:b9:76:56:13:b5:5d:5b:a5:f8:f7:bc:5e:19:75:0b:8d:1a:
59:f2:65:31:bd:6a:01:a4:ea:af:9d:65:9a:6b:d6:02:71:53:
10:bd:89:bf:97:3e:d2:32:98:db:6a:61:c6:7c:92:de:73:df:
16:ab:59:d2:5c:fb:f7:57:6e:bb:fc:5f:c7:2c:6b:f0:be:41:
a5:34:cb:a6:fc:bd:9f:f4:80:54:9a:1d:87:47:87:89:90:b4:
e4:29:20:d9:ac:02:e7:52:f1:d1:fa:d9:36:75:f0:3e:3a:d5:
d8:22:75:df:72:69:3d:ab:16:9f:a1:06:6a:2f:7d:09:88:9a:
e5:2d:22:07:46:68:48:89:72:d4:ed:e4:7f:48:40:0a:3e:a9:
2f:01:7c:67:d7:41:34:e6:e4:11:fe:64:09:e8:0d:15:1a:60:
f2:35:45:be:44:dd:78:f8:64:d8:6b:ef:d5:9c:3f:52:2c:04:
5a:49:60:e7:b1:6f:5a:ad:b6:87:74:45:29:ac:fa:68:f5:9c:
95:3a:34:19:42:34:70:fb:16:6e:9d:a7:e8:d2:a2:77:30:7f:
c2:53:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:48 2026 by rpki-client