
$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier: K/HQ3dTI3e14t9rhekgGJsP4YNAcou+9k2x9eOm4G8g=
Subject key identifier: 6C:65:58:46:DB:F0:24:B1:29:38:9A:EE:3D:EE:0C:7B:6F:9E:50:D7
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number: 03C7
Signing time: Sat 21 Mar 2026 00:06:58 +0000
Manifest this update: Sat 21 Mar 2026 00:06:58 +0000
Manifest next update: Sat 28 Mar 2026 00:06:58 +0000
Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: YrETlOD3Ub6922S964qYbDNuOjX2Twpi2gthb1pFlpQ=)
2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: eJU27ZylxWRdH4yTS7w9NECP9sf6xkVZe7M8HJ4Q68w=)
3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: 8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Mar 21 00:06:58 2026 GMT
Not After : Mar 28 00:06:58 2026 GMT
Subject: CN=69bde122-8eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:0a:5a:94:2d:75:9f:4f:85:11:c2:51:12:
95:2d:12:e1:ed:db:31:15:ab:2c:53:b0:25:a0:84:
3e:6d:cc:5d:b8:5c:31:e7:e5:d4:9a:ad:80:ba:34:
d5:d9:a0:82:cd:a2:13:59:0c:04:bc:04:72:30:c3:
f0:15:5c:e9:e8:e4:c1:55:dc:36:b4:93:d2:aa:15:
54:f7:27:5e:fc:32:68:df:b4:d7:3c:88:4d:31:a5:
1b:7f:f1:69:17:93:75:b0:53:4d:74:1d:3d:ae:cb:
cb:21:bb:26:74:55:fa:dd:dd:1d:eb:90:46:75:25:
0c:bb:26:a0:cf:e2:f3:19:b3:3d:c8:49:57:fe:db:
29:28:6d:2b:a7:0f:28:c9:4f:4c:e1:c2:ac:33:fd:
51:5e:01:99:5e:c0:a8:47:31:cd:95:ba:8b:4f:b7:
77:0b:73:ae:5c:9b:3a:89:3f:de:fb:6c:06:71:3c:
95:6a:48:46:07:31:78:7b:60:33:bd:f5:1c:e5:2e:
cd:ea:4f:b8:63:d9:46:f9:ba:cf:96:f1:ee:3c:4a:
8e:8b:c7:01:32:e8:43:14:e8:08:dd:a6:ae:7e:d6:
db:32:6d:85:da:4f:c1:c7:54:a3:b2:45:df:86:1b:
b3:b5:03:6f:49:a7:3d:e5:48:7c:c9:dd:7a:a0:9a:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:58:46:DB:F0:24:B1:29:38:9A:EE:3D:EE:0C:7B:6F:9E:50:D7
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:15:5c:8d:f8:42:88:d6:bb:2b:51:1a:d6:99:45:52:1a:28:
4a:86:9b:b5:de:a8:5c:e6:85:4d:32:2f:38:88:35:20:7f:c9:
5c:5b:81:f9:54:9a:95:65:4a:0a:90:6f:10:87:8e:d5:11:51:
e2:e9:f3:44:2e:dc:11:b4:89:5c:93:ed:d7:bb:4d:f3:f8:06:
be:f3:60:7e:f4:24:47:eb:cb:b1:0e:74:85:e4:d2:b8:48:ec:
43:10:54:e0:1f:91:b1:88:dc:9d:4d:d7:ce:89:1a:40:e7:c9:
c7:b7:9a:9e:f2:cd:00:00:ee:bf:72:d2:61:89:e4:82:ca:64:
1b:f9:d9:03:4d:df:38:c8:13:f5:f5:fd:ca:4a:8c:a9:e8:51:
ee:33:81:35:1e:2e:65:de:d7:45:24:8c:e4:e7:61:54:11:04:
67:73:5d:20:05:ae:8c:ef:e4:e6:e3:ca:5e:5e:85:c7:f6:9b:
03:8a:b7:1b:2e:5b:a0:bf:9a:38:f4:5f:51:ba:4b:ef:47:e9:
5b:59:53:a5:d1:59:5d:0d:86:5a:f5:15:03:b6:03:c2:4f:ff:
57:fa:63:77:84:1b:e6:b4:be:90:da:7a:85:2f:aa:00:f0:59:
ae:ca:fe:a8:20:75:d6:96:72:b7:ba:2d:10:79:d1:fa:ff:c8:
d7:f3:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:05 2026 by rpki-client