
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier: czhqvouZU0Hcw5DraLXbcVJFolFmr88OAGns1I8/ZT8=
Subject key identifier: 71:C7:BE:3C:E7:29:0B:87:AF:5E:87:65:8E:55:34:A4:1B:99:70:F1
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 09FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number: 09DB
Signing time: Sat 14 Mar 2026 19:33:59 +0000
Manifest this update: Sat 14 Mar 2026 19:33:58 +0000
Manifest next update: Sat 21 Mar 2026 19:33:58 +0000
Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: lkmKqoORHf7oFNdksAKlU/qpFbPP8vxXEzC1m5Ae0Uk=)
2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: 2pQj/v9t+kcNupt0rKz67XKQ+odZb10F7T6m8zIHzIE=)
3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: GS8FiTHe76tR+EGLanHlCxxJBZXlT9b5WZ9G9Dgo+Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 19:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Mar 14 19:33:58 2026 GMT
Not After : Mar 21 19:33:58 2026 GMT
Subject: CN=69b5b826-1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:e4:a8:0c:09:9f:68:05:69:e3:ca:c3:b2:
38:2b:f2:ad:04:a4:ae:31:b2:74:17:95:45:c9:d1:
06:60:96:78:46:1e:26:2c:6c:8e:2d:c8:8d:33:d8:
01:8c:5d:1c:ad:1f:a9:c7:f8:33:42:84:dc:69:0b:
45:61:d0:59:cd:b8:87:27:12:11:7e:51:ae:cc:75:
d4:ba:c6:b7:1b:35:77:ae:c6:cd:4e:41:21:d2:92:
8b:17:40:3b:3e:20:d2:5e:9d:3d:ec:d5:66:82:be:
de:83:c1:3e:c1:b2:a8:5f:29:2d:e8:f1:3d:36:c8:
da:26:e5:01:f0:47:1b:61:8e:c9:76:9e:b1:66:31:
46:b9:3b:67:c1:cd:c1:00:e9:dc:ef:2b:09:6b:a2:
e6:38:c6:6d:be:02:92:f1:fe:ee:7b:5f:77:09:70:
46:42:c4:ab:c3:b2:d9:c0:e6:fc:5a:bc:b1:de:00:
97:94:f0:fb:a6:4b:1f:6c:b4:3c:96:c6:83:0a:79:
57:6a:30:1b:ea:45:60:67:73:15:31:ff:d6:4e:16:
be:b7:f0:5f:ea:52:1a:08:64:8e:91:54:54:90:33:
13:ef:3a:7d:bb:e3:e3:2f:bd:77:5e:f7:0d:5d:5c:
f0:62:d6:c3:b4:bd:22:04:9e:65:5d:92:d9:e4:d3:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:BE:3C:E7:29:0B:87:AF:5E:87:65:8E:55:34:A4:1B:99:70:F1
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:7e:11:62:86:7f:02:37:e0:68:46:8e:0d:95:cf:0c:81:
7f:68:18:4b:69:21:48:0a:35:57:ab:de:08:c0:82:5d:64:45:
3f:53:cb:9f:a1:e1:b6:0a:03:a2:a5:06:93:6d:f5:84:99:ee:
af:f8:ac:f4:eb:ca:6e:e3:71:18:d2:8e:09:bc:2b:9a:c1:f0:
fb:83:f4:5a:70:32:d3:7b:46:75:58:4f:3d:94:8c:f2:91:14:
0a:8e:9e:74:ea:b4:54:41:7c:d1:56:44:7a:20:33:ad:0b:51:
f3:ad:eb:9a:c3:87:1f:df:d0:e5:37:4a:0d:9a:08:62:8c:f4:
43:a1:0e:ec:87:f6:e6:43:18:3e:92:3b:4b:f4:fb:63:05:ae:
a3:54:7e:d2:ea:b1:58:0e:70:27:70:97:7c:b7:48:c6:04:1d:
d4:87:f3:1c:6b:59:17:7f:41:6b:28:79:e1:00:a7:74:a0:88:
9c:6e:d4:fd:62:26:3e:cc:2a:4f:01:17:78:94:f0:32:ea:0a:
05:95:d3:cd:96:29:46:15:a4:de:e9:94:29:40:e6:b8:4c:bc:
b1:e8:78:32:3e:55:5d:99:e5:da:00:10:27:6c:e6:04:77:5a:
06:da:f7:5d:e9:cb:ed:bc:20:89:3a:4f:cf:19:32:02:2f:9e:
50:b8:e0:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC
RUM3MDU0NDEwHhcNMjYwMzE0MTkzMzU4WhcNMjYwMzIxMTkzMzU4WjAYMRYwFAYD
VQQDEw02OWI1YjgyNi0xZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6gvkqAwJn2gFaePKw7I4K/KtBKSuMbJ0F5VFydEGYJZ4Rh4mLGyOLciNM9gB
jF0crR+px/gzQoTcaQtFYdBZzbiHJxIRflGuzHXUusa3GzV3rsbNTkEh0pKLF0A7
PiDSXp097NVmgr7eg8E+wbKoXykt6PE9NsjaJuUB8EcbYY7Jdp6xZjFGuTtnwc3B
AOnc7ysJa6LmOMZtvgKS8f7ue193CXBGQsSrw7LZwOb8Wryx3gCXlPD7pksfbLQ8
lsaDCnlXajAb6kVgZ3MVMf/WTha+t/Bf6lIaCGSOkVRUkDMT7zp9u+PjL713XvcN
XVzwYtbDtL0iBJ5lXZLZ5NPCsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHHvjzn
KQuHr16HZY5VNKQbmXDxMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx
QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3
RG5EN215dlVBSnkteHdWRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXSB+EWKGfwI34GhGjg2VzwyBf2gYS2khSAo1V6veCMCCXWRFP1PLn6HhtgoD
oqUGk231hJnur/is9OvKbuNxGNKOCbwrmsHw+4P0WnAy03tGdVhPPZSM8pEUCo6e
dOq0VEF80VZEeiAzrQtR863rmsOHH9/Q5TdKDZoIYoz0Q6EO7If25kMYPpI7S/T7
YwWuo1R+0uqxWA5wJ3CXfLdIxgQd1IfzHGtZF39Bayh54QCndKCInG7U/WImPswq
TwEXeJTwMuoKBZXTzZYpRhWk3umUKUDmuEy8seh4Mj5VXZnl2gAQJ2zmBHdaBtr3
XenL7bwgiTpPzxkyAi+eULjgBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 15 02:39:28 2026 by rpki-client