
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier: /ZuP+P7quqx8pH78rvUiYI4oqI1ysklRDpMs++Kf2ac=
Subject key identifier: 6E:8A:BB:98:6D:51:28:F5:6A:9F:B0:7C:43:92:27:FB:34:25:26:28
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number: 012D
Signing time: Fri 17 Apr 2026 05:18:53 +0000
Manifest this update: Fri 17 Apr 2026 05:18:53 +0000
Manifest next update: Fri 24 Apr 2026 05:18:53 +0000
Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: OJukkFqDFbPfkqXORjPNJGf5GW0QEyR9IxAILlNeH4Q=)
2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Validity
Not Before: Apr 17 05:18:53 2026 GMT
Not After : Apr 24 05:18:53 2026 GMT
Subject: CN=69e1c2bd-d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:4d:4c:24:df:4f:6e:f4:51:f5:4b:84:6a:
9a:ac:37:2a:c7:a7:03:45:49:b3:eb:84:9d:9f:4a:
4e:de:4f:f6:a4:3a:c8:46:f9:08:b3:e6:80:65:14:
04:ca:7a:65:61:a6:82:4f:6a:b5:90:0b:79:8d:f3:
19:75:6a:f6:14:d1:a6:57:a1:0b:c3:7d:57:1e:35:
38:18:59:80:92:42:3c:25:ac:8b:9f:c6:cf:b5:c8:
b0:f6:b0:4d:6b:9c:cc:65:7b:7e:2f:e7:21:05:1b:
6c:dd:c0:8f:90:ae:af:d6:b9:0c:2d:57:37:a0:c6:
36:c2:62:6e:9b:c6:d6:a1:d2:c4:65:53:cf:cf:bd:
f1:a4:5e:4f:bb:5c:52:c0:5d:80:1d:42:5f:c7:5a:
7b:90:28:08:9f:cd:17:4f:e4:22:2b:34:1f:9a:83:
19:18:f5:94:d3:5c:c5:96:a7:95:ed:2a:bb:5f:c3:
49:d2:68:48:f6:e1:3e:a5:b6:c8:88:4b:fe:87:dc:
3c:80:ab:79:b8:cf:20:69:3c:85:97:c2:9d:2f:75:
7d:d9:74:5e:0e:0f:64:59:03:75:51:d7:11:14:76:
0f:02:81:33:3a:4f:8d:3a:41:a4:73:68:0b:53:66:
63:2a:30:b2:50:d5:4e:4c:c0:bb:28:e3:e3:74:49:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:BB:98:6D:51:28:F5:6A:9F:B0:7C:43:92:27:FB:34:25:26:28
X509v3 Authority Key Identifier:
keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c8:9e:b3:2b:98:5a:81:42:52:ad:fc:f9:7b:5f:69:fa:a8:
7b:d6:5c:97:8f:d1:5e:20:59:67:7a:47:b7:11:3e:24:d5:e5:
8b:cd:82:a0:a1:12:26:0e:09:c3:ca:15:5a:63:bb:6f:94:ff:
98:ef:88:6a:dc:17:c4:6c:26:0a:0c:5b:76:af:e1:f5:74:f1:
8e:43:25:7d:ab:61:3d:12:96:42:09:5d:ca:47:04:2e:70:5d:
6c:eb:bb:cf:07:b1:5e:a4:08:68:37:8e:6b:7a:10:16:21:4e:
6c:28:5b:e9:f6:62:e9:a0:86:3d:61:eb:88:1a:f4:6e:9f:6e:
1a:9e:8f:5e:72:cb:14:6e:b7:23:20:b0:63:0c:68:17:e8:10:
6e:7d:3f:c6:e8:fc:3a:a2:92:5c:2d:d1:a9:23:93:98:ad:10:
f1:42:d7:94:84:fc:69:d1:08:e6:34:c8:2d:3e:81:45:33:03:
9f:81:3c:0c:3d:cf:2b:89:86:74:7c:fd:43:4a:3c:0f:18:ae:
aa:6a:08:07:f6:0b:c7:8b:63:dc:e2:8b:d7:84:ab:05:f9:08:
75:04:c2:69:51:c9:f7:7d:8f:8d:90:93:6d:2a:b9:7f:0a:a7:
3a:c1:48:43:36:ba:39:30:22:3c:26:34:56:27:96:7b:af:f5:
6c:3d:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:24 2026 by rpki-client