
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier: Dd6CAhw9RQra56eZTQsP5KE/RDOWO+fmhIogEzYZDKA=
Subject key identifier: 32:18:35:B0:91:22:F0:D9:9A:BC:53:B7:B6:C0:B5:C5:80:C2:8C:FF
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number: 0116
Signing time: Tue 03 Mar 2026 05:28:55 +0000
Manifest this update: Tue 03 Mar 2026 05:28:54 +0000
Manifest next update: Tue 10 Mar 2026 05:28:54 +0000
Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: hsgy8mQ1adSzZ7TE0+Q6/C2rjwo5xBD7+Cty0CK8IzQ=)
2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Validity
Not Before: Mar 3 05:28:54 2026 GMT
Not After : Mar 10 05:28:54 2026 GMT
Subject: CN=69a67197-012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:f4:82:bd:13:67:0e:ee:a0:57:f6:64:1d:
32:ef:84:f7:11:ad:a5:dc:9e:06:f8:15:a8:3a:3f:
6c:57:e5:d8:ee:ac:15:64:68:95:d7:7a:46:18:92:
45:aa:6b:27:72:eb:de:ba:5d:54:f1:88:27:da:93:
ef:eb:fa:24:76:10:ba:38:20:0d:09:68:26:5c:31:
af:c6:cf:f7:25:fc:d1:d0:07:ae:a8:fe:17:c7:74:
86:e0:43:6f:8c:bb:24:18:cf:22:e2:b0:f2:e3:e0:
94:2f:6c:0e:a4:7a:4f:37:48:1e:5d:bf:0f:a4:c5:
73:f7:cb:bf:24:3e:56:8c:23:d8:ec:d4:fd:22:36:
76:39:27:8e:58:68:f9:b4:e5:c2:22:12:5e:b4:91:
be:55:4d:d0:34:0c:06:84:85:d2:14:eb:c5:71:c2:
64:21:10:d8:27:10:4a:05:df:ba:05:38:0b:c8:0e:
0f:5d:09:a1:13:0a:f0:d4:0c:a2:15:32:7d:37:ab:
d2:8b:24:8a:91:38:03:c9:55:25:20:3d:fb:a5:f9:
10:d5:7b:f7:19:af:b7:81:42:18:69:ea:0e:18:6c:
15:0a:c2:ae:95:d9:83:f7:2e:35:50:4d:61:ae:e6:
a5:08:6c:2e:29:9d:43:a6:5b:28:32:bd:d4:3a:19:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:35:B0:91:22:F0:D9:9A:BC:53:B7:B6:C0:B5:C5:80:C2:8C:FF
X509v3 Authority Key Identifier:
keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:97:36:78:76:47:1a:70:11:9e:50:bd:c8:29:91:09:79:
dd:c3:f4:30:b7:e7:19:85:89:e7:75:8f:4b:78:91:f6:51:e7:
32:9d:58:5e:15:88:07:a4:f6:90:9a:72:d9:0d:6e:a6:b1:54:
7f:ee:1f:60:d1:3d:35:39:03:61:8a:1d:31:6f:86:5f:19:af:
65:b2:1d:bb:a2:8a:af:12:da:7f:a7:3d:91:97:ab:fb:e8:55:
df:3b:eb:4d:8e:7e:b5:98:1f:c4:94:3f:87:c7:97:f0:c9:28:
2e:93:98:8b:8f:ed:92:34:e6:a6:db:a1:b3:5a:c8:5a:b6:88:
f9:23:05:1f:02:01:65:3a:30:f7:bb:77:57:11:36:cc:2c:98:
9d:2e:59:b6:e8:ef:2c:6e:a8:72:47:06:b5:d4:f0:15:aa:04:
a8:38:7c:81:a7:26:8c:3a:a0:06:ea:06:4f:90:56:ea:71:30:
49:a1:a5:7a:47:7b:06:32:32:9d:f3:1e:3e:99:70:6d:16:5a:
92:8c:4a:a4:45:0f:ea:86:b9:b6:d8:88:c1:22:46:0a:c9:b9:
b1:76:f6:d8:19:30:a2:1b:52:5d:df:6b:62:df:79:69:69:2f:
11:0d:ce:b5:36:43:63:b4:a6:f1:a3:bd:b5:41:c6:42:e2:a2:
c1:f7:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:28 2026 by rpki-client