
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier: NWr8/EVSnS1fC+HcUGhSlrNuDDRO4pQCEhfxavjxo9Q=
Subject key identifier: 5D:BD:D3:70:A3:C7:30:B7:4F:62:31:92:D1:87:BA:67:1F:F8:34:79
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number: 01D7
Signing time: Mon 02 Mar 2026 21:06:25 +0000
Manifest this update: Mon 02 Mar 2026 21:06:25 +0000
Manifest next update: Mon 09 Mar 2026 21:06:25 +0000
Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: BzdKc8kSKQbVEG/+D64k7usUS4A+z/0XojX19GCBCd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Validity
Not Before: Mar 2 21:06:25 2026 GMT
Not After : Mar 9 21:06:25 2026 GMT
Subject: CN=69a5fbd1-bbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:9d:90:85:0e:67:14:f8:f5:9f:a4:cd:26:
ed:9e:bb:0d:80:14:51:ef:95:7c:34:9c:b6:44:4a:
d8:bd:2b:e7:32:ab:de:10:69:c2:f8:8e:8a:d5:01:
7b:32:7f:4f:7a:bb:02:b7:33:ae:f8:1f:90:be:cb:
6f:38:7f:5a:cb:89:31:55:b6:85:12:e7:6a:e1:30:
8d:98:52:c3:25:c7:5d:66:7a:07:6b:89:ba:64:4a:
0d:1b:55:86:49:14:ca:15:91:0e:ee:5c:f2:7d:d6:
e5:89:ae:47:18:c3:f4:e7:00:30:1e:90:be:70:b5:
ea:85:73:fc:16:50:09:67:14:6e:d6:13:72:ea:79:
73:7e:84:b2:72:93:97:69:34:31:e3:bd:62:e3:54:
f0:86:aa:1f:7d:dc:d3:91:72:f0:8f:08:e2:eb:d5:
9a:14:c1:ac:00:7b:98:e6:98:74:ac:12:6f:3b:44:
fe:ba:20:7b:6f:21:85:22:f5:28:14:65:a2:f5:ac:
25:1a:c9:2f:71:7a:a7:eb:1b:af:fd:f7:91:50:f7:
c4:16:ad:44:8e:21:13:f2:52:2b:ac:26:04:45:c0:
c8:04:5a:4c:01:d2:de:d4:a6:41:99:ec:25:1f:02:
09:8a:37:21:5f:c8:a1:2a:70:6b:2a:82:0d:62:20:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:D3:70:A3:C7:30:B7:4F:62:31:92:D1:87:BA:67:1F:F8:34:79
X509v3 Authority Key Identifier:
keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:30:cc:1a:04:dd:7b:87:5e:c8:da:76:ca:9f:6c:5f:c8:59:
6a:94:0f:03:83:76:55:26:89:59:aa:8d:b2:92:01:e4:17:a4:
a0:2c:f8:8e:95:fa:b6:24:5c:4f:a6:d4:f4:77:99:57:c7:c2:
a7:70:f3:51:17:77:80:9b:ee:14:12:86:b2:d2:dc:20:62:1c:
af:29:5b:75:42:28:9e:d1:68:5e:35:65:c3:11:8d:08:60:b2:
21:4e:18:12:45:93:b4:43:68:b4:73:e6:9b:31:4d:8f:2e:23:
0d:10:d1:1d:2b:44:a2:03:55:4a:e5:eb:35:2d:62:f8:56:21:
9b:1c:ef:98:47:67:29:95:2b:e1:52:07:47:74:ed:02:10:7d:
1f:83:c7:98:29:84:ac:bf:3f:cf:ba:ae:a4:a7:0b:a3:bf:26:
9e:b8:d8:fe:b9:d0:48:9e:9e:a4:61:ae:c6:4d:8e:77:5b:a4:
76:46:af:28:c9:b2:6a:9e:af:38:5a:87:58:b4:04:fe:ca:27:
a4:9c:aa:0f:c9:5e:99:19:5c:ff:68:cb:98:b0:32:c8:30:2f:
de:83:1f:d7:f4:79:da:c5:2b:cf:5b:88:50:7d:f6:a1:d3:a9:
5c:35:05:bb:b8:d1:d2:30:b5:17:af:2c:c8:4f:af:89:84:15:
1d:75:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:59 2026 by rpki-client