
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: uYJEDIZCO1eiNKL3LP2QsHVX/rSR4IZHp2Cph6tj+e8=
Subject key identifier: 52:7B:D1:B1:5A:03:21:C0:59:55:ED:BD:55:F7:39:B8:A1:96:EA:E9
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0AB2
Signing time: Thu 12 Mar 2026 19:29:10 +0000
Manifest this update: Thu 12 Mar 2026 19:29:10 +0000
Manifest next update: Thu 19 Mar 2026 19:29:10 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: CChzIwrhJ3Gq0oHknsvaSNTmhDiRdFnaYtoDxG0pmRU=)
2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 19:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Mar 12 19:29:10 2026 GMT
Not After : Mar 19 19:29:10 2026 GMT
Subject: CN=69b31406-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:eb:8c:02:f5:ba:c3:24:12:2c:a9:19:dc:
30:e4:41:88:72:ae:31:17:87:56:8a:40:ec:75:af:
8e:21:a5:07:44:54:ab:6f:8b:19:7d:33:11:68:84:
84:6d:7a:ff:bc:b6:7e:85:be:d8:c6:3b:b3:82:50:
31:91:45:9b:e3:2b:ed:7d:fa:3f:7a:d6:fe:86:a3:
51:2a:0c:71:eb:ea:c5:cd:42:51:ab:04:b4:45:9e:
60:82:8c:ce:03:a9:da:e5:6c:2b:d2:33:b5:66:10:
a4:01:dc:f3:ef:fa:5f:21:7c:29:28:32:5c:df:0a:
85:05:1a:e8:61:bb:4e:db:49:82:98:79:c5:71:8a:
d0:6e:3c:0d:54:70:c5:14:2d:5e:2c:2a:b5:3e:74:
06:b0:41:fd:30:19:e4:51:ed:58:9b:a2:2c:ca:c7:
73:e6:7f:48:44:46:fe:cd:dd:c1:ca:cd:86:f1:a2:
88:cd:24:66:71:e6:15:7c:80:7d:32:00:63:32:2a:
fc:e4:63:13:be:49:b9:7e:35:66:ee:1e:d1:1d:08:
65:e8:55:7d:a1:0b:8d:27:5e:2a:91:5d:c3:c4:ea:
b7:87:b1:07:e6:64:fa:d3:cc:47:c2:d7:ed:e1:60:
f4:17:b5:46:e8:df:f9:52:6b:a5:85:f6:0e:a5:39:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7B:D1:B1:5A:03:21:C0:59:55:ED:BD:55:F7:39:B8:A1:96:EA:E9
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5b:5b:fe:84:aa:9d:1f:ee:45:22:04:71:57:5c:5c:01:66:
95:c9:a9:65:6e:98:5e:78:14:12:27:ea:ab:5f:aa:f4:93:7d:
47:c6:7c:63:a5:cf:ef:f8:46:31:81:c3:a7:84:7b:1e:b0:df:
31:28:ea:47:8d:a1:a6:1d:62:a9:bf:29:0a:51:3f:51:27:aa:
7d:13:9f:7c:11:57:06:cf:6c:7a:f0:84:0e:64:a1:49:2e:84:
03:34:c8:39:1c:fb:42:d9:bb:29:15:86:4b:70:29:b3:68:87:
21:30:cb:27:6b:2b:7c:ad:bf:17:18:aa:d5:1d:3f:3d:3a:45:
89:5e:be:12:0c:99:bb:e9:a7:d4:ce:5c:0c:91:42:39:97:72:
1a:0b:7d:f3:e5:18:99:30:31:1f:33:18:fd:5c:e1:e4:1f:18:
66:c4:3b:55:b1:ae:85:b4:a5:6a:67:13:85:36:b5:c4:36:87:
2f:00:51:5e:23:87:6f:01:a5:81:48:14:5f:e4:f9:ba:4c:c0:
3f:1f:64:58:85:7e:db:b6:53:f4:bc:5e:ca:36:ea:ec:f0:40:
b3:f9:cd:f0:2c:12:32:8c:31:15:3f:1c:42:64:41:9e:6f:dd:
b4:11:35:6a:10:77:c3:e1:96:1b:33:5d:ca:f0:65:7c:59:57:
88:db:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:49:59 2026 by rpki-client