
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File: jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier: k8bUV54erLx2wDffE+VoOxZULR2Yey8OOSrDXc1HjoQ=
Subject key identifier: 71:6B:7D:E6:E8:98:72:6A:8E:09:3B:82:6F:E8:1D:73:4C:E8:C8:8F
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer: /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number: 04
Signing time: Sat 07 Mar 2026 08:25:39 +0000
Manifest this update: Sat 07 Mar 2026 08:25:39 +0000
Manifest next update: Sat 14 Mar 2026 08:25:39 +0000
Files and hashes: 1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: 77cFVIpJw47jp3ffA/6YSJAmf8RZxjCYxYETUKAUSiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Validity
Not Before: Mar 7 08:25:39 2026 GMT
Not After : Mar 14 08:25:39 2026 GMT
Subject: CN=69abe103-84ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:b0:ea:b1:6b:97:d7:16:95:26:0c:02:ca:
e3:76:1d:3b:3b:2b:a5:16:50:41:b6:71:77:39:c7:
0c:ba:75:5b:c1:af:43:36:51:74:97:79:dc:51:a3:
6f:fd:64:08:f5:38:97:db:63:b7:51:d3:38:22:64:
11:94:7b:41:4f:55:5f:5a:46:12:a7:57:62:7b:75:
0e:47:62:be:72:81:aa:89:43:07:54:25:1b:ac:1b:
5a:19:ad:5d:dc:ba:fe:96:11:30:4d:f3:e1:26:c5:
15:af:75:97:8e:0c:31:4c:28:35:0d:28:53:a3:79:
73:e8:05:79:8b:28:71:24:f7:bd:c7:65:c9:91:9c:
e0:fb:69:75:3c:ee:b4:c8:fa:6a:3b:d9:3b:cd:4a:
ef:8a:93:15:f7:be:0f:3a:af:8b:3a:c8:94:95:97:
05:35:0d:66:50:61:7f:d7:b1:db:8d:77:cc:cf:ed:
a6:d0:9f:9a:83:93:cd:0e:3f:52:2e:68:c6:32:95:
1d:d7:ff:e5:a4:ec:14:95:8b:cd:1d:1c:5f:d0:d6:
ae:d3:5b:1b:1f:12:b5:11:29:49:69:a4:ec:7b:c4:
9c:72:ad:ed:66:7b:61:76:2b:94:b9:16:1e:7e:a5:
d4:33:29:dc:30:68:a8:e8:d1:ed:c8:47:c2:2d:51:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:7D:E6:E8:98:72:6A:8E:09:3B:82:6F:E8:1D:73:4C:E8:C8:8F
X509v3 Authority Key Identifier:
keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:20:f3:82:7e:72:6e:76:b7:93:be:64:b3:2d:08:1c:3e:
94:bb:7f:d7:3e:4a:1d:bc:5d:3b:58:d8:f3:2e:e0:71:1e:24:
27:16:67:35:4f:92:bd:1b:a1:96:32:72:8e:a9:53:2c:7d:84:
64:2d:ef:b4:43:7c:aa:26:c8:b9:ff:8a:1b:0f:56:7f:2e:98:
df:0d:c4:d1:08:0c:6a:5f:be:32:25:80:f7:01:a3:7a:76:de:
38:14:fb:39:43:90:47:a2:aa:30:d8:90:5d:85:f6:8d:c9:38:
00:b1:0c:b8:04:12:5c:ef:ae:a2:cd:32:62:9b:d8:91:f6:f3:
0d:4a:06:23:8f:64:6a:e9:95:39:63:6e:45:c7:49:34:1c:1f:
d0:4f:b7:fb:51:48:9f:16:92:c0:14:bf:e2:32:12:e7:cf:fe:
4a:b1:12:37:e8:22:a2:c1:41:41:34:7a:80:72:40:57:b6:13:
d0:f5:af:a5:f5:55:35:dc:f4:3e:83:63:13:85:20:55:0f:d4:
e8:d1:7f:87:ff:4e:72:54:de:47:e0:c8:e6:14:a4:19:78:0a:
52:91:ab:e4:81:99:0e:55:07:e5:bb:91:aa:85:76:01:34:06:
6d:37:4a:49:72:89:bb:7a:64:b1:ac:22:bb:8f:af:fe:33:ef:
3c:2c:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:33:17 2026 by rpki-client