
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: O7mPYlPOh0LJ054bjt8fp0bOJ0/EuDoIwL5Gc20Xv/c=
Subject key identifier: 1E:CB:C2:AD:1C:45:12:EF:93:96:01:E9:A5:4B:70:B4:59:8F:58:0C
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: 0106
Signing time: Sun 05 Apr 2026 05:42:09 +0000
Manifest this update: Sun 05 Apr 2026 05:42:09 +0000
Manifest next update: Sun 12 Apr 2026 05:42:09 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: StNUDTHu14aLL4bYBZqq28CPE8tItSpiCGOANxFgPx0=)
2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Apr 5 05:42:09 2026 GMT
Not After : Apr 12 05:42:09 2026 GMT
Subject: CN=69d1f631-c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:07:f8:c5:53:d7:f8:30:e6:e9:63:f7:96:
cf:a7:4b:96:6c:ac:7f:5e:7f:0a:b1:7e:a3:21:cb:
63:4d:be:b7:ce:60:c3:93:67:89:7b:99:38:d0:88:
0e:27:10:2d:8f:61:3b:93:de:92:49:fa:30:9e:88:
6e:16:22:47:96:7c:35:18:a1:ba:b3:e9:da:cd:c1:
db:64:95:c7:01:fd:f3:80:dd:dd:ad:ce:f6:da:ab:
7d:f0:21:00:6e:2d:a3:16:e8:d3:29:d9:cd:19:f9:
e7:29:7d:84:79:af:14:86:30:db:a1:76:be:c5:84:
b8:21:f3:bc:f4:b2:fa:15:47:e2:57:6a:bb:32:9f:
3d:42:70:7f:80:1d:6e:f6:01:fa:14:8f:c3:1f:01:
db:13:5c:8d:25:9a:f8:62:41:d4:59:72:b6:1c:d0:
21:b1:30:cf:02:a7:b6:54:fa:85:3d:e0:d5:e9:99:
32:9f:dc:c2:f2:98:47:2c:3b:53:b7:5d:ed:66:05:
df:54:56:a8:e4:80:9f:ff:c7:4f:ec:50:c0:34:f8:
77:9c:fb:19:e3:5d:97:e0:8d:89:58:4d:93:95:b9:
d1:9a:73:cd:0d:3d:6c:31:2b:25:0c:68:5c:be:48:
28:37:b4:e9:07:a8:38:0a:b3:93:e0:96:6d:6a:de:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:C2:AD:1C:45:12:EF:93:96:01:E9:A5:4B:70:B4:59:8F:58:0C
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8d:92:a4:6a:d9:58:44:64:d4:4a:95:8b:19:67:2b:66:4f:
42:bf:91:a1:3e:84:f1:b0:20:61:02:81:d6:5c:5c:ab:24:20:
8f:b0:a4:f2:55:f5:69:4a:19:ac:b3:df:eb:47:0b:2c:57:74:
9a:ae:58:0a:91:79:fb:8e:8f:11:7d:bb:f7:f0:f2:e7:54:5a:
b6:d6:3f:1d:75:8e:38:97:78:77:2e:ad:a0:a1:44:ff:7d:0d:
f1:1f:91:09:ce:c4:7b:0c:8b:dc:d6:81:77:e8:9e:3f:f3:d1:
c9:f7:62:fd:1f:f8:53:91:d3:53:de:29:f7:2a:69:11:3f:31:
83:c3:33:f2:1b:b5:7c:c3:8a:b1:3d:80:fc:69:19:59:50:1e:
1b:c1:20:8e:22:71:f0:80:c6:dc:c8:c8:b4:b6:13:9f:35:1f:
19:9b:6e:4f:86:67:43:af:c3:f4:dc:e5:3c:f1:0e:91:fb:1e:
06:52:f9:75:c1:c3:de:ba:69:79:03:a3:7a:c9:e5:e1:f3:46:
d5:5f:17:28:22:0a:3d:9b:30:7a:72:bb:56:be:3e:c9:b3:7e:
76:5e:f7:85:b5:7b:4d:18:19:a1:49:4f:e5:96:7c:ac:41:68:
1a:21:ce:2d:87:87:84:60:89:e1:e8:55:e5:e1:9e:1e:b8:c4:
cc:49:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:16 2026 by rpki-client