
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json)
Hash identifier: WIUIB+Au3SnI5ZaIIAp8ejHUqBiWzWDTY/nX6XUtSt4=
Subject key identifier: A6:AA:A5:E1:5C:DB:09:3D:BD:85:47:E1:EB:F9:0B:93:D1:7F:0C:7C
Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Certificate serial: 0921
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
Manifest number: 091A
Signing time: Sat 04 Apr 2026 20:03:18 +0000
Manifest this update: Sat 04 Apr 2026 20:03:18 +0000
Manifest next update: Sat 11 Apr 2026 20:03:18 +0000
Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: fh884TfEpgkrrvWv49fZ3m7NdIRqmXOQYXiEXTvmHM4=)
2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: XsfyCgy8g5kHLYmZ6IEzpkYjqKuCoWEp9cV6g7rlqWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Validity
Not Before: Apr 4 20:03:18 2026 GMT
Not After : Apr 11 20:03:18 2026 GMT
Subject: CN=69d16e86-3656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:74:79:35:06:e4:a4:78:2f:29:08:fd:d7:
67:c2:00:3a:ef:98:e7:ed:0b:4c:72:51:6d:00:28:
8b:8e:2f:f9:c1:85:a7:10:a0:f5:0d:19:d9:e0:12:
da:56:96:d5:0f:ee:6c:33:b6:1d:30:25:f8:83:64:
3c:32:f1:f4:27:16:25:a1:f9:14:08:53:5a:99:63:
8f:70:70:43:af:3e:41:38:39:b4:52:b0:07:82:9f:
ff:32:98:e1:41:c3:fe:68:3d:ca:10:60:58:c2:34:
e1:29:48:d4:79:56:a7:fb:5a:c4:37:d2:e6:11:41:
c1:1a:27:b1:96:c2:f6:0a:3d:fd:04:09:ce:c8:06:
fc:63:f7:26:64:53:56:35:8e:4b:3a:de:ac:5d:aa:
3f:5d:9c:4b:20:97:5d:b6:ca:79:61:69:cd:8b:b2:
82:97:47:dd:d4:18:ef:be:82:43:d8:4a:55:4a:07:
0e:41:f2:88:30:bf:ed:9a:ba:a4:5b:b9:3a:18:02:
13:64:73:f6:03:2f:c6:14:a5:37:ab:d7:bd:11:dd:
ad:3d:95:dc:21:c7:e3:ee:54:53:ae:53:ea:42:0f:
3f:df:35:1d:86:4c:71:1b:6d:bc:09:c9:e6:e8:db:
39:07:10:ea:d1:ae:60:d5:52:03:81:64:16:af:e1:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:A5:E1:5C:DB:09:3D:BD:85:47:E1:EB:F9:0B:93:D1:7F:0C:7C
X509v3 Authority Key Identifier:
keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:9b:d0:2a:16:8a:41:1f:b1:ea:25:45:a3:01:1a:e4:60:
af:ee:6a:63:ae:e6:bc:01:f9:88:ba:42:0f:7f:7a:08:5b:9c:
b9:9e:39:7d:9d:23:a1:6e:2d:e3:4e:5f:c6:48:82:dc:4d:95:
43:8d:f4:ea:9a:a5:0e:88:88:5d:a3:de:af:6f:ad:2b:87:48:
de:91:ab:c6:ae:03:aa:2c:43:eb:b4:a0:9b:13:cd:19:ba:c3:
4d:84:a5:94:ab:15:59:77:37:69:db:88:b8:7f:89:dc:91:e9:
5a:fc:05:3c:0e:12:0d:5d:55:86:c7:53:7c:8b:e5:69:5a:0b:
fa:9c:ad:c8:d4:98:d3:52:52:2d:95:e2:be:a2:9b:83:08:ab:
64:fc:7c:ad:c9:f4:dd:f9:80:91:90:fe:de:19:ff:c0:54:6b:
c9:da:30:9f:36:85:65:b4:02:ab:ae:63:7e:c3:47:5c:c4:48:
77:5e:17:c9:98:47:12:19:14:ba:52:4f:ab:76:48:6c:b7:b6:
c3:49:62:73:8a:9e:f4:fc:33:81:3d:46:d7:17:2d:f5:fa:a7:
0f:15:fd:fa:f9:01:2a:9b:f0:a6:6b:5e:53:62:57:26:11:3d:
4b:34:17:cf:b5:17:b5:42:e6:18:a4:a4:56:ff:9e:54:8c:10:
37:1c:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:36 2026 by rpki-client