
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier: 4POGJmCP72lVwSI2BygSbZsnuSkvnApgj2TotedB7vo=
Subject key identifier: 41:0B:41:BA:F3:7C:C3:34:E4:C4:DA:1E:8D:F1:6B:C1:21:8D:10:DE
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number: 047A
Signing time: Sat 04 Apr 2026 23:50:44 +0000
Manifest this update: Sat 04 Apr 2026 23:50:43 +0000
Manifest next update: Sat 11 Apr 2026 23:50:43 +0000
Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: xyvSyhb6t92P/vuCHNA4AklcCUEigYSjWTW/oU1ktJ0=)
2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: ISYvVSKYiERQAYBzI/jF083BOrfksWj3XaooDHkbCsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Validity
Not Before: Apr 4 23:50:43 2026 GMT
Not After : Apr 11 23:50:43 2026 GMT
Subject: CN=69d1a3d4-e35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:1e:8c:7a:19:9d:2b:0d:26:9f:83:56:02:
8e:65:2f:b5:aa:4b:e1:8b:35:8e:9f:ee:4b:cd:e2:
b1:00:75:ef:4c:8b:bb:f5:e5:a2:9c:1f:44:8c:3f:
44:07:ee:f1:f8:f9:cd:1c:38:3a:a2:04:8b:38:e5:
3f:ef:a4:c0:a1:cf:fa:dc:30:a1:a3:ef:4c:56:1b:
12:c6:3d:b5:2c:4a:ad:ad:fa:1a:1c:a0:8c:30:02:
1e:ff:e8:c4:bd:c8:19:a2:5c:a9:fa:0d:7e:a4:68:
e0:11:ae:4e:f7:7b:af:f9:5a:3d:72:1c:b5:6d:3b:
b5:0f:55:27:ca:5b:e0:c6:1b:15:3b:03:49:b3:0f:
ce:21:ff:b2:c8:b6:60:4f:60:5f:30:fd:f0:8e:50:
43:d3:7a:79:dc:26:f9:62:08:05:0d:eb:31:a5:ff:
53:ef:5e:89:93:90:cf:6c:e9:43:4a:2c:93:38:48:
dd:bf:b6:52:d9:05:f0:76:e6:8c:cd:e6:e1:19:eb:
7a:47:6d:61:b2:28:ad:fd:44:b4:d3:69:01:98:89:
02:c7:81:75:cc:09:d5:f5:81:e3:f7:d4:95:b5:a4:
03:63:0d:d9:fb:ab:a3:10:8c:70:c2:fb:d8:60:77:
86:d8:48:c9:d3:4e:5c:4e:f6:e0:d1:2e:b5:71:69:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:41:BA:F3:7C:C3:34:E4:C4:DA:1E:8D:F1:6B:C1:21:8D:10:DE
X509v3 Authority Key Identifier:
keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:86:20:72:4b:27:57:da:85:10:fe:5f:ac:dc:79:99:d1:c4:
2a:4f:ef:94:40:85:9e:d2:e0:2b:1b:63:62:61:06:53:03:cf:
e6:4b:57:15:56:d5:7b:20:79:00:c0:29:7d:32:63:9c:d7:d0:
07:f0:73:b6:4c:43:c4:13:ae:bb:38:37:df:7f:8d:ae:70:f6:
d0:53:2d:fa:df:c9:64:05:d6:e7:af:d3:46:9f:12:65:18:4e:
e6:4f:1f:81:e4:ee:2a:b6:a9:19:2d:5c:7f:50:25:66:e9:55:
39:14:43:70:80:a2:f9:f7:09:3e:7f:5a:b8:b6:49:7a:6c:d3:
eb:bc:e9:c9:17:63:45:0c:28:74:02:a3:91:70:e6:98:4c:b4:
da:3a:a2:41:0c:8a:51:b9:08:e6:a4:69:ad:15:90:c2:71:d2:
ca:fd:12:a6:97:86:69:87:6c:e2:df:45:96:3d:6a:ce:38:4a:
dd:0d:d9:a2:29:e2:05:45:3e:76:4a:6c:ae:04:61:8b:3f:2f:
e5:62:16:d9:d9:e1:db:f7:ee:f8:eb:f9:d8:33:a8:26:06:7c:
ae:5e:60:f7:d6:e8:64:52:4d:04:bc:e0:60:fb:db:a3:0a:0d:
3d:63:1f:94:45:65:37:24:64:55:56:68:49:e7:c6:ea:35:44:
f4:29:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:40 2026 by rpki-client