
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier: +5t9HZjoMdseDzSjbZxp/b4roiEH7GiZzhHbElOU6FY=
Subject key identifier: 4E:93:14:51:F4:E3:73:02:06:52:DC:17:CB:AF:EF:E6:DF:AC:B1:3A
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number: 023E
Signing time: Tue 03 Mar 2026 02:38:29 +0000
Manifest this update: Tue 03 Mar 2026 02:38:29 +0000
Manifest next update: Tue 10 Mar 2026 02:38:29 +0000
Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: Ig25aFTu6K/QzCI28gngoWFahQNJSV+n6Ox4mwwFKwg=)
2: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: of+eMJwERY8W/Zx8rlSjoD/Le9OYic1s0XcXBDZddHM=)
3: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: I7wXHkY5j/EtijYfTfESbTv7xxO7L2sl+cvxEqYUd2s=)
4: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: TvXLjRjBuh/jeViBgDmt60uFgh6iIY+NQDyFO9oRISI=)
5: 267FE3681C4B11F082276911C4F9AE02.roa (hash: 7yw2rVB0AyM3xlLHChI+9eH6QNQqAwz/hS/gm7AplhM=)
6: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: cgsc4sIZExv14thjIH07PFnsNLwQGZYHkNw/Y8rvesM=)
7: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: 70vOJvI/E04woMguOqemdPVBvnWJTEUW7lYf+P0Mb74=)
8: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: D+QMa0Uc3Otd40w0FvJo8RpF7NChFyDZ65fKp82N1NM=)
9: 7C796C5E743311F0BAAA8B29C4F9AE02.roa (hash: /BSR0rTy9YxRu75VPc6TgIj01cxMh76wRoCuCj5Hck4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Mar 3 02:38:29 2026 GMT
Not After : Mar 10 02:38:29 2026 GMT
Subject: CN=69a649a5-cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:38:8a:e3:9b:c5:d7:52:bc:6d:23:d1:b7:
a9:0a:52:32:9d:dd:74:e1:83:25:b8:e4:0d:c8:12:
e8:ac:af:6c:af:70:d7:84:c5:f7:ba:6f:1c:a5:84:
cf:14:0b:fd:8d:14:e4:43:e4:b1:05:00:3f:c5:e1:
6c:91:1d:be:20:6c:73:d0:fa:55:2e:21:a1:03:b5:
e6:87:7c:9a:38:59:7c:7d:7f:fa:54:33:6e:f3:33:
9f:ad:bd:63:a9:59:20:fe:13:3d:5a:b0:49:57:9c:
1e:27:dc:74:6c:6d:c3:88:26:4b:9b:59:dc:d7:b1:
58:18:24:cf:aa:d9:84:3c:dd:89:1b:b8:01:d6:97:
af:ca:c7:a6:1e:de:88:b1:56:86:8f:65:66:e1:69:
5b:5a:36:27:dc:02:bb:5a:e2:9a:5a:d0:41:28:61:
34:e4:16:13:65:24:72:b2:1a:eb:9c:24:e0:05:aa:
98:40:41:31:38:fc:ef:9f:45:81:f1:42:e7:8e:6c:
ec:dc:49:98:75:32:78:05:75:ba:b9:f7:c5:92:a1:
9c:54:62:75:e3:ac:73:4a:68:dd:3d:9a:10:f8:05:
45:3c:4a:36:2b:56:fd:75:c3:d3:35:6e:c1:76:40:
55:fa:1f:84:c9:88:bc:e0:0e:49:16:32:c9:05:21:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:14:51:F4:E3:73:02:06:52:DC:17:CB:AF:EF:E6:DF:AC:B1:3A
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:f3:e8:b2:81:32:f7:69:02:9f:a3:c3:9f:03:2a:ab:bf:
2c:80:7b:a4:92:e2:88:ed:75:98:2b:33:2b:6b:62:6a:9d:78:
f2:bb:4e:be:58:59:bd:03:4a:88:3c:14:c2:65:6c:bf:13:9b:
3a:47:5a:d6:f9:18:92:fe:7e:b4:26:fa:44:0b:0f:49:e0:0e:
bf:ea:28:c6:5c:65:0c:77:58:48:72:db:7b:73:73:7c:90:12:
25:99:ff:8e:17:e1:0b:91:2c:ba:5d:df:60:1b:fb:78:bd:fa:
ff:16:e8:9c:90:ee:55:d6:08:09:40:95:07:08:cf:69:3e:22:
98:2d:ce:00:6d:ed:8f:b7:c7:5e:a1:01:25:3d:a1:16:21:f0:
d4:5f:15:f8:a1:22:84:f3:de:79:a6:83:47:8c:f8:9a:2d:0d:
92:97:ec:d0:2f:96:cf:92:92:25:65:80:2e:2b:73:92:b6:79:
d3:c7:f3:7c:5d:03:36:60:cd:c5:65:1c:c2:ee:86:83:6e:86:
62:d2:a5:c4:68:31:e1:6f:da:75:5a:c7:c9:14:86:e7:d7:ac:
b9:7e:d4:38:46:f5:0e:6e:22:35:30:13:df:ec:1d:fc:9c:fd:
2a:f3:fc:00:be:72:19:5c:e5:00:d9:7e:85:63:0e:69:d3:e4:
55:72:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 15:41:03 2026 by rpki-client