
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: 5OzO6VBUBAnLAXQdSHu6w3+h3KxMNDi9zpZ8KfkOcGQ=
Subject key identifier: 12:C7:B8:8B:76:D3:A4:81:31:AB:B3:B4:DC:F1:59:93:2D:4B:9C:67
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 0313
Signing time: Sun 05 Apr 2026 00:56:51 +0000
Manifest this update: Sun 05 Apr 2026 00:56:50 +0000
Manifest next update: Sun 12 Apr 2026 00:56:50 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: CEnV5tXDSngRUYqwORUMILwftFY5X801se3p0ItZZwo=)
2: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=)
3: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=)
4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Apr 5 00:56:50 2026 GMT
Not After : Apr 12 00:56:50 2026 GMT
Subject: CN=69d1b353-1653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:ce:b2:d4:1f:8d:69:6b:05:3a:e1:e5:83:
e9:91:d2:01:fb:ae:62:d3:ba:ef:75:c2:86:b8:71:
d6:c8:04:f8:59:f0:7a:c3:33:8f:75:8e:6e:66:b9:
8d:5d:00:bb:e9:81:51:a6:07:db:4c:c6:11:7d:8b:
b6:6c:00:52:94:58:e3:41:1b:f3:ef:8b:ff:c4:3d:
88:61:0a:84:77:8a:0c:98:03:ce:44:c3:86:35:d9:
2c:f9:92:f7:f8:77:f5:4f:ed:20:1e:13:55:33:02:
2b:bd:7a:bc:55:48:95:6a:ad:0f:f8:9f:86:aa:eb:
be:2f:99:5f:22:a5:0a:78:d6:08:9a:32:06:78:89:
b6:86:72:ae:bd:06:ce:da:0a:ec:c3:2b:a2:6e:ff:
f3:26:1a:05:8f:5f:ac:1b:b2:f6:3e:88:b5:f2:ec:
17:43:42:b9:9a:c4:ba:c2:9f:82:0e:5c:66:e9:ee:
de:0e:95:a2:f1:e2:40:f2:aa:2f:11:5b:0e:6c:c0:
a1:79:fd:71:93:51:70:c5:33:b1:1c:90:19:cb:ec:
fb:cd:1a:69:91:07:a0:60:0e:aa:0e:01:87:f2:40:
3f:f0:aa:73:02:0c:90:36:eb:0a:37:2e:de:aa:40:
2a:7b:06:ef:7c:56:c7:c5:a2:b3:bf:b0:f0:90:30:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:B8:8B:76:D3:A4:81:31:AB:B3:B4:DC:F1:59:93:2D:4B:9C:67
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4f:93:6e:e1:99:bc:3c:33:2f:e6:1b:9d:77:45:76:bd:d7:
e5:ee:a6:95:66:04:dc:d5:9a:51:ee:e0:e1:a4:fd:01:39:67:
bd:f8:81:49:31:e2:83:a7:08:21:b5:c5:fe:79:4f:a3:c5:d7:
35:4d:d1:e0:dd:13:9c:3a:de:ee:04:c1:d9:92:ea:7a:24:30:
e0:a8:4e:1a:29:e1:e2:7f:3a:f9:b6:d6:8c:84:04:a4:58:34:
91:87:67:f9:7d:f5:39:83:7c:58:8a:ae:5d:b1:3b:dc:cf:68:
a0:62:1d:1b:b3:57:48:0e:95:8b:fe:15:af:e9:54:08:de:c5:
53:61:08:3b:66:7f:df:43:ed:46:4f:99:b1:61:93:d3:85:48:
2d:30:03:a9:85:fe:08:43:7b:ef:a3:20:cc:38:b6:89:64:d9:
3d:eb:e2:23:b9:85:48:78:8c:63:23:9a:96:1b:aa:2d:e5:b1:
3c:71:43:56:fa:bc:65:90:6d:23:d9:d6:f9:00:ba:c2:1b:59:
5b:df:e7:5b:95:f3:ef:81:b7:dc:a4:b7:30:15:66:2f:9c:cf:
5d:48:ad:42:bf:c2:8e:b7:39:52:5b:4a:9c:c8:6c:0c:b4:50:
87:9d:9f:f6:c6:86:60:d1:5e:cc:3c:2d:25:3b:3d:0c:ec:20:
4f:62:ad:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE
QkVCRTNFRjMwHhcNMjYwNDA1MDA1NjUwWhcNMjYwNDEyMDA1NjUwWjAYMRYwFAYD
VQQDEw02OWQxYjM1My0xNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5x3OstQfjWlrBTrh5YPpkdIB+65i07rvdcKGuHHWyAT4WfB6wzOPdY5uZrmN
XQC76YFRpgfbTMYRfYu2bABSlFjjQRvz74v/xD2IYQqEd4oMmAPORMOGNdks+ZL3
+Hf1T+0gHhNVMwIrvXq8VUiVaq0P+J+Gquu+L5lfIqUKeNYImjIGeIm2hnKuvQbO
2grswyuibv/zJhoFj1+sG7L2Poi18uwXQ0K5msS6wp+CDlxm6e7eDpWi8eJA8qov
EVsObMChef1xk1FwxTOxHJAZy+z7zRppkQegYA6qDgGH8kA/8KpzAgyQNusKNy7e
qkAqewbvfFbHxaKzv7DwkDCZ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLHuIt2
06SBMauztNzxWZMtS5xnMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw
RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD
SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATk+TbuGZvDwzL+YbnXdFdr3X5e6mlWYE3NWaUe7g4aT9ATlnvfiBSTHig6cI
IbXF/nlPo8XXNU3R4N0TnDre7gTB2ZLqeiQw4KhOGinh4n86+bbWjIQEpFg0kYdn
+X31OYN8WIquXbE73M9ooGIdG7NXSA6Vi/4Vr+lUCN7FU2EIO2Z/30PtRk+ZsWGT
04VILTADqYX+CEN776MgzDi2iWTZPeviI7mFSHiMYyOalhuqLeWxPHFDVvq8ZZBt
I9nW+QC6whtZW9/nW5Xz74G33KS3MBVmL5zPXUitQr/Cjrc5UltKnMhsDLRQh52f
9saGYNFezDwtJTs9DOwgT2KtsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:50 2026 by rpki-client