
$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
File: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json)
Hash identifier: 16Ug3MdagrUx2hvz44CYZB32VM7N9LiKlBYuStcFHo8=
Subject key identifier: 22:B0:57:76:DC:F9:7C:E6:AB:F1:09:7D:B8:47:BA:04:8A:64:87:BC
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
Manifest number: AD
Signing time: Mon 27 Jul 2026 09:30:26 +0000
Manifest this update: Mon 27 Jul 2026 09:30:25 +0000
Manifest next update: Mon 03 Aug 2026 09:30:25 +0000
Files and hashes: 1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: CE6d2n6skhuAgKIAZ6UCS9PYL2vePyxy3vIZXVXgpXg=)
2: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=)
3: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Validity
Not Before: Jul 27 09:30:25 2026 GMT
Not After : Aug 3 09:30:25 2026 GMT
Subject: CN=6a672532-2eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:1f:f0:e9:61:05:e7:e0:81:10:d3:60:75:
72:d2:5f:36:ac:74:a3:a9:7b:0a:3a:27:03:7f:e6:
36:90:20:e1:d4:0e:ca:7e:9b:e7:9e:27:60:93:21:
7f:ef:af:01:a6:8d:85:d2:8b:e9:81:f7:54:a4:1d:
6e:55:0d:65:05:7a:4c:6b:9f:bb:03:fb:75:70:a0:
d9:a5:0c:bf:e2:8e:e8:54:68:85:8f:b6:8d:5e:73:
a4:79:fa:11:66:d6:28:a9:cc:fe:5e:85:fb:2a:06:
67:d1:70:ab:a1:bf:ff:ec:92:74:93:1f:97:7f:20:
2e:0e:e3:7f:38:5f:46:aa:f8:19:df:67:39:d1:d0:
2b:03:3a:a5:39:e9:45:49:17:45:3d:50:24:a3:e7:
18:b4:ed:f3:f0:22:0d:b2:2b:53:60:2e:05:54:62:
fd:06:67:fb:7e:47:18:c9:93:c4:1d:38:2f:f3:5a:
61:1d:80:e7:83:0a:ba:9c:10:91:86:0d:fb:dc:72:
1f:49:8d:e2:81:d9:66:d3:fa:9c:35:93:38:59:fb:
81:c9:3c:be:e9:ea:93:f6:74:96:30:8f:3a:c7:ba:
4c:3e:8e:59:08:88:1f:9e:47:08:e7:32:49:28:81:
b4:2c:9e:6c:0c:9c:bf:e9:4e:ab:ad:87:54:dc:81:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B0:57:76:DC:F9:7C:E6:AB:F1:09:7D:B8:47:BA:04:8A:64:87:BC
X509v3 Authority Key Identifier:
keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:13:7f:ca:99:cc:b2:72:52:60:2e:c9:c5:53:0c:ab:47:8b:
4c:fe:c1:73:03:6c:ed:7d:65:32:70:ab:8b:95:93:a4:4e:9d:
87:c9:aa:ad:b4:50:b1:7e:9e:2c:6e:cf:c6:85:a4:11:20:ec:
38:1c:60:67:c6:ea:6b:79:f8:67:71:49:4e:ad:05:3f:c2:23:
15:af:f3:d4:36:57:50:f9:d2:b6:5f:7e:1b:a0:0a:63:ce:dd:
0f:b7:4b:4f:52:e4:2f:8b:50:28:91:57:b6:56:03:e9:fb:df:
37:65:ae:fa:b0:9e:2e:2f:49:30:9e:4e:b4:92:8a:f1:cc:ca:
e7:3c:33:c2:5a:ef:f4:6d:2f:24:8c:64:33:42:b1:bf:8d:31:
74:d4:bf:11:e0:c9:ff:93:f3:ac:5d:b0:34:15:29:80:52:2c:
a3:c9:37:ea:65:5f:82:4f:77:5e:13:60:78:3f:79:d0:09:a4:
b3:fc:7c:1c:0e:42:80:e3:40:c2:a7:4c:58:d1:bc:22:56:57:
ab:0b:d6:30:65:ab:39:cb:9c:c7:6c:4a:11:58:60:1b:32:ca:
f5:85:b8:39:59:e5:6c:f9:46:62:11:f5:17:98:ce:8b:f3:cd:
7d:68:a0:ea:56:f9:5f:e9:fa:d6:66:6c:9c:5c:ef:be:95:a8:
e7:0f:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:49 2026 by rpki-client