
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: 4np/V+tT7EWdhJG836SuZGQcxfWTgfsxwYRv3o8gWVU=
Subject key identifier: 19:09:04:F1:B8:42:80:F1:5E:61:59:F8:9A:AC:E4:9E:EC:DE:30:71
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0677
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 0668
Signing time: Sun 26 Jul 2026 23:26:45 +0000
Manifest this update: Sun 26 Jul 2026 23:26:45 +0000
Manifest next update: Sun 02 Aug 2026 23:26:45 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: f/4oCFlGcNgXBnfo4uA+HD2uolw86eKh39W2aLM2dmQ=)
2: 4D0C006C76C611F194A7C5D875A30FBC.roa (hash: aw+wjqTvXBV1XIeL4o+TSL3pjvhQFfAu+VBJTX/VGdg=)
3: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: Rnz7YdmM/dFUbfVZUB1hF2F9t7TaIkBVLBwLs6I5YcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1655 (0x677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Jul 26 23:26:45 2026 GMT
Not After : Aug 2 23:26:45 2026 GMT
Subject: CN=6a6697b5-ec28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:95:cc:f7:5c:53:0e:81:c2:e7:48:5d:f0:
69:8d:16:aa:6d:2e:7c:89:70:90:0d:65:13:0e:37:
47:31:98:3b:55:c3:33:43:98:7b:27:8c:cd:92:ce:
48:99:ac:58:eb:c3:f7:97:0d:b6:35:cb:69:00:dc:
c1:3b:2b:15:ed:0b:55:00:17:de:9f:79:80:16:f0:
54:57:e6:05:ea:64:f4:db:97:81:c0:84:3d:c6:5f:
cc:77:60:31:07:78:32:85:59:d7:c3:93:9e:68:b4:
54:f7:a7:99:6e:be:8e:f7:ec:7b:81:0b:c1:e7:09:
51:71:fd:49:03:ac:bd:89:de:5f:44:dc:73:df:5a:
35:c7:e7:74:fd:86:3f:3d:b6:5e:20:d0:98:a5:50:
5f:41:53:67:8b:61:2c:09:58:60:1a:5c:0c:b2:df:
21:79:e2:69:4d:d4:59:0e:cf:f2:70:d9:be:05:d1:
3f:9c:84:0a:2d:40:86:93:84:34:19:44:a6:4a:0b:
e4:f1:cc:59:1b:dc:dd:fe:86:ae:d6:dc:06:70:ae:
70:16:8f:22:4b:cd:19:92:90:54:64:48:49:87:2a:
e1:e7:4e:d8:4b:0c:d2:00:6d:37:c7:9d:86:67:c3:
ce:d1:53:7f:48:d2:55:de:62:39:2a:fe:42:35:4f:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:04:F1:B8:42:80:F1:5E:61:59:F8:9A:AC:E4:9E:EC:DE:30:71
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:e5:e8:bf:07:c4:9c:00:e4:90:52:bd:6d:2b:b4:f7:3f:
6a:8d:af:5a:04:87:92:da:22:f6:23:10:e9:76:d6:a9:2c:40:
0f:29:d8:a5:57:dd:d1:9e:c6:8e:e1:89:cd:cd:80:29:e2:3b:
d6:7f:de:1f:fe:98:22:81:f3:b6:b2:e0:b9:bd:48:91:b8:90:
1a:f7:7e:d2:98:72:c4:4c:2a:5a:d8:1a:a2:f9:a1:d8:40:4c:
dc:e0:c8:3f:a1:ee:b7:a0:9e:6c:b4:3f:1e:47:f7:d5:38:72:
e4:7a:ab:a6:03:52:7c:18:f0:e5:d2:de:56:6b:1f:17:9d:74:
ec:21:ae:ef:cd:ef:63:3a:53:5e:4c:f4:93:e4:83:e8:9e:e6:
31:68:db:0e:1e:38:b8:e4:8a:57:46:c8:a1:da:74:e7:44:0c:
4c:84:6e:76:4d:79:83:42:32:f5:dc:d1:f4:ee:80:52:a1:f5:
58:5a:20:7c:12:fa:a4:07:ff:89:82:73:71:5b:0b:c2:93:d0:
7d:3f:af:04:bf:c4:c6:eb:9a:70:3d:f5:35:ed:5b:6f:58:aa:
7d:d1:c4:b6:29:d6:a0:10:d2:5a:40:fa:4e:12:4a:42:95:80:
fc:8b:39:19:df:00:e1:ff:dd:85:ae:36:df:f4:d1:6c:f4:20:
63:1b:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:07 2026 by rpki-client