
$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier: sVu7OJgYUeNyWS7eozIh7XmiGEz4P2ORnYk1qWsRKlo=
Subject key identifier: 8B:2E:3C:57:04:E0:BC:56:23:7B:94:B9:03:1C:E6:71:9E:F2:C1:8F
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial: 0EF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number: 0EE5
Signing time: Tue 28 Jul 2026 17:46:21 +0000
Manifest this update: Tue 28 Jul 2026 17:46:20 +0000
Manifest next update: Tue 04 Aug 2026 17:46:20 +0000
Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: IbBa4ddRo7ZD43NyKmK6KS4UNvwW0wZ/4NjLZt7FW5Q=)
2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3827 (0xef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Validity
Not Before: Jul 28 17:46:20 2026 GMT
Not After : Aug 4 17:46:20 2026 GMT
Subject: CN=6a68eaed-f183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:c2:4a:d3:47:32:bf:36:85:53:38:68:94:
0b:12:52:71:dd:67:1f:95:9c:61:3d:1c:4d:fc:1b:
18:4f:e8:b9:28:5f:1f:03:be:39:e6:6d:02:15:d8:
fe:21:a1:72:6d:41:ba:ab:4a:2b:25:4d:e0:01:c7:
cc:22:56:5d:8d:64:dd:c7:e8:ae:6d:bb:72:d2:27:
d6:ce:e8:dd:3c:1f:4f:0f:44:2d:44:f9:1d:c9:8e:
03:44:9d:9f:b6:64:6e:f9:64:f7:90:5d:ec:00:0f:
d3:ba:7a:33:3f:b8:d6:75:14:6c:58:7b:33:a3:dd:
2e:1f:79:e4:52:99:0a:fe:4c:1e:7f:d7:e7:ce:4c:
d2:f4:ba:29:4d:c2:97:73:81:55:2e:69:b2:07:45:
6d:b0:ce:e4:ab:35:fe:bd:c9:d1:23:88:f8:46:a5:
ca:89:58:6c:5a:e3:82:0b:1b:f7:c8:d3:40:a8:d7:
e7:dd:ab:d7:28:67:d4:40:dd:b9:96:48:b1:f5:d5:
27:5d:99:da:e2:92:24:91:8c:c6:f6:f6:07:17:55:
75:90:ff:a0:ed:b9:f4:03:2c:01:5e:50:54:d6:f9:
dc:5a:d1:0d:d8:4a:ec:0b:9b:71:f6:e3:03:2c:1e:
7b:29:15:1b:2f:eb:8a:c0:ce:5d:be:e3:97:2d:91:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:3C:57:04:E0:BC:56:23:7B:94:B9:03:1C:E6:71:9E:F2:C1:8F
X509v3 Authority Key Identifier:
keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c5:12:d1:b3:a9:b0:da:a1:bf:ed:ef:2a:05:1b:ad:47:dd:
71:01:55:dc:00:93:d6:df:3d:09:0e:41:cd:82:92:9e:7e:e8:
42:29:00:c9:8e:3d:10:45:8b:f7:f4:58:03:e0:77:7d:40:4e:
0e:e0:ee:b4:b5:d0:00:3f:57:c0:5f:10:b1:c0:ba:7a:c5:e4:
76:4a:0a:fc:bc:d6:78:24:e1:ea:b8:86:ac:72:3d:74:29:6b:
8d:8a:0e:02:18:ed:b8:fd:7b:2b:e1:07:11:5d:7b:67:3d:8d:
28:db:9d:f0:93:1a:58:de:82:27:65:4c:60:47:8a:fa:05:96:
30:f1:dc:79:99:b4:b1:12:ea:40:97:b4:1b:49:e3:e8:fc:3c:
ba:f4:8a:e9:cd:8d:b5:c5:c8:1b:76:c1:bb:25:ec:2e:60:1b:
19:11:4d:29:bc:f7:94:55:d5:4b:98:fe:2e:da:92:2c:1f:cb:
5f:20:0b:39:b6:df:c8:44:73:cc:b8:56:1f:0a:ef:e4:3f:db:
d9:ff:5b:db:40:09:1f:74:ba:69:e3:18:26:b4:76:2a:8f:05:
ec:8d:a2:b0:ea:54:a6:b4:88:29:b4:50:5f:15:b3:d5:1f:c6:
b4:3b:be:c8:1f:d7:2d:3c:49:82:11:48:21:67:ab:5f:6a:a4:
2a:c9:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:16 2026 by rpki-client