
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: WpHpncdbfIORIIgzJrqCLiSe9MRNhxmJ5LCYRUEYkz4=
Subject key identifier: 62:DB:74:4A:1B:2A:A6:EA:60:19:1E:65:6C:88:3D:30:D9:F8:37:60
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 0121
Signing time: Wed 29 Jul 2026 07:08:31 +0000
Manifest this update: Wed 29 Jul 2026 07:08:31 +0000
Manifest next update: Wed 05 Aug 2026 07:08:31 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: qy0cHYOLxIiY+GlSW/+9gBKBoTorb3wwBNYy7Yl+VgU=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jul 29 07:08:31 2026 GMT
Not After : Aug 5 07:08:31 2026 GMT
Subject: CN=6a69a6ef-7826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:ec:9d:46:be:1b:b8:a5:bb:32:85:a3:58:
66:1e:f1:1c:2c:a0:e9:ae:de:e2:fa:4a:c9:c0:e7:
ef:cf:67:c0:a2:b7:71:10:ed:71:ca:d7:85:eb:e4:
c6:5f:04:0a:1c:7f:74:ff:19:d4:42:6e:f7:43:82:
fe:f6:6c:a9:f2:24:88:6a:99:06:7d:4b:7f:73:34:
39:ae:94:04:5b:8c:35:7a:07:34:20:e0:c6:62:f7:
38:71:f3:8a:2f:be:17:e7:ab:4f:3e:eb:55:5c:d0:
80:2a:4c:7c:7c:2c:bf:93:eb:9d:16:34:4b:61:1b:
c6:42:7b:44:1c:8e:8d:a2:5b:1e:90:88:6b:cb:90:
76:9d:51:ac:6d:74:77:53:c2:3d:0f:ab:ea:1a:b6:
8e:34:b1:a1:cf:e4:e7:04:f9:b2:6a:0a:4c:16:2d:
c4:f9:c6:92:2c:6a:55:6b:c6:65:53:62:df:a1:30:
e5:a4:13:52:b2:18:1d:76:b2:60:d8:c0:bf:33:bb:
a3:aa:0c:c1:c5:4f:f4:3a:78:d3:37:4e:46:04:0d:
f5:eb:07:a7:17:55:c4:87:f8:d6:55:5b:1c:ab:e5:
6a:e3:00:14:e7:27:5a:68:0b:0d:c3:3b:ec:82:de:
1d:a7:e3:d3:eb:4f:41:23:32:ec:f2:8e:fd:46:35:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:74:4A:1B:2A:A6:EA:60:19:1E:65:6C:88:3D:30:D9:F8:37:60
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:8b:5b:9f:f4:46:53:30:e6:15:74:de:0a:cb:27:77:c2:65:
91:39:25:10:2c:c5:95:20:eb:57:26:dc:ea:88:d8:e7:05:7d:
4e:22:db:78:e6:1c:17:ee:7f:af:bb:7a:93:41:5a:6a:81:e3:
e6:df:e7:3f:6d:fd:5d:85:6e:ef:58:2f:c5:02:56:cf:65:4a:
73:e9:68:84:c4:ea:31:e3:12:29:53:31:b2:09:02:ac:2d:3c:
bd:12:95:1b:89:62:fc:65:1c:b7:d7:63:ff:fd:43:9f:bb:b8:
df:eb:16:5c:24:7d:29:6a:4e:4d:88:28:d1:48:ec:7c:0a:71:
6d:81:96:7c:d4:41:9c:2a:5e:2d:25:68:9b:f8:fb:5e:1b:8d:
5f:87:b4:62:49:2e:f6:74:45:58:41:94:c8:63:0e:0e:6c:25:
3b:7c:45:c5:89:fd:22:24:4b:46:06:69:93:28:ba:45:77:39:
c0:c3:d9:08:6f:e5:e3:d0:ca:4e:a0:79:d9:50:71:c4:15:38:
4a:97:ac:a7:e8:e1:df:99:9d:0f:8e:07:30:f0:47:ab:b5:9b:
c0:dd:ef:db:a9:00:6b:59:aa:76:1b:de:dc:1c:79:76:cc:dd:
82:11:d5:09:05:fe:a3:c9:a9:61:b1:aa:8f:77:03:d4:5f:b4:
c3:c3:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:02:00 2026 by rpki-client