
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier: VN9Yv6443yPw9lvb4/dON14n3h4y1FQGydiDXAQexy0=
Subject key identifier: B7:C8:4E:39:5B:B3:F2:74:87:AE:9B:8F:71:BA:19:E7:46:DA:C7:C5
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial: 0338
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number: 0319
Signing time: Sat 13 Jun 2026 01:13:51 +0000
Manifest this update: Sat 13 Jun 2026 01:13:50 +0000
Manifest next update: Sat 20 Jun 2026 01:13:50 +0000
Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: 1gVsXPaULvt1EJEBm16CHd/rTmEJ+r/s67b+eb5id8w=)
2: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=)
3: E1870478616C11F0A254E10BC4F9AE02.roa (hash: thzu/t+qYSRYUbFk3e1FVK1vtAgWZIhclmN6XWz4ZNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Validity
Not Before: Jun 13 01:13:50 2026 GMT
Not After : Jun 20 01:13:50 2026 GMT
Subject: CN=6a2caecf-b5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:b8:92:83:d4:0c:69:53:56:35:c9:23:ed:
16:22:5f:b3:7a:3e:ea:ff:bd:c1:45:1c:f5:63:87:
0d:22:e2:b3:b8:d9:bd:a0:67:c2:e5:e9:46:3f:d2:
f6:8c:3c:47:bd:34:1f:5e:a1:1a:30:9a:13:7e:60:
67:f8:0c:4c:97:d5:2f:16:5a:7e:da:7a:4c:c4:fd:
4f:c9:ab:63:23:fc:1a:77:61:2a:3c:8f:16:34:75:
ef:56:d5:21:87:4b:d3:35:5a:4d:93:fe:e6:fc:c9:
d0:33:fb:4a:57:bb:56:85:15:97:b8:c7:53:5f:6a:
4b:5b:31:b1:c0:57:94:9c:54:a4:a5:1a:ef:cb:5b:
42:b8:65:a0:cf:d4:b1:b7:98:cc:a0:15:10:27:a3:
72:06:10:90:9d:74:e2:70:36:83:f3:f8:31:47:f7:
b2:4c:23:3e:0f:bf:c0:54:3f:71:24:af:1e:70:62:
70:c3:22:63:4e:00:62:46:2c:19:49:c6:14:f4:1c:
b9:e4:27:c8:3d:8f:44:0b:8c:6f:a0:e2:f9:4d:46:
09:3a:71:e7:88:a7:ff:15:25:df:a6:55:44:1e:d0:
e6:94:72:87:3c:da:59:49:5e:d0:6f:5f:2b:71:30:
28:5f:31:8e:1e:84:85:eb:4b:83:90:66:e6:45:f5:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:4E:39:5B:B3:F2:74:87:AE:9B:8F:71:BA:19:E7:46:DA:C7:C5
X509v3 Authority Key Identifier:
keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:1c:10:5f:48:e7:a3:3c:a5:c7:9a:6f:a0:f9:f3:e5:d6:
90:3e:cc:e1:d3:ac:b2:89:88:02:cd:2b:30:95:61:00:93:14:
74:b0:59:ac:44:9d:67:f1:ce:ee:a3:9f:ba:79:24:2c:5d:ff:
0c:6f:84:7f:f7:ee:90:8f:fd:83:35:eb:0f:4a:8d:a5:c6:e9:
a6:05:e2:64:a9:2a:9b:66:2f:91:e2:8d:a2:0e:1a:fe:83:d9:
58:4a:05:02:6a:a2:ef:e5:4c:78:c5:55:06:a6:2b:b8:f5:bb:
6b:7f:75:c1:db:ff:27:94:49:b3:88:e8:4f:22:2d:4a:5e:a1:
f0:dc:4a:8a:3a:aa:46:ac:02:25:31:0c:0a:8e:98:a2:dc:52:
ea:9a:19:93:d5:1a:9e:f6:d6:64:13:e9:36:42:a3:04:d6:92:
81:57:5e:cd:38:14:11:4e:53:1d:56:f8:ed:56:cc:e5:08:00:
8a:82:f5:e4:4c:bc:f2:22:86:34:01:62:f8:ea:68:85:aa:4c:
ad:ef:ec:a7:d8:b6:aa:91:ab:71:6b:bb:3d:bf:ca:55:1e:3d:
cc:60:be:f4:9b:f9:84:91:38:40:07:73:a8:96:43:97:e6:8a:
e5:e3:0a:09:c2:12:27:85:cb:42:d8:79:9c:88:13:3d:73:28:
01:35:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:03 2026 by rpki-client