
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier: BopSmOj7m3D6nYAw7gnLA+FErW+CN11g8ZdOhDyebc0=
Subject key identifier: 1D:7E:68:82:42:6B:50:57:20:57:6F:E8:52:5B:23:C2:F6:1B:01:95
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial: 106C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number: 1062
Signing time: Fri 12 Jun 2026 17:21:48 +0000
Manifest this update: Fri 12 Jun 2026 17:21:47 +0000
Manifest next update: Fri 19 Jun 2026 17:21:47 +0000
Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: krjCKGIdz77he3FBTuZHxBUDqev2AUrOo9kraj0hkLc=)
2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4204 (0x106c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Validity
Not Before: Jun 12 17:21:47 2026 GMT
Not After : Jun 19 17:21:47 2026 GMT
Subject: CN=6a2c402c-3b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:58:dc:d0:1b:08:4e:3d:0b:da:0b:cd:00:
30:22:b0:0a:a7:e4:16:97:10:f8:a4:c9:24:7a:9c:
f1:d5:8d:6b:7b:24:f8:68:b1:86:2e:32:ec:36:e0:
86:d2:33:6d:ed:0e:a2:cb:9a:a4:be:81:44:0c:b4:
dc:21:44:9d:2d:57:6e:b5:6f:8e:82:09:f9:53:ee:
6a:57:a0:5c:e5:1b:d5:91:cc:91:ad:8a:c1:e6:e1:
bb:12:62:a7:82:04:f3:ed:a9:15:8b:52:fe:08:5a:
84:bd:5b:f7:23:41:ff:11:91:68:f3:48:92:16:fb:
5e:ea:a0:21:44:c4:6c:f2:39:a2:00:0e:55:a9:d7:
ae:4e:82:80:d3:83:cb:c8:44:4e:8c:5a:82:fa:49:
ee:aa:31:bc:3c:0f:4a:2c:ce:55:af:da:44:11:27:
78:c9:7f:fb:27:43:6d:32:ff:41:02:97:4c:36:a7:
15:45:1f:29:90:cb:1e:cd:82:99:bf:35:70:b5:af:
e1:e9:d3:ed:d8:0f:b6:e0:81:14:ed:86:7c:c5:82:
e6:b8:e8:e8:98:bf:b1:75:0e:32:83:89:7d:f8:32:
26:82:f4:d6:d4:55:6f:3b:f7:ec:b2:75:ce:22:2a:
29:f1:73:b0:9c:ec:c0:89:91:b1:1a:99:b2:93:e3:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:68:82:42:6B:50:57:20:57:6F:E8:52:5B:23:C2:F6:1B:01:95
X509v3 Authority Key Identifier:
keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:46:2d:2d:a5:a6:38:dd:0e:cf:06:e6:94:9e:5b:54:7a:
44:44:5e:d8:99:cf:10:fe:5d:4e:f2:68:ae:4c:77:e1:a0:0a:
04:1d:9d:3b:93:3a:26:36:77:19:f9:b0:85:b6:57:05:1a:2c:
86:74:36:32:c5:30:d8:33:65:4d:d3:56:b7:89:4a:f7:c3:9d:
b4:aa:cf:6d:67:b2:6d:a0:1b:1a:5c:62:ef:83:1c:13:1d:99:
fc:b9:8c:7f:17:11:3d:ea:d1:97:fa:a1:8d:34:82:92:b9:bb:
f5:68:f9:38:49:82:6d:99:fa:23:bd:34:2c:35:43:e3:81:38:
ce:c7:55:e2:81:ef:42:e9:38:bb:e8:29:8d:2e:65:dd:45:e9:
aa:1a:bf:bb:49:b1:50:89:be:6d:46:55:9b:96:fd:c6:5f:9e:
2a:70:1f:be:52:09:1b:d1:98:29:b5:fa:92:8e:a8:e7:62:9b:
8b:c7:6b:de:e8:68:e2:7a:a4:85:94:e9:ab:a0:10:2a:f0:73:
fb:14:d3:23:e3:29:f0:73:4d:59:9f:97:78:c3:e7:3e:66:bd:
af:23:9a:c5:33:1e:08:be:1e:4e:14:64:26:14:e9:4c:a3:49:
57:b9:97:18:3f:e8:85:1d:1d:cc:8b:91:ef:33:0a:50:b2:b6:
ac:3f:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:58 2026 by rpki-client