
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier: yja1SQnskRvvV4SZ5V/9LxSTV/JoguVB2fPc/6bc3Jc=
Subject key identifier: 18:4A:24:A2:D9:9B:50:04:06:3B:9D:21:D5:FC:C4:A9:29:E4:62:33
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number: 0CFC
Signing time: Tue 28 Jul 2026 18:36:55 +0000
Manifest this update: Tue 28 Jul 2026 18:36:54 +0000
Manifest next update: Tue 04 Aug 2026 18:36:54 +0000
Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: kBrZT+DdWNQyXWqxca8y+jFdBn/ftTlOT7QdYNvcf0k=)
2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Jul 28 18:36:54 2026 GMT
Not After : Aug 4 18:36:54 2026 GMT
Subject: CN=6a68f6c7-b8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:fb:82:68:a3:cb:97:9f:80:b3:6f:1c:ed:
41:56:71:3a:69:f3:25:b7:ee:d3:2c:dc:0d:d5:b6:
3a:4f:93:9f:3e:ae:a3:01:db:54:0b:a4:d9:b6:29:
87:a6:11:3c:de:be:ab:b7:4f:df:01:93:7c:96:8e:
59:e6:7e:04:fd:bc:23:05:ad:29:1d:9d:4f:9d:b2:
db:03:16:f6:46:eb:9a:95:25:a2:98:7f:87:83:43:
4e:3c:13:d7:94:99:9f:3b:fb:76:21:19:42:c7:07:
10:6b:f5:55:bf:c6:14:a5:e2:8a:34:d5:61:f4:6f:
34:73:75:11:ae:bb:58:af:c4:87:27:2f:1b:8b:c3:
ad:57:fe:e4:08:0a:f2:c9:d0:97:6d:ca:41:b7:77:
77:1a:67:94:db:1d:63:d0:a2:2b:02:78:57:3e:42:
7c:e6:7a:43:de:b8:11:dc:aa:e4:72:06:bb:10:23:
17:ee:42:43:20:97:48:60:2b:9e:2d:b0:cf:c9:1f:
a4:d6:cf:88:07:b0:94:19:c6:6d:76:1b:15:c6:fe:
27:22:00:ae:b9:cb:fc:ed:89:c7:26:74:4d:fd:01:
d7:0f:e2:0d:1a:15:79:4e:d6:1a:8c:da:6b:87:35:
fa:27:e3:72:95:3d:bd:7d:63:65:9f:22:1b:dc:b2:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:24:A2:D9:9B:50:04:06:3B:9D:21:D5:FC:C4:A9:29:E4:62:33
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:65:98:69:8d:46:19:e0:53:15:4d:6d:04:f2:07:f5:15:
3d:7e:44:9a:ef:a9:ad:d6:b7:7b:b5:3c:4e:aa:c3:fc:d5:7a:
11:68:42:f5:6a:a7:63:ff:ff:c4:e2:11:32:62:a3:fb:18:56:
9a:35:c5:66:3d:db:8e:cc:90:56:e7:d8:f0:ee:98:5a:16:22:
84:b8:d5:d2:ab:b6:77:a3:52:0e:b5:8e:94:da:bd:8f:99:c5:
6e:36:c4:1e:eb:2a:ea:cd:e9:ef:37:86:58:f0:c6:c0:b3:c0:
bc:25:27:80:79:5b:fb:8f:e2:01:be:65:24:e6:0c:d4:98:1b:
cf:39:74:13:ed:c6:52:c3:4e:e1:e6:02:90:7d:a3:81:1c:bf:
a6:c8:5c:d8:b0:5e:53:09:79:fd:76:99:fa:e9:a2:85:d3:c7:
ac:46:22:1b:9b:5d:06:37:c7:01:72:51:ad:44:af:e5:9a:b9:
38:cb:d1:97:fd:9b:e8:fb:98:aa:f0:f1:bb:df:fd:17:72:d7:
30:fc:6c:1d:25:a6:6a:f0:dc:17:0e:19:39:4d:e1:5d:df:d4:
7f:17:3b:48:7c:8f:b5:bd:8a:3e:42:11:52:29:ae:9a:d2:73:
6a:50:23:6f:de:b9:3b:10:6a:d9:70:a0:b0:ed:a2:31:25:0b:
b7:de:22:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3
NDkwQjBBQjkwHhcNMjYwNzI4MTgzNjU0WhcNMjYwODA0MTgzNjU0WjAYMRYwFAYD
VQQDEw02YTY4ZjZjNy1iOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6T7gmijy5efgLNvHO1BVnE6afMlt+7TLNwN1bY6T5OfPq6jAdtUC6TZtimH
phE83r6rt0/fAZN8lo5Z5n4E/bwjBa0pHZ1PnbLbAxb2RuualSWimH+Hg0NOPBPX
lJmfO/t2IRlCxwcQa/VVv8YUpeKKNNVh9G80c3URrrtYr8SHJy8bi8OtV/7kCAry
ydCXbcpBt3d3GmeU2x1j0KIrAnhXPkJ85npD3rgR3Krkcga7ECMX7kJDIJdIYCue
LbDPyR+k1s+IB7CUGcZtdhsVxv4nIgCuucv87YnHJnRN/QHXD+INGhV5TtYajNpr
hzX6J+NylT29fWNlnyIb3LIqvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhKJKLZ
m1AEBjudIdX8xKkp5GIzMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy
RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD
cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK
Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ31lmGmNRhngUxVNbQTyB/UVPX5Emu+prda3e7U8TqrD/NV6EWhC9WqnY///
xOIRMmKj+xhWmjXFZj3bjsyQVufY8O6YWhYihLjV0qu2d6NSDrWOlNq9j5nFbjbE
Husq6s3p7zeGWPDGwLPAvCUngHlb+4/iAb5lJOYM1Jgbzzl0E+3GUsNO4eYCkH2j
gRy/pshc2LBeUwl5/XaZ+umihdPHrEYiG5tdBjfHAXJRrUSv5Zq5OMvRl/2b6PuY
qvDxu9/9F3LXMPxsHSWmavDcFw4ZOU3hXd/Ufxc7SHyPtb2KPkIRUimumtJzalAj
b965OxBq2XCgsO2iMSULt94iLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:25 2026 by rpki-client