
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json)
Hash identifier: JCq1YUazBbsH0bhxMeSRCB1iVI2patGVewhg4oSMd8s=
Subject key identifier: 68:60:91:0A:75:36:80:3F:21:33:9C:FD:0B:98:C9:CA:A9:B6:3F:0B
Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0
Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
Manifest number: 50
Signing time: Mon 27 Jul 2026 10:39:47 +0000
Manifest this update: Mon 27 Jul 2026 10:39:47 +0000
Manifest next update: Mon 03 Aug 2026 10:39:47 +0000
Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: OH/WpYdw1Z+HITdddnOFzlPKgAtz8YUhe4UY6IM3owU=)
2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl
rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0
Validity
Not Before: Jul 27 10:39:47 2026 GMT
Not After : Aug 3 10:39:47 2026 GMT
Subject: CN=6a673573-4be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:57:23:3a:e2:37:90:f5:27:12:73:cb:24:
40:2c:d7:99:e1:80:30:85:08:04:eb:28:c7:fb:20:
e9:e4:7d:ac:4c:cb:77:76:10:a9:6d:68:36:0e:6a:
e4:f7:ec:c1:27:69:0a:a6:50:79:00:06:10:8b:42:
18:a5:7d:84:0e:fa:c1:b0:c9:6e:b0:61:1e:28:76:
f9:5f:2d:31:34:c2:35:30:0b:8f:49:b4:78:69:cd:
6b:ed:c9:ab:c2:15:fc:00:0d:82:4f:36:d6:71:b7:
24:38:e8:96:07:ec:6c:a8:a3:c8:0a:8e:80:67:f2:
67:ad:c6:19:2d:3f:28:6e:a1:85:a5:f3:3a:30:20:
5c:ea:6f:6e:6b:cc:7c:4c:23:37:5e:ac:e5:6e:d0:
0e:b5:cb:37:39:ed:4e:4e:78:74:d9:82:15:e8:ad:
b3:f7:c3:20:e9:1c:2d:41:c4:af:69:d0:4c:f4:74:
1a:b0:74:c5:14:e7:f5:bb:ad:3f:54:f8:d3:86:e4:
ae:dc:20:0c:fc:17:dc:23:f4:98:11:e0:7e:de:59:
21:67:9a:ba:89:c4:b8:3b:19:8f:cf:e1:2f:0e:05:
74:46:15:28:8e:57:02:08:a3:e9:f4:3d:72:f1:83:
83:62:05:58:fe:65:7e:f5:9b:61:92:ac:9e:a4:97:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:91:0A:75:36:80:3F:21:33:9C:FD:0B:98:C9:CA:A9:B6:3F:0B
X509v3 Authority Key Identifier:
keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7c:f1:e5:b2:3b:30:44:06:79:ac:f5:5d:ef:d7:72:0f:3b:
f6:a7:6f:c1:90:6f:3a:b7:73:73:cc:89:72:cf:2a:bb:4d:8a:
59:eb:7e:2a:22:f3:79:cf:07:bc:14:13:1f:5a:63:74:45:de:
01:72:f5:0a:0c:4a:75:65:6b:05:f9:b0:1c:81:dc:d8:f4:a6:
e5:37:e1:8f:dd:54:eb:ba:fb:41:30:45:15:3f:5e:a6:f5:10:
90:ca:ec:03:a9:7b:88:de:db:10:f3:31:6e:22:ba:a0:68:7a:
c5:44:82:53:b9:ca:b7:16:23:6a:c9:53:23:24:d9:15:33:46:
f9:17:30:40:00:ba:5d:84:a3:6b:5a:2d:76:f0:5f:86:ea:87:
7d:f9:f8:b3:85:8b:b4:69:75:e3:81:ca:9a:0c:a2:08:08:fd:
89:7b:4b:df:02:56:57:ba:e7:3d:2c:aa:7a:77:a3:e9:99:d8:
51:e6:67:02:f9:64:b1:ef:9f:c7:58:0d:34:dd:da:96:e8:7e:
02:ec:8a:b9:e9:32:da:56:d9:d7:bb:d7:9d:83:21:4e:12:81:
6f:22:42:47:97:8d:58:e1:cf:07:74:cd:ab:3f:71:2d:3d:da:
5d:7a:f5:d9:0d:20:66:57:08:f7:df:a0:be:f8:74:fd:eb:8c:
64:66:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:17 2026 by rpki-client