
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: oHSOkltJ+8TxgbRIP8bicclwpHccQ88y0G3vA3+lS1Q=
Subject key identifier: 17:4C:F6:4E:34:D7:89:D5:FA:9F:CE:61:B1:53:BB:1B:26:6D:49:A0
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0AF8
Signing time: Tue 28 Jul 2026 19:57:15 +0000
Manifest this update: Tue 28 Jul 2026 19:57:14 +0000
Manifest next update: Tue 04 Aug 2026 19:57:14 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: VQxv16hs4AXtTHN1/3mlQgPSmw5w4czv13CNMdbA8no=)
2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
4: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Jul 28 19:57:14 2026 GMT
Not After : Aug 4 19:57:14 2026 GMT
Subject: CN=6a69099b-9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:72:9a:f8:a5:e4:0a:fc:76:bf:35:0e:aa:
89:26:41:34:37:78:d8:5c:e8:42:8e:00:f1:2b:71:
90:87:7a:7e:1a:59:bd:33:10:14:a1:b3:ae:01:f2:
dc:bf:70:70:5e:7c:14:d2:77:41:04:35:c2:7f:d3:
fa:8c:9b:96:b0:28:01:a9:4d:e9:b8:dd:8c:82:d6:
58:74:28:8f:17:fa:b1:4f:51:f9:3c:06:82:07:2e:
0b:07:80:66:f3:8c:fc:af:a8:ed:98:b3:4a:68:31:
d6:49:3a:ad:1c:04:c9:b1:d2:25:4b:8a:b9:8c:25:
b6:57:0c:60:23:53:8b:8c:8b:42:9c:11:10:97:f6:
22:32:35:5d:db:8d:9a:07:bf:cc:70:51:96:76:e2:
80:9a:b4:35:25:db:d1:7a:52:78:c8:1b:b2:b0:03:
d3:ee:67:23:91:5e:61:2d:06:26:ca:ec:5c:11:37:
88:ba:c6:74:72:6b:90:9a:80:7d:d8:9f:52:0d:b7:
7c:83:55:ee:7c:30:57:0a:d3:97:42:ce:45:52:d2:
db:b0:7a:86:2b:c7:d9:3e:96:c4:f7:69:ae:22:01:
24:b7:89:a5:05:61:8d:28:df:2c:87:8f:b5:a0:a7:
30:af:b5:1f:96:6d:00:6f:bd:b3:fb:39:7a:14:0a:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:F6:4E:34:D7:89:D5:FA:9F:CE:61:B1:53:BB:1B:26:6D:49:A0
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:b6:b2:73:7e:76:93:5a:94:b3:ce:cf:08:05:ba:28:ad:
f8:7f:75:22:7e:60:6d:ca:06:5e:8d:c7:db:e0:ce:14:02:94:
e6:fe:2b:3e:b3:b3:c9:61:a7:54:e0:b4:94:66:7b:78:83:b7:
96:bb:11:7d:69:30:8f:76:eb:1f:c9:3e:5a:74:b7:fd:b0:97:
bb:b0:d2:6b:43:d0:03:fb:b1:96:e8:b2:8d:c6:72:73:0f:f4:
d6:e5:ea:40:4f:17:7c:c6:14:ac:8e:52:0e:54:f5:24:bd:40:
da:02:0b:47:16:8a:96:1c:f3:1f:8d:ab:6f:bd:0a:de:75:5d:
7c:cb:55:32:c9:97:a9:b1:15:a7:29:d3:1c:d3:b8:49:fe:08:
2c:68:6b:79:54:66:7e:38:c9:f5:b4:ae:45:bd:b6:c2:16:a9:
3a:d9:89:48:c1:e3:88:80:e7:c6:85:89:89:61:5d:c5:86:07:
94:f6:14:b4:44:6f:d9:48:08:75:23:f8:07:87:39:c4:59:1c:
02:5d:87:0d:b4:3a:0d:bf:1e:93:19:68:55:75:d5:35:2e:8f:
15:ef:e2:64:e1:e0:86:8e:85:b4:c5:3a:84:d8:8d:ce:50:de:
4b:21:08:57:e3:76:11:fb:f8:e1:09:de:d3:32:a0:3b:a2:f6:
5d:f3:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:23 2026 by rpki-client