
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: e+V4yes20zn9rkH+Girb8CB6AG8FRZrQq6xClmHOyGE=
Subject key identifier: B7:98:1E:E3:14:FA:D6:2D:E9:42:4A:46:DE:47:C7:24:CB:F0:35:B6
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0BA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0AE1
Signing time: Fri 12 Jun 2026 19:42:32 +0000
Manifest this update: Fri 12 Jun 2026 19:42:31 +0000
Manifest next update: Fri 19 Jun 2026 19:42:31 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: BkUvoShC7aRYc/dr+vv9sB2mcdMHXeVh8HQnt7qHbCY=)
2: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
4: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Jun 12 19:42:31 2026 GMT
Not After : Jun 19 19:42:31 2026 GMT
Subject: CN=6a2c6128-491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:e6:94:72:a8:ff:62:df:6c:11:bd:23:54:
d9:30:15:3b:0a:36:d8:85:8c:65:02:d6:93:4d:3b:
27:ff:e1:44:51:d1:21:47:e2:79:f9:ce:ac:7c:68:
2f:59:35:5c:84:72:4e:ec:1c:b5:8b:eb:40:7c:05:
46:c0:8a:67:4b:21:b9:1f:9c:cb:b4:44:40:9c:9d:
52:32:22:07:76:3a:5a:11:02:9d:bf:aa:0b:d5:04:
75:7a:41:3b:53:70:d4:28:09:37:a0:d3:66:04:86:
14:2b:34:72:af:07:e0:ac:a6:f5:af:4a:5d:b0:fb:
08:38:ef:09:f1:c9:40:6b:4c:61:53:5d:7f:57:88:
41:37:46:80:a8:d6:46:c7:90:2b:e7:00:19:10:6e:
49:3c:41:32:0f:08:f9:3d:b9:47:ee:6f:86:43:38:
d6:6d:49:17:ea:49:af:2d:97:c6:6a:90:43:cd:78:
e0:58:45:7c:a4:43:03:db:17:d9:48:2d:50:2d:3f:
43:97:8f:cb:83:db:f5:10:50:8a:9b:27:c1:11:92:
da:27:f4:ec:0b:64:0e:46:08:4d:13:0a:06:c9:f2:
21:35:fd:48:4b:4a:ba:fc:0b:f9:fe:2e:02:98:36:
84:fb:bb:65:38:a7:d0:f3:df:68:f4:97:64:5e:44:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:1E:E3:14:FA:D6:2D:E9:42:4A:46:DE:47:C7:24:CB:F0:35:B6
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:bc:24:40:76:e5:42:d4:9c:db:80:65:5f:ec:8c:71:70:f5:
d6:f4:d6:47:90:66:3a:18:c8:03:6c:01:5c:06:79:eb:a6:a7:
6c:e5:b6:bb:65:a9:b4:7a:09:3f:de:1b:ff:0f:ac:d8:2a:f0:
22:09:b8:db:c0:f8:b1:ed:7f:df:3a:81:ff:15:f9:d2:4c:1c:
26:e3:a2:c1:d5:51:f9:af:6c:2f:84:26:3e:a1:ac:fb:1f:5a:
c6:71:b6:d4:23:da:8f:73:e9:7e:c6:46:c9:0a:8b:44:ef:19:
7f:4d:35:1a:30:1e:ff:f0:27:4f:35:98:b9:df:96:a8:34:1a:
3f:cf:86:31:fc:e3:e1:c4:47:a6:e1:7f:05:f4:5f:db:ce:98:
6f:e9:b0:17:b1:1f:13:5b:21:a7:cc:e1:8a:99:19:3b:8f:2f:
3e:ce:5a:8b:9d:41:45:a3:c5:bb:52:2c:ca:d0:2d:8a:3f:2b:
21:fe:95:3a:09:14:90:48:c3:79:e6:cf:ee:22:d5:95:e4:fb:
cf:99:bc:ce:71:10:81:c8:70:d4:22:67:7f:04:9d:d1:9b:c3:
02:03:fc:02:fe:31:ae:9d:34:a4:28:83:1d:a2:42:cc:65:96:
20:82:e6:73:fd:86:35:0b:24:f6:07:e3:60:34:d5:a9:df:e3:
be:e7:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:54 2026 by rpki-client