
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: COiiRrB9eFncFHQGqflOTo34cKXSBT5TvVCdmQC2Jao=
Subject key identifier: 2E:B4:89:BE:15:C1:C0:D7:7D:52:0B:3F:89:FE:56:5C:A3:44:0C:3F
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: 017D
Signing time: Thu 05 Nov 2026 05:32:00 +0000
Manifest this update: Thu 05 Nov 2026 05:31:59 +0000
Manifest next update: Thu 12 Nov 2026 05:31:59 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: goJOysm4ZGlA42k1UCVDukA8ZcV0mMk5iYrnSJBrBNI=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Validity
Not Before: Nov 5 05:31:59 2026 GMT
Not After : Nov 12 05:31:59 2026 GMT
Subject: CN=6aec14d0-5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:58:31:29:46:c6:c4:87:ad:49:2c:5f:75:
b4:5d:35:a6:a5:70:08:82:11:3b:9e:8a:d9:e4:68:
84:71:d6:e2:bc:46:c8:9e:c4:6b:af:c7:c4:77:e4:
34:e9:3f:24:20:12:2f:31:f8:04:fb:a0:9c:5b:bd:
e8:18:ad:1a:ee:19:b8:36:9a:5d:aa:0f:cf:aa:ea:
f3:b8:a1:af:5b:61:1f:eb:86:b5:e6:ac:81:d9:bc:
5b:dc:84:3b:e8:6d:a6:28:81:9a:11:6f:17:59:ca:
ee:94:b7:04:56:82:a2:53:b2:41:5f:7c:15:f6:fd:
00:a4:7f:47:b1:ce:96:34:8f:0a:12:19:bb:d8:4c:
b2:c7:87:f1:18:45:ae:50:00:15:a5:3e:4c:4f:45:
ba:92:24:59:47:c5:45:80:f1:e9:13:e2:76:a2:23:
9b:1f:09:1a:f7:b0:15:cf:4e:c0:7e:8d:e6:ba:71:
1a:4c:d4:8d:ec:52:a3:70:e7:11:e7:d8:e2:df:83:
b6:05:f8:ac:6e:e4:10:0e:e1:77:eb:8d:df:a0:df:
d5:2e:67:a1:65:0b:79:b5:46:be:d1:ef:95:6d:d1:
c0:a6:59:f8:b5:23:2e:67:79:fc:de:5d:36:d3:b7:
bb:29:9d:2a:36:f7:2a:a4:0b:22:4c:c6:f2:58:0f:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:89:BE:15:C1:C0:D7:7D:52:0B:3F:89:FE:56:5C:A3:44:0C:3F
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:83:2e:40:5d:5a:a1:c9:1f:7a:74:02:90:87:37:48:56:42:
78:ae:85:2a:ac:2d:60:80:fb:53:b8:f4:8f:eb:bf:5c:76:db:
86:46:39:72:ae:55:6f:69:c1:14:96:9f:c2:a1:98:49:be:1a:
9c:4d:5d:dc:b6:3c:4e:7f:d9:79:b7:53:df:06:73:2e:54:b6:
eb:d4:88:1e:51:70:e8:a7:94:54:ab:23:8e:02:58:0d:0e:d4:
d6:e4:5f:bd:09:a5:ee:2e:a4:0a:2c:33:95:c4:37:12:cc:77:
1f:37:33:92:e0:81:de:0b:f2:4a:07:76:18:4a:f4:d6:4f:dc:
e0:8e:39:cd:63:3d:86:c6:92:2e:03:4c:50:b6:9f:34:45:fe:
dd:02:3d:c5:2d:5b:49:f4:7d:f5:e0:5e:d5:bc:8c:ed:4b:99:
5d:96:fb:20:e4:58:8d:20:e3:26:51:e2:d1:74:cb:38:a1:f0:
9a:0a:cc:52:e4:a6:e6:3b:16:fd:49:e1:05:2c:3b:31:9b:a5:
e8:07:b1:18:76:0d:c6:c5:01:3c:16:ec:d5:94:0c:f6:3a:fe:
ff:fe:fa:01:2d:69:0e:85:29:b6:71:8d:46:fe:58:7e:8b:2c:
25:65:98:8e:91:6d:79:8a:12:5a:d9:1e:4e:e2:49:ae:3b:4b:
71:bf:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:52:18 2026 by rpki-client