
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json)
Hash identifier: Krvd4bYkWthFMX2Rz3VAONi38eWwWLKn2mVorW0To0s=
Subject key identifier: DA:AA:A2:86:A5:5F:F7:83:85:6A:91:3E:4B:AC:07:D1:F7:A3:AD:71
Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Certificate serial: 0A84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
Manifest number: 0A7B
Signing time: Fri 12 Jun 2026 19:37:49 +0000
Manifest this update: Fri 12 Jun 2026 19:37:48 +0000
Manifest next update: Fri 19 Jun 2026 19:37:48 +0000
Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: TqkeHuKrjvWd4BdgfQt+ISp6p5mhYbtZEewGKdum5uw=)
2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl
rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Validity
Not Before: Jun 12 19:37:48 2026 GMT
Not After : Jun 19 19:37:48 2026 GMT
Subject: CN=6a2c600d-eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:2c:46:65:f0:56:aa:b9:c0:e6:76:ef:35:
82:88:6c:b9:34:b9:e9:cc:7e:5b:df:18:53:72:0e:
fa:39:4b:89:fc:55:9a:eb:5c:0d:ed:f6:7a:d3:b7:
6b:04:62:38:bc:1f:6a:22:ee:b5:5e:67:73:ab:0e:
92:3f:f0:72:38:84:8c:60:4d:43:24:da:65:08:de:
fd:94:1d:82:80:25:b8:ac:e5:3e:61:c7:a3:6f:d0:
a8:2a:06:6a:04:40:4b:c8:fa:62:a6:22:f4:d3:15:
c2:b4:eb:7c:8f:54:e1:6e:82:6d:c3:5c:f2:c4:13:
3f:60:96:fb:95:c2:1c:69:46:76:50:8a:ad:0f:ae:
9a:06:b2:0f:e2:a4:53:34:2d:f4:80:d6:b5:25:cf:
67:71:f3:5f:e7:a4:83:62:62:79:42:85:63:11:c6:
2d:c3:9b:f6:d2:8e:ae:65:ff:8c:ea:50:11:db:47:
6a:d1:a2:36:23:c1:bc:06:a3:23:59:de:3b:72:6b:
6c:05:2b:5b:c9:f6:b4:24:fa:18:b7:5f:11:e4:00:
f9:94:64:67:df:4b:9a:8a:e6:2c:b0:be:5f:05:1c:
31:b6:85:a4:0e:b0:ea:99:85:81:01:8a:bf:90:50:
c8:45:b7:4f:49:dd:60:9b:2e:2b:07:29:c7:9e:f6:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:A2:86:A5:5F:F7:83:85:6A:91:3E:4B:AC:07:D1:F7:A3:AD:71
X509v3 Authority Key Identifier:
keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:80:91:4f:1c:56:c5:25:f0:92:bb:3f:b5:50:2b:56:2c:8f:
30:8b:21:76:64:e2:d8:e2:ac:48:f5:ea:c2:cd:6a:3f:28:2c:
f1:5e:bf:53:28:b6:fc:b0:0f:d5:fd:f5:bc:a1:71:5e:16:1a:
fa:3e:cd:1d:6b:d7:8e:0e:30:2f:31:58:13:91:cc:33:b4:24:
1f:2a:49:94:b2:c6:0d:91:c0:0b:75:ad:09:f0:5d:55:9c:63:
32:dc:04:bf:aa:17:75:50:b6:cf:2f:8b:b2:7a:21:94:94:b5:
3d:4d:d8:3e:6c:e1:ae:6a:e8:06:de:1e:77:4b:7e:03:7b:e6:
f7:12:35:e9:f2:a2:02:86:1f:93:5a:72:3b:d3:bd:0e:82:a5:
9e:c3:9b:ad:8d:0a:9e:d5:a7:dd:07:a0:00:4f:4e:ba:a5:17:
53:66:22:76:ea:d1:41:51:33:d5:c2:1c:5a:b5:c6:28:6f:c3:
96:75:c2:bb:56:22:4f:ce:44:e0:fd:17:39:1f:0f:b6:96:e9:
23:e1:44:05:9c:67:63:be:7c:c1:19:24:2b:33:dc:47:4a:38:
df:9e:a0:d1:b2:6a:a3:59:bc:72:d6:f5:7e:f2:16:66:8f:87:
8b:d5:7d:eb:f9:d3:f8:9d:9f:93:c9:c4:ae:82:f2:94:3e:70:
1e:c9:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:38 2026 by rpki-client