
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier: 77RgSfZlVL15Uf2+rKFQEN3NOSF8CScQlIYkZFRwr0E=
Subject key identifier: B5:32:09:9A:17:DC:E6:8F:87:3E:1A:71:6D:D6:2C:50:91:87:B6:C1
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial: 0D2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number: 0D24
Signing time: Fri 12 Jun 2026 18:04:36 +0000
Manifest this update: Fri 12 Jun 2026 18:04:35 +0000
Manifest next update: Fri 19 Jun 2026 18:04:35 +0000
Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: j2NLtT5bw0eNlIxQNwnRn2iujORRgMgbfCAKeV6xJBU=)
2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: RiwHeRk8VWcBAazIYgTzPI1hQB18IPCOX+XKmTtPU4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Validity
Not Before: Jun 12 18:04:35 2026 GMT
Not After : Jun 19 18:04:35 2026 GMT
Subject: CN=6a2c4a34-fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:d4:8d:77:43:60:c3:d9:9f:1a:da:be:1d:
de:58:70:09:70:00:e7:46:11:de:c5:91:c2:0c:87:
45:a4:b0:1b:08:e2:af:f2:c9:54:3f:e1:8d:93:c0:
f7:7b:a9:f8:7f:3e:a8:44:21:fc:34:1f:cf:16:e3:
e0:e9:d6:c7:98:9c:32:2d:8e:f4:ff:bc:fb:96:86:
31:1c:e8:a1:07:56:74:8a:a1:29:d0:ca:88:89:72:
b2:66:28:da:33:4d:0f:c7:40:a3:a1:a4:e4:d9:e7:
85:31:90:4d:f4:ea:ca:80:da:d3:39:0b:4c:90:23:
ff:0b:a5:98:9d:7b:95:8a:dd:73:8b:ed:7f:ae:9f:
b3:89:6a:55:7f:c9:55:bf:5e:e1:c5:24:90:91:f9:
43:2a:d6:43:8e:40:2b:ac:7d:0c:38:58:6e:37:f2:
95:4d:15:34:34:59:80:e2:0f:dc:37:32:d5:69:26:
0f:9a:37:a6:c3:99:24:21:a6:5c:4d:8c:d8:93:2b:
fe:cd:b7:a7:a0:86:9b:a7:c4:f0:b3:ba:d9:31:31:
d1:e3:53:3e:f8:5a:37:58:ff:3b:e4:92:c2:e7:4d:
72:7e:c0:7c:d4:73:90:9c:38:a1:cf:91:ce:ad:6a:
3a:1f:ae:de:8d:02:a8:f3:cb:03:4e:0c:c7:f8:65:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:09:9A:17:DC:E6:8F:87:3E:1A:71:6D:D6:2C:50:91:87:B6:C1
X509v3 Authority Key Identifier:
keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e9:f2:f0:4d:83:20:82:f3:c6:4c:88:46:c2:ea:61:34:e7:
b5:47:ea:fe:cf:0b:63:75:dd:3e:db:60:27:77:f8:37:39:77:
73:a6:8e:c5:02:a4:06:44:17:2d:aa:c5:6b:cd:c0:98:30:15:
92:af:85:9d:29:43:14:c0:b2:f9:a3:69:e8:bc:d1:ee:be:2d:
b9:8c:68:21:4b:1c:32:0b:70:33:4f:c3:25:37:78:92:01:d6:
62:08:52:b0:e8:0b:c7:9b:83:70:e1:08:e7:bb:54:b0:82:18:
c7:61:59:2b:2d:cc:d0:be:2e:4c:70:de:e5:46:97:9d:e9:e2:
d8:67:4f:95:24:e6:38:41:b7:a6:64:3e:77:2f:10:b0:43:2e:
ee:c3:0c:63:31:b7:16:74:30:8e:14:c8:95:11:ef:41:1a:b9:
3a:e1:5c:6b:f0:62:ac:4c:d5:15:2e:6a:37:15:b2:bb:ce:a3:
a6:53:15:31:cf:c8:29:24:42:2a:f6:e1:2b:c5:11:e2:7e:1f:
18:50:03:10:a8:1b:40:d4:68:49:b9:cc:aa:a9:9d:68:f9:74:
00:10:32:ee:60:4d:a1:df:4d:67:4e:86:ee:14:3b:17:c8:e7:
a0:73:17:fd:11:68:ee:c9:37:fd:d6:16:bd:52:2e:9d:04:3c:
7b:e0:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:58 2026 by rpki-client