
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier: wQBJzVl9zMix2PQy9Puoi/qGinPhRTWR06Qt965OtXU=
Subject key identifier: 11:F7:F6:31:90:EF:D3:A5:AC:58:23:9E:C2:C1:EC:3E:76:05:0E:1F
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial: 0D62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number: 0D57
Signing time: Sun 20 Sep 2026 18:00:12 +0000
Manifest this update: Sun 20 Sep 2026 18:00:12 +0000
Manifest next update: Sun 27 Sep 2026 18:00:12 +0000
Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: ORC6QxcI0ym0J1rlK7XWVLXqyJr8oKVkcp+qEb6cJ2I=)
2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: RiwHeRk8VWcBAazIYgTzPI1hQB18IPCOX+XKmTtPU4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Validity
Not Before: Sep 20 18:00:12 2026 GMT
Not After : Sep 27 18:00:12 2026 GMT
Subject: CN=6ab01f2c-3c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:eb:89:11:ce:ef:2f:d3:fa:56:62:68:fd:
8f:cb:11:9b:c9:13:29:87:2b:ce:ee:dd:50:92:68:
93:d1:25:b1:87:ad:11:bf:7b:4f:c7:ef:b1:a4:64:
98:14:7f:db:29:8e:fd:fb:4f:a3:67:ca:91:e2:dd:
10:e9:56:ad:3e:1e:54:fa:02:22:94:a5:df:73:33:
34:22:b3:4e:90:00:da:2b:e7:a0:96:e4:97:7d:ff:
d8:a9:cd:f0:ee:c8:e0:9a:c2:49:a6:74:1d:9b:62:
6c:1a:b0:ad:50:ef:0a:83:4b:d5:31:b1:a4:60:86:
03:48:43:c4:45:40:3c:fc:c0:2b:24:26:c9:b0:20:
80:a4:af:f4:8c:c8:79:d5:68:bf:8c:c9:83:90:4a:
d7:60:cd:e1:55:cd:87:35:a8:59:2d:dd:e5:70:8d:
d4:aa:4e:98:e2:b0:8b:fc:9b:7c:70:19:ff:c8:34:
4e:fa:bf:51:e0:d8:4f:b4:6a:6e:ce:0d:b2:35:e2:
aa:98:dd:2d:b7:96:ee:0d:6c:96:db:25:85:7e:85:
ad:7b:4b:3f:eb:40:ed:53:9d:61:94:0c:9d:28:c0:
29:fe:e6:8e:c7:11:a8:5f:b2:12:c9:45:14:ef:ce:
34:bb:47:7c:e3:de:24:0a:3a:4a:f9:5b:27:06:35:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F7:F6:31:90:EF:D3:A5:AC:58:23:9E:C2:C1:EC:3E:76:05:0E:1F
X509v3 Authority Key Identifier:
keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:70:1d:5c:88:cf:22:af:b6:5e:cd:08:83:50:25:d6:a6:
08:41:b8:1f:d9:8e:66:b9:65:79:d6:8d:e4:94:07:5b:c4:fd:
b1:5e:ec:31:29:fc:96:a0:cd:e6:1e:f0:d3:4f:fc:72:cc:03:
b1:37:ee:0e:da:de:3a:b9:83:f9:40:df:25:37:ae:42:b5:e2:
4b:32:d1:a0:df:15:74:0f:c9:f9:90:43:6c:18:90:c5:7d:b8:
14:de:48:91:f9:70:b4:6b:e2:80:80:83:f1:9c:09:7c:a1:95:
cd:ec:a1:b0:aa:5d:a9:be:28:fe:f4:8b:cf:f8:f3:42:6f:2f:
1a:b4:3e:b4:30:a0:e7:1b:60:28:7e:bd:c0:59:e9:c1:c4:3e:
02:2b:f4:eb:dd:f1:ba:5e:6c:7b:7b:87:66:a2:83:87:7c:65:
fd:21:00:c4:0b:fd:b8:88:8c:e8:43:59:db:5b:7a:6c:1e:31:
fe:65:49:13:d7:a3:e1:99:20:90:37:38:77:0c:20:31:94:0d:
8c:d4:f3:7f:46:7a:a2:06:8a:79:ca:30:46:ba:1e:35:4c:6a:
c5:36:b5:59:a6:c1:2f:0f:4c:e3:61:7e:95:bf:a9:9e:4b:b6:
84:ed:54:66:5d:67:19:5c:c8:6d:32:cc:3b:b7:6e:cd:c7:0d:
f8:0d:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:33:34 2026 by rpki-client