
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier: 9aQEqNv9CPEZbYJAgv4KJAbnq8+0GfSDEg2wOyOCnYg=
Subject key identifier: 35:48:64:84:62:58:6F:9E:91:1A:04:94:E1:6D:80:D4:F1:13:F8:1A
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial: 1393
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number: 1383
Signing time: Fri 12 Jun 2026 16:55:42 +0000
Manifest this update: Fri 12 Jun 2026 16:55:41 +0000
Manifest next update: Fri 19 Jun 2026 16:55:41 +0000
Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: l2Eo4+l8vs8l6ht1fSNOrMRlOGasTJoS0tftzHYcO/Y=)
2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5011 (0x1393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Validity
Not Before: Jun 12 16:55:41 2026 GMT
Not After : Jun 19 16:55:41 2026 GMT
Subject: CN=6a2c3a0e-bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:f6:d2:c9:c8:05:21:ff:88:38:e7:ad:33:
94:93:02:71:93:c7:d9:76:4a:e9:97:14:1e:a1:8e:
39:d8:a9:66:f0:9d:88:6e:51:bf:e6:ad:84:86:21:
c9:d5:d4:c9:98:ff:49:d8:82:0a:3b:7f:8c:03:16:
63:d5:65:c3:ea:e4:7e:78:f4:30:8f:78:f0:b6:c0:
88:99:af:9c:dc:49:95:01:39:cd:76:23:bf:9b:e4:
23:c4:78:e0:96:77:3f:5b:b0:d5:b8:be:da:4e:9b:
38:cc:59:7a:ea:43:93:ec:2d:d2:e5:a1:12:bd:71:
2d:71:59:e8:ea:64:79:05:0c:d2:fb:b9:c3:31:1b:
e0:97:c6:be:7e:31:a1:85:a1:a4:f7:37:f0:3b:51:
ae:6d:8d:e1:47:dc:f5:8f:ff:7c:69:42:62:54:9d:
c0:71:43:35:e8:67:20:6f:2b:1e:df:37:6f:d7:ed:
65:07:4b:e9:73:5c:8d:39:62:a8:5c:4e:e1:cd:be:
64:69:d6:94:19:be:c0:3f:cd:e4:63:3c:f7:88:f6:
96:f6:fd:99:af:7f:2d:35:b1:bf:1c:ec:76:28:49:
f1:45:e7:db:55:2d:f1:c7:bc:e8:47:ec:11:77:66:
36:30:3a:49:af:2a:9d:d8:56:bb:2d:5c:a2:27:50:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:64:84:62:58:6F:9E:91:1A:04:94:E1:6D:80:D4:F1:13:F8:1A
X509v3 Authority Key Identifier:
keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:01:c0:a9:be:ca:aa:80:31:e5:ed:3f:32:78:3c:a8:a5:
17:de:c4:44:39:2b:db:0a:ae:12:1f:f4:98:6f:00:a9:f4:2e:
4a:b8:3b:0e:bf:45:37:20:1c:fa:41:1c:74:f3:17:2d:1d:ce:
c7:64:ca:a7:e2:c7:39:4f:48:0c:12:be:59:e1:f0:0c:a7:02:
01:6e:b3:3e:da:75:25:69:06:9a:dc:54:a8:fa:62:2f:ff:fa:
70:c3:ac:26:6a:fa:ec:1f:53:e0:d7:ff:f8:f5:cb:2b:68:76:
be:14:33:f8:8a:33:ee:ca:e3:36:4c:b6:0d:d8:97:89:d6:08:
17:06:e2:f6:5f:6d:01:d1:2a:5e:45:2a:4b:ca:dc:38:50:93:
64:e3:3c:40:c5:88:6a:cb:6e:ae:b6:42:fe:51:a7:6c:18:b8:
77:e8:11:71:b4:3f:67:28:7a:85:b6:86:04:43:9b:db:9e:da:
69:ba:d9:b8:55:83:c1:4a:40:8c:aa:d3:d6:5c:a5:f3:84:ce:
32:9b:8d:fd:0b:70:41:61:3a:4b:3d:cb:d9:1e:01:05:89:47:
26:c2:8c:16:9f:7f:fa:00:56:97:d0:c4:88:c6:5d:c8:e7:06:
24:d4:34:f4:ee:8e:ac:7b:83:e8:fb:93:ce:ad:57:b1:87:e9:
e4:44:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:21 2026 by rpki-client