
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File: jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier: smk++paggAXK6ccZBHHSIC5IU37ei1mlhs5lw11ZCxQ=
Subject key identifier: AE:CC:88:AC:3E:84:42:D1:FC:DA:1E:A1:03:92:05:73:51:CD:AE:B2
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer: /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 08:40:14 +0000
Manifest this update: Sat 13 Jun 2026 08:40:13 +0000
Manifest next update: Sat 20 Jun 2026 08:40:13 +0000
Files and hashes: 1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: D4F6rpctMJAS3tEmwvnjcaVG+qixSCEilhWhZBZkEyE=)
2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Validity
Not Before: Jun 13 08:40:13 2026 GMT
Not After : Jun 20 08:40:13 2026 GMT
Subject: CN=6a2d176d-f70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:71:7b:89:7b:fa:f5:ce:f6:4b:e5:ee:2d:
0e:58:d4:bd:53:f0:41:44:5f:7f:c1:d9:c2:c5:59:
3c:3c:7f:1d:5d:a0:4a:15:cb:da:6d:7b:16:8b:95:
1a:73:bd:d8:db:cd:5f:e4:08:6c:d3:3f:1d:68:13:
88:5d:ab:d3:63:76:05:cb:ee:73:b9:5b:0e:62:ca:
f3:e9:05:c7:df:53:d6:ff:fd:44:89:99:cf:d9:79:
4e:bb:06:f9:10:58:06:5f:4e:32:11:eb:d5:6b:69:
d4:cb:fc:4b:ac:69:d1:22:e6:f4:24:87:41:24:7c:
d8:74:bb:48:98:9b:8c:0c:c1:26:3e:eb:ef:fb:a8:
0d:c8:9b:91:2e:f7:b8:79:fc:dd:99:bd:f4:87:b0:
bf:e1:2e:16:5c:a3:ba:87:27:11:2f:40:d2:8b:6f:
1a:7e:c5:ac:b3:5f:de:c2:e5:b5:3f:8e:38:7f:6d:
4c:18:fd:ea:8c:87:76:f8:dd:5d:15:bf:e0:69:9f:
55:ee:b2:4b:df:61:47:d1:44:cb:6e:3f:5f:50:1c:
44:25:54:96:8f:2d:48:4d:5e:6e:52:be:50:ce:62:
06:47:d5:83:b9:3d:75:d4:83:f0:66:20:db:2d:f8:
1b:f9:50:47:34:a5:63:0b:96:92:92:70:d4:99:53:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:88:AC:3E:84:42:D1:FC:DA:1E:A1:03:92:05:73:51:CD:AE:B2
X509v3 Authority Key Identifier:
keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c4:81:e6:2a:63:ba:f6:90:ee:08:ee:07:0d:16:dd:6a:a4:
a5:ea:93:96:9c:9a:23:93:d0:af:0a:fa:25:4b:60:a0:a8:96:
8b:51:04:da:e4:d1:0a:83:83:47:08:81:4a:bd:d6:27:2b:c4:
0f:3c:ad:ad:1f:12:b4:d3:ef:df:7e:ed:5e:ce:dd:74:76:31:
e9:ca:02:80:60:43:a2:7f:3d:b9:bb:39:d5:26:a2:4e:a2:58:
c4:3a:fa:bd:63:81:d6:87:e4:21:67:ee:7f:96:ea:96:e0:14:
40:43:fb:68:6a:53:c1:5b:7b:59:ce:6a:2a:d2:91:0e:47:13:
21:88:33:e6:93:46:46:8f:51:78:dd:d3:d0:08:12:33:29:99:
13:f3:ed:2f:e3:a9:0c:2a:51:ed:b0:fb:08:60:bb:bf:2c:94:
a4:b3:45:09:7e:6f:f6:a8:e9:9f:e6:a1:fe:26:bb:d7:90:0e:
4f:80:43:aa:e7:fe:f6:69:80:39:21:2d:13:e1:8a:91:f0:46:
08:0c:59:84:4f:95:89:f6:3d:42:f3:d9:a2:f8:71:8e:e5:f0:
75:e4:7d:03:2e:96:ca:94:3b:11:34:e7:cf:66:f9:ec:8f:79:
b8:e2:ad:ba:f2:fd:23:96:ac:1c:ac:e9:92:b1:39:12:65:8f:
48:c5:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:06 2026 by rpki-client