
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: DPN5fyrRqEhcbKJUEi0+EQe6xoWd7QOm+FSD+JZ9Tbk=
Subject key identifier: 7C:4F:04:33:4E:1D:99:4E:EE:A4:28:F4:44:71:6F:B1:D6:7F:A9:32
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: EF
Signing time: Wed 23 Sep 2026 06:09:57 +0000
Manifest this update: Wed 23 Sep 2026 06:09:56 +0000
Manifest next update: Wed 30 Sep 2026 06:09:56 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: LvhWHcq20UsSf6t8P4tqpimPDfCdyxpoEoP/Dh4FBFE=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: Cd2qwheOZx/HlbYVbXM4iYSdKyaPgmnCfgXwff08PA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Sep 23 06:09:56 2026 GMT
Not After : Sep 30 06:09:56 2026 GMT
Subject: CN=6ab36d35-32ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:6a:4e:12:f2:17:b7:b3:1c:45:7f:7f:da:
ea:7a:01:90:be:0b:66:be:86:22:86:c5:b8:81:2a:
a6:8d:c0:fd:45:82:1b:65:00:4f:d5:79:48:de:46:
c1:82:b3:c0:54:20:05:ce:e4:b4:50:1e:2c:08:04:
9e:89:61:a5:98:52:de:3e:09:7f:65:83:05:7b:91:
1b:ce:8a:68:75:8c:8d:68:1d:05:9d:ab:f4:5b:22:
b1:f4:c4:c8:65:14:63:56:fb:95:a0:c4:75:31:c1:
72:bd:11:9e:4a:28:6d:59:59:5f:2e:b3:99:87:59:
e0:15:73:22:40:cc:59:a0:d4:d6:09:76:3b:67:8c:
54:72:27:fc:89:59:05:44:ac:9c:4c:16:9e:e8:d5:
fd:94:84:1d:99:73:a2:36:d6:48:18:b7:0c:98:ae:
97:55:c7:44:40:8e:98:b1:b9:53:df:5e:a1:97:15:
81:e5:6c:00:2d:2a:87:87:ab:01:61:ec:98:a7:90:
38:86:e3:b1:0b:cf:c6:f6:e2:f9:f4:67:8c:bf:48:
64:88:6c:69:ec:db:65:6e:49:d9:cf:c3:02:cf:d9:
91:96:f0:97:20:ed:d3:eb:8b:02:db:57:b1:3a:86:
e5:18:17:94:0d:5f:2f:ab:1d:9e:74:b0:85:75:41:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:04:33:4E:1D:99:4E:EE:A4:28:F4:44:71:6F:B1:D6:7F:A9:32
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:50:a7:fb:a2:47:fe:7e:ee:a9:9c:bb:0d:b5:1c:f9:9e:7f:
cb:6e:74:44:46:dd:d1:5d:64:67:f7:40:58:0f:6d:f1:10:e1:
be:8a:8e:98:c1:16:53:7f:e5:24:30:92:a8:68:5a:af:79:ac:
fb:e0:d5:e5:99:6b:4a:f8:1b:1c:7d:f4:dd:a2:cd:6a:e0:bc:
4f:7b:9e:8d:38:01:2a:7c:0e:12:48:20:ff:b0:c4:e4:2e:2e:
64:07:f2:77:8a:25:84:a0:ce:98:93:7c:93:40:0a:a8:34:9d:
9f:d5:72:34:5f:9f:9d:9a:d3:be:49:6d:b4:45:5c:f7:3a:59:
05:91:5a:cb:b8:ce:eb:70:f6:d3:d3:89:08:53:cd:03:fe:36:
6b:3d:76:b8:eb:76:70:75:9d:35:d6:e3:33:82:cd:d1:df:00:
82:de:a5:de:1d:34:78:b5:0e:c6:d4:23:a9:e2:df:03:a5:f9:
c0:79:1d:85:11:24:a9:6e:69:8d:06:ea:b6:15:45:6c:bb:94:
8d:8c:f7:b7:08:2e:80:78:a5:50:23:53:21:b8:9b:4e:4a:77:
75:5e:c7:49:87:7d:35:e2:f2:33:d1:18:b7:d1:f9:3a:f6:75:
3f:92:cf:da:3a:a0:e7:5f:43:b6:4c:ff:39:57:c8:be:84:f8:
fb:55:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:40 2026 by rpki-client