
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json)
Hash identifier: RqRKcYUhd9fReLNeabCz7/R0J3UxO2J3v/qAVCAO6Yc=
Subject key identifier: 07:3F:97:68:43:66:18:01:C7:DC:1F:02:CF:02:1A:32:73:B3:77:41
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 035B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
Manifest number: 034C
Signing time: Sat 13 Jun 2026 01:00:04 +0000
Manifest this update: Sat 13 Jun 2026 01:00:04 +0000
Manifest next update: Sat 20 Jun 2026 01:00:04 +0000
Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: wRzZocnbk9CLoqe/GU3qNElyGgLImZqevd9j0PurNI8=)
2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=)
3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Jun 13 01:00:04 2026 GMT
Not After : Jun 20 01:00:04 2026 GMT
Subject: CN=6a2cab94-117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:c1:ae:c9:89:12:06:dd:96:40:ce:a4:c7:
7a:42:18:d6:8f:24:3b:b6:5c:d9:6d:24:d7:4d:bf:
94:e3:0a:83:35:aa:3a:4a:c2:08:4e:4b:59:07:cc:
b7:29:08:ad:c7:13:f6:16:2f:b6:e6:82:ec:d5:71:
86:c3:0c:d3:87:d6:69:d8:50:3b:35:a8:3a:ac:8f:
c7:8c:db:32:1d:0f:1d:ee:a2:d5:25:b2:d1:05:64:
c8:29:f0:a3:bf:62:fb:be:2c:ed:c1:59:4e:6b:44:
58:c1:6f:93:2e:4e:46:c5:f9:16:f3:43:4c:49:02:
78:67:0f:35:35:cf:39:ef:76:8a:3d:b7:50:65:15:
74:79:c5:d6:62:11:70:d3:63:90:c3:8e:68:87:79:
d1:6d:d4:f1:52:b6:f3:8d:89:13:f7:e4:ce:48:9f:
c9:39:28:47:b5:05:15:25:05:16:c3:ef:98:ca:49:
d1:89:6f:ae:c6:79:24:18:79:43:1f:72:14:ad:09:
6e:92:2e:e5:27:95:12:0b:e9:ef:1b:20:94:22:e0:
29:48:73:3d:c0:c3:fb:dc:bb:e5:9b:72:9f:fc:7b:
83:62:b3:bc:32:6f:cf:c3:8f:bb:06:10:9c:87:26:
2c:9a:00:e2:1a:7a:0f:70:f6:cd:3c:e2:99:3f:8f:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:97:68:43:66:18:01:C7:DC:1F:02:CF:02:1A:32:73:B3:77:41
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:fa:94:37:1a:84:d1:11:58:d0:34:62:f9:3a:9a:35:3e:
87:2e:ba:b8:15:f7:a4:37:96:ff:99:ee:28:99:f2:72:4d:15:
a3:55:c9:37:1d:1c:c5:20:9d:c7:a8:17:ad:e5:3b:2d:29:dd:
b8:30:b9:5a:6a:d0:df:33:69:00:fb:52:76:04:fe:5d:a7:25:
15:d1:11:26:8f:9e:0d:1d:5a:cf:b0:8a:1b:62:7d:b7:f7:62:
7a:25:98:ff:b1:dd:f2:b2:4a:55:a4:1a:cd:0c:78:3b:ef:2a:
98:27:46:18:dd:48:89:d7:0d:4b:0f:e1:e3:eb:c6:86:fc:83:
3f:92:bf:06:17:f1:83:22:1b:e7:a5:4a:76:40:ad:8e:82:d2:
63:5a:18:de:d9:1e:b2:65:b4:1e:c0:23:00:76:e9:74:d3:67:
85:0e:3e:12:dd:14:a4:a5:ee:99:77:5c:ff:24:64:ce:cf:82:
5f:83:a1:dc:8c:09:ef:88:14:be:63:0d:02:4f:94:9e:d9:aa:
ae:d4:5a:d6:a0:c4:8e:ae:3f:06:ab:d2:04:62:99:e9:87:b5:
b6:6a:13:84:fb:88:f0:7e:9e:f9:d5:a1:82:ea:6f:0c:0c:d4:
26:d4:5e:16:3b:ed:31:21:32:7a:58:a2:3a:c9:35:19:be:51:
18:b9:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:11:35 2026 by rpki-client