
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json)
Hash identifier: elSqjyIxp0Msj2MZEX57Y7YoAW8J357WKpPyfV/Mxis=
Subject key identifier: BA:57:48:8F:27:C5:4A:DB:33:43:73:40:F3:F3:D3:D0:DC:55:7F:84
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
Manifest number: 0363
Signing time: Wed 29 Jul 2026 01:42:16 +0000
Manifest this update: Wed 29 Jul 2026 01:42:15 +0000
Manifest next update: Wed 05 Aug 2026 01:42:15 +0000
Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: KlIgRDoJQ0wwo9v+ve6oeWvR8Hyjr4RTdyY/DQ2RizY=)
2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=)
3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Jul 29 01:42:15 2026 GMT
Not After : Aug 5 01:42:15 2026 GMT
Subject: CN=6a695a78-db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:69:90:5b:2f:8d:e1:4e:32:85:f5:8e:c7:
65:11:b9:c3:62:e6:c9:36:8e:22:9f:dd:94:6c:64:
41:5e:53:a4:78:d1:98:03:3b:a5:99:a2:06:e0:b5:
0a:e1:f7:aa:17:76:0e:00:c0:28:09:29:78:9c:fb:
db:cb:a0:38:62:e1:f6:54:08:6d:16:26:b9:29:d7:
11:7f:5f:87:04:b4:b2:9a:1f:39:72:85:b2:c1:78:
c1:49:4c:81:82:0b:2a:c1:e4:3e:78:5a:d7:03:f3:
9f:f3:a2:71:b8:56:9d:6b:16:30:72:ae:83:d3:63:
18:5a:c1:1f:00:63:78:a4:a9:8f:d8:b1:e6:56:7b:
1e:be:54:18:b7:dc:d5:e7:7c:bb:ab:0b:30:b4:33:
b6:ed:e5:bf:4f:ea:3a:3f:71:25:7c:d5:60:50:47:
7a:7b:4e:a0:e2:64:bf:ab:5a:fc:4b:21:8f:35:15:
63:fe:54:a1:c1:e1:c5:52:aa:bc:e4:69:b4:b1:fe:
da:65:fd:90:34:9c:1a:45:57:51:82:a2:a4:69:85:
6b:b3:5c:1e:ff:5b:65:54:3c:1d:c4:bb:30:87:d1:
11:e4:70:cf:5b:30:ac:a7:96:81:b8:bb:38:01:3e:
8d:71:75:70:78:6c:e1:be:a2:2a:e3:c8:95:a8:09:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:48:8F:27:C5:4A:DB:33:43:73:40:F3:F3:D3:D0:DC:55:7F:84
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f4:b9:b7:a6:c9:85:bb:62:7c:62:38:98:0f:47:8a:4a:e7:80:
ac:53:37:41:ff:c4:af:11:d3:86:c8:d0:e2:a5:5b:a7:ce:50:
47:c0:12:01:e5:51:e2:21:98:bc:86:b5:b5:f0:7e:7e:73:fa:
93:72:7d:68:e1:d6:7b:f3:d9:50:13:cd:c1:c5:58:89:2b:74:
ae:a6:2f:ca:d1:11:58:de:b6:02:5f:a4:9a:e6:91:3b:85:2f:
48:6d:fa:60:0f:e5:ef:bb:b1:08:2f:46:84:e4:98:1f:6f:37:
f1:b6:c9:0b:9c:46:40:14:6c:6f:df:e8:d0:a8:7b:64:af:20:
cc:98:50:09:a2:da:5f:ba:0c:e9:d4:d6:68:c3:1f:b7:ce:69:
02:b2:75:0b:7f:ec:0d:bd:89:bb:0b:db:3c:5e:a3:27:d1:6c:
19:3c:87:5e:0b:5b:00:9d:e3:c5:11:8c:ee:49:a1:3d:17:bc:
93:a2:02:d0:04:36:b3:ef:f0:4f:2b:a9:97:bf:68:56:ed:a8:
f4:b8:63:e1:fb:4d:f9:86:6d:30:65:c7:cd:d9:ca:42:d8:15:
27:9e:2c:54:dc:eb:3c:07:e5:75:d5:13:52:f0:64:9f:09:eb:
48:26:d7:5b:84:9e:76:40:64:09:17:a0:cd:53:83:49:c7:c2:
a3:33:94:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB
QUYyNTMyNzQwHhcNMjYwNzI5MDE0MjE1WhcNMjYwODA1MDE0MjE1WjAYMRYwFAYD
VQQDEw02YTY5NWE3OC1kYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsstpkFsvjeFOMoX1jsdlEbnDYubJNo4in92UbGRBXlOkeNGYAzulmaIG4LUK
4feqF3YOAMAoCSl4nPvby6A4YuH2VAhtFia5KdcRf1+HBLSymh85coWywXjBSUyB
ggsqweQ+eFrXA/Of86JxuFadaxYwcq6D02MYWsEfAGN4pKmP2LHmVnsevlQYt9zV
53y7qwswtDO27eW/T+o6P3ElfNVgUEd6e06g4mS/q1r8SyGPNRVj/lShweHFUqq8
5Gm0sf7aZf2QNJwaRVdRgqKkaYVrs1we/1tlVDwdxLswh9ER5HDPWzCsp5aBuLs4
AT6NcXVweGzhvqIq48iVqAnfRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpXSI8n
xUrbM0NzQPPz09DcVX+EMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4
RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC
T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA9Lm3psmFu2J8YjiYD0eKSueArFM3Qf/ErxHThsjQ4qVbp85QR8ASAeVR4iGY
vIa1tfB+fnP6k3J9aOHWe/PZUBPNwcVYiSt0rqYvytERWN62Al+kmuaRO4UvSG36
YA/l77uxCC9GhOSYH2838bbJC5xGQBRsb9/o0Kh7ZK8gzJhQCaLaX7oM6dTWaMMf
t85pArJ1C3/sDb2JuwvbPF6jJ9FsGTyHXgtbAJ3jxRGM7kmhPRe8k6IC0AQ2s+/w
Tyupl79oVu2o9Lhj4ftN+YZtMGXHzdnKQtgVJ54sVNzrPAflddUTUvBknwnrSCbX
W4SedkBkCRegzVODScfCozOUJw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:06 2026 by rpki-client