
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier: Gbf/d+S+YTdLCf0T5mivJ3Ppq5H5v+yX5/LxBrdJ1+M=
Subject key identifier: E9:5B:AE:C0:F2:72:63:0F:1B:53:6E:A3:73:05:AE:8E:46:50:26:C7
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number: C1
Signing time: Sat 13 Jun 2026 07:00:42 +0000
Manifest this update: Sat 13 Jun 2026 07:00:41 +0000
Manifest next update: Sat 20 Jun 2026 07:00:41 +0000
Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: aaO15RaFrvQ0hVQ08Cs8B1Kz0aClOMOb/zw1mZn2lCc=)
2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Validity
Not Before: Jun 13 07:00:41 2026 GMT
Not After : Jun 20 07:00:41 2026 GMT
Subject: CN=6a2d0019-9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:f9:3c:ea:97:85:c1:93:22:d6:e6:92:2e:
45:f5:d0:10:17:22:6b:99:2e:08:82:28:16:09:8c:
90:d9:83:a4:35:43:e7:f5:fb:a1:2d:d3:26:8b:12:
c9:4b:93:6f:b1:07:28:84:dd:e4:b6:b2:83:54:0c:
49:a3:0d:d7:5f:51:0e:df:d4:73:55:09:b3:fe:1b:
40:fb:6e:d6:0c:a2:95:1b:e4:17:c1:22:f2:23:2a:
e4:91:5b:28:98:15:5f:57:fc:ea:87:d5:a0:57:56:
58:a5:79:5d:0a:1f:d0:25:59:64:32:98:26:65:76:
2a:7c:72:c2:98:91:d6:71:6f:c8:85:8b:f0:a7:56:
58:9d:7a:ad:a1:78:0b:84:94:34:17:ab:0a:8b:59:
2c:85:0e:eb:d3:d5:f4:e2:56:f7:3b:17:04:b7:bd:
5f:ea:16:96:ed:8b:0d:59:5a:11:a1:c8:0d:fa:db:
a7:ff:22:b4:ab:42:6c:53:5b:be:fc:af:49:32:2f:
64:9a:2f:e6:8f:3a:fd:2a:ce:e2:cd:e8:c0:a8:94:
6e:4e:bb:43:77:1e:cb:56:9a:1f:de:67:82:7a:ff:
9c:70:c0:cb:d8:0c:a8:46:bd:f0:70:c6:b8:48:2c:
aa:30:ab:32:01:66:28:1b:3b:71:f9:bd:61:13:7f:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:AE:C0:F2:72:63:0F:1B:53:6E:A3:73:05:AE:8E:46:50:26:C7
X509v3 Authority Key Identifier:
keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:9a:31:62:bf:0e:46:3e:45:97:5e:70:4e:a8:4b:a4:6b:
65:11:b3:89:6b:c3:60:d2:5b:39:3d:1a:dd:79:92:fc:c8:6e:
6b:15:c0:0b:f3:47:5b:d9:b2:d0:ac:90:46:aa:e1:4c:46:fc:
d3:63:2a:ba:8b:c3:79:65:f9:68:17:dd:56:b0:34:e8:18:de:
fd:6d:42:41:8a:e9:58:d5:98:36:1e:12:93:ed:ff:87:45:89:
32:ef:ee:2d:3b:2e:b4:91:84:3c:aa:c7:86:95:7b:0f:67:1c:
d7:92:0a:bc:96:8d:44:84:19:1c:83:9e:92:88:0f:e1:fd:48:
7b:f1:3f:14:62:5a:ae:48:25:3f:29:51:0d:a5:4f:91:02:f3:
53:74:bf:d0:61:dd:0b:fe:76:ad:29:1b:79:d6:d5:b7:f6:33:
96:ca:18:14:4a:c7:0c:6d:c1:54:69:ef:6a:fe:fb:2f:d6:ca:
01:4e:da:34:7d:92:66:41:8d:ee:f4:ff:4b:02:93:b6:7c:0b:
0e:7c:ea:50:c7:f4:75:db:86:e6:27:04:99:22:4d:1e:31:c4:
b1:26:6b:45:df:8c:93:5e:88:9a:20:a3:cd:80:83:48:a7:3f:
79:40:09:c8:8c:bb:da:0f:3d:01:69:28:93:e0:5b:9c:9c:3f:
b9:26:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:29 2026 by rpki-client