
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: OyGITjwdz2mPXcb/TBoZQGk+kd+tZvZRL0LVNZdmxnQ=
Subject key identifier: C2:3A:55:EC:13:0F:8D:5C:94:99:36:9C:F8:69:15:6C:6F:FF:41:DA
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 09F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 09E1
Signing time: Fri 12 Jun 2026 19:54:05 +0000
Manifest this update: Fri 12 Jun 2026 19:54:04 +0000
Manifest next update: Fri 19 Jun 2026 19:54:04 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: am1ZCYJqh7m5WI0MliDGAVEJ3rzJ123gf4OIl1lBEXE=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: Jun 12 19:54:04 2026 GMT
Not After : Jun 19 19:54:04 2026 GMT
Subject: CN=6a2c63dd-aecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:df:48:cb:98:26:55:62:9b:42:59:7a:a7:
92:4a:e5:5e:6b:6c:fc:ff:03:17:cf:8a:46:a5:ef:
82:b4:49:57:02:e8:1e:ed:ab:e5:0b:bf:e3:dd:08:
63:30:cd:a5:92:7c:0d:2a:4d:52:d9:32:42:85:bc:
63:3a:5b:fc:9b:4b:01:1b:ee:2f:6d:d9:c7:5e:c1:
db:0c:4a:4f:5f:33:7d:67:02:70:b3:b1:59:95:9d:
0e:95:ea:76:56:07:d6:c2:d5:d9:25:74:95:be:6e:
f3:27:80:b0:73:e9:16:0d:86:06:10:0f:71:9a:7d:
16:82:47:50:2d:1d:44:51:98:ff:83:e2:06:cd:0a:
4f:be:2e:68:d8:ad:ab:7b:66:f8:0b:b4:a1:04:fc:
dc:14:de:00:a2:ac:21:5f:e6:05:59:0a:13:b7:a5:
21:e7:ff:23:a8:5f:f7:6b:45:1d:13:31:cd:b5:5b:
61:3c:2f:fe:c0:ce:24:cc:80:d4:99:94:c3:75:48:
68:24:74:0e:66:88:85:49:f0:e6:21:77:b0:98:c4:
85:0b:2b:e4:33:7b:dd:96:09:13:7a:11:ce:93:a9:
93:47:fc:de:cc:13:2c:b5:74:ad:c0:f2:ea:66:ae:
12:f2:a6:08:92:88:7a:e1:b4:80:52:30:e5:a4:6b:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:55:EC:13:0F:8D:5C:94:99:36:9C:F8:69:15:6C:6F:FF:41:DA
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:12:fe:b9:18:2b:11:f6:cf:83:b5:26:bc:aa:74:db:0e:
d2:91:39:d8:e9:ef:7f:a2:dc:e5:b1:a3:b9:74:3a:62:35:f8:
b0:74:44:a3:cd:1d:e5:eb:3f:2e:d3:6a:c0:9d:09:54:4a:b9:
a3:f0:cc:05:72:8d:ba:cc:5a:6d:06:6d:f2:66:62:09:ba:51:
a7:f4:f8:66:78:39:90:86:9b:35:74:e8:a6:fb:0b:50:17:83:
55:59:b1:d3:14:e4:0d:8c:0a:be:89:a4:85:3f:9b:65:02:cd:
0c:1e:b5:23:bb:a2:ed:6c:57:57:58:3d:4b:68:24:cd:20:24:
96:88:85:d6:ac:5d:56:48:56:0c:15:4b:70:a8:56:43:83:d9:
e3:a3:6f:36:c8:52:ff:48:5c:62:ce:f7:ff:ae:00:dc:cc:b7:
6e:29:c3:ea:26:2f:20:5b:49:d5:a1:d8:8d:36:e1:67:c4:f1:
91:b7:22:8f:8f:c4:34:3f:7d:9d:d9:01:fc:e5:6c:94:8a:12:
58:40:d2:de:7b:48:d3:7b:f5:9e:56:c1:ff:94:7c:95:60:d0:
5a:84:e6:2d:3b:cb:f8:eb:f7:c8:f8:39:d0:47:4e:21:70:c9:
f2:38:01:71:5c:47:c3:31:7d:b8:86:d0:f9:7b:e5:16:91:be:
3c:35:a2:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0
NUM5NzZDQkYwHhcNMjYwNjEyMTk1NDA0WhcNMjYwNjE5MTk1NDA0WjAYMRYwFAYD
VQQDEw02YTJjNjNkZC1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+XfSMuYJlVim0JZeqeSSuVea2z8/wMXz4pGpe+CtElXAuge7avlC7/j3Qhj
MM2lknwNKk1S2TJChbxjOlv8m0sBG+4vbdnHXsHbDEpPXzN9ZwJws7FZlZ0Olep2
VgfWwtXZJXSVvm7zJ4Cwc+kWDYYGEA9xmn0WgkdQLR1EUZj/g+IGzQpPvi5o2K2r
e2b4C7ShBPzcFN4AoqwhX+YFWQoTt6Uh5/8jqF/3a0UdEzHNtVthPC/+wM4kzIDU
mZTDdUhoJHQOZoiFSfDmIXewmMSFCyvkM3vdlgkTehHOk6mTR/zezBMstXStwPLq
Zq4S8qYIkoh64bSAUjDlpGsxMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMI6VewT
D41clJk2nPhpFWxv/0HaMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1
NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz
aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArA8S/rkYKxH2z4O1JryqdNsO0pE52Onvf6Lc5bGjuXQ6YjX4sHREo80d5es/
LtNqwJ0JVEq5o/DMBXKNusxabQZt8mZiCbpRp/T4Zng5kIabNXTopvsLUBeDVVmx
0xTkDYwKvomkhT+bZQLNDB61I7ui7WxXV1g9S2gkzSAkloiF1qxdVkhWDBVLcKhW
Q4PZ46NvNshS/0hcYs73/64A3My3binD6iYvIFtJ1aHYjTbhZ8Txkbcij4/END99
ndkB/OVslIoSWEDS3ntI03v1nlbB/5R8lWDQWoTmLTvL+Ov3yPg50EdOIXDJ8jgB
cVxHwzF9uIbQ+XvlFpG+PDWiuA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:13:24 2026 by rpki-client