
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: K4fvFHWKpmnLcTaHabE4eMB35QqIsMVsUFfX1AJrRxI=
Subject key identifier: 71:3C:8F:CB:7D:E6:CE:36:74:58:28:42:3E:7F:95:5C:DE:2D:08:3E
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 0A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 09F8
Signing time: Tue 28 Jul 2026 20:09:54 +0000
Manifest this update: Tue 28 Jul 2026 20:09:54 +0000
Manifest next update: Tue 04 Aug 2026 20:09:54 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: kRfifQgD+KW58bGtlKAQlxxpin9bCjYc9Puhqxhg9gE=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: Jul 28 20:09:54 2026 GMT
Not After : Aug 4 20:09:54 2026 GMT
Subject: CN=6a690c92-c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:c3:f8:16:5f:25:41:09:a8:28:c0:29:86:
51:d5:63:ee:f9:9b:dd:b7:e9:3e:95:ab:b8:9b:a0:
38:02:4f:c8:be:be:4d:35:30:d6:c4:8e:21:34:50:
0c:aa:dd:18:42:07:4c:ea:d1:6c:53:2e:3f:f3:c1:
78:0b:e3:75:ab:c2:90:35:dd:17:6e:c3:9f:a6:49:
d4:e0:49:ae:45:a6:92:96:0b:28:fb:7b:74:43:0a:
c3:d7:de:5b:36:5e:67:1f:39:ae:81:e9:c6:62:21:
bc:ff:2d:1a:86:a0:8e:81:ff:b1:38:71:23:5b:41:
01:2f:0d:8b:9a:5b:a6:09:14:63:bf:94:5d:4f:e1:
1a:be:75:ce:4b:a2:eb:83:85:7c:f6:bf:51:c7:62:
de:0a:76:b0:44:9b:42:30:56:96:bd:70:9b:fa:8b:
dc:86:e8:e3:7d:e6:33:c3:1e:9b:f4:20:80:3f:3c:
d5:d1:d1:6a:76:20:c5:01:a8:59:c6:9b:20:cd:52:
4e:ec:0c:23:52:75:1e:4e:41:da:77:2c:d1:af:82:
e4:28:5d:9a:68:ee:63:ea:c6:48:ea:58:78:2e:54:
9a:9b:9f:f5:ff:f4:d3:e8:cc:53:00:fb:d3:a2:1f:
46:37:68:b5:0b:a6:71:91:a0:24:c0:26:0e:d5:03:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:8F:CB:7D:E6:CE:36:74:58:28:42:3E:7F:95:5C:DE:2D:08:3E
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:0a:be:03:5f:6f:3d:db:89:9a:c8:15:a8:d1:16:3a:f8:
af:78:56:db:25:91:7e:ca:18:67:08:5f:63:95:7c:bd:ab:62:
2c:8d:43:91:5c:d9:42:2b:42:51:2a:bf:48:92:d3:86:4e:bc:
44:d9:5c:78:1c:6a:5f:8a:60:d8:26:96:bb:96:49:9a:57:79:
e6:8f:69:4a:b3:36:24:82:16:1b:12:0d:62:d4:c7:d4:1b:67:
9a:12:a9:74:d5:a3:04:3f:f5:95:59:e9:0d:3d:11:02:db:b0:
cf:74:ac:9b:84:b4:75:23:d5:09:d9:02:ce:81:75:11:9b:be:
27:32:a4:8e:e2:7b:82:2d:d5:fe:a2:51:1e:af:67:11:fb:7e:
3e:79:f4:29:a9:54:cc:a6:eb:15:fe:e7:e7:bf:19:44:d7:a1:
92:78:f6:65:e1:0f:1b:92:2d:0f:af:7a:4f:c0:c4:2f:9d:13:
06:4b:8a:c4:c4:b0:28:93:e1:e1:d6:50:43:2b:15:5f:00:2e:
3c:8b:50:7c:d7:d0:dc:da:45:28:3d:68:5c:1d:8c:ac:d2:07:
5e:38:ff:0b:44:d1:8b:cf:6a:f5:7c:b8:73:e3:7a:ea:05:4e:
ba:30:fa:78:6d:37:7f:a9:86:dc:bc:43:7c:da:d5:ad:7a:10:
31:c1:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:06 2026 by rpki-client