
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: 5Adu95LaOCQmh8MUZ7AaixKSzLYhH+lye0phBf5+z1Q=
Subject key identifier: 00:D2:DD:EA:22:D0:A3:B1:FC:40:03:A4:C5:E1:59:64:FC:F8:E8:E9
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 09DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 09C4
Signing time: Thu 16 Apr 2026 19:50:37 +0000
Manifest this update: Thu 16 Apr 2026 19:50:36 +0000
Manifest next update: Thu 23 Apr 2026 19:50:36 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: /LvjyBB6riPoI3hyH6OO4146uI+IjgWg0F8xW6kuGPA=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: Apr 16 19:50:36 2026 GMT
Not After : Apr 23 19:50:36 2026 GMT
Subject: CN=69e13d8d-e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:7d:9b:1d:fa:99:d6:9c:13:f8:fc:95:48:
95:d2:ce:c9:e6:cc:1f:92:8d:91:d3:d3:aa:f0:a2:
58:8f:2e:f0:68:80:f6:0c:06:e3:2a:c4:e6:f5:ba:
e4:41:6c:74:c5:34:50:91:48:4c:d3:bd:39:d7:7d:
98:72:1e:e7:bf:2c:4b:c2:8a:e3:c9:c9:22:5b:d1:
cd:c5:04:73:d0:43:69:ad:2d:76:dc:84:82:b9:c7:
7e:d7:0d:c5:d9:e9:c2:6b:73:d3:dc:aa:51:a5:77:
ed:f0:1d:76:7c:02:29:b5:7d:3b:0c:98:01:70:ef:
21:41:b1:f0:5c:07:c5:17:3d:a4:0d:4e:a5:70:54:
f7:c1:e8:48:6b:b3:c2:45:3f:44:61:f4:74:67:5a:
4c:5f:2d:ae:a2:27:9f:8d:a3:b8:49:c7:a1:16:a7:
3c:2e:b8:a1:19:5e:68:cb:5d:30:9c:ab:1a:34:51:
cf:ab:5a:69:fe:6e:75:76:0f:17:0b:0b:77:22:db:
ec:cc:b4:39:5f:b2:9b:20:f1:55:0b:34:34:3c:c9:
3b:03:09:14:94:3e:85:0e:2f:d4:72:0a:1e:5b:e3:
bf:0a:a8:c8:24:23:6f:ee:e7:cf:24:5c:ad:79:78:
40:a6:a6:60:94:c5:63:68:3a:37:98:c8:f0:f0:81:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:DD:EA:22:D0:A3:B1:FC:40:03:A4:C5:E1:59:64:FC:F8:E8:E9
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:0f:5f:f8:e5:13:0d:28:18:ed:60:77:6a:17:22:b6:dc:be:
4b:d8:dd:9a:a6:bb:ca:27:5e:46:76:49:0b:fb:9b:c8:c0:ed:
3d:7c:ca:23:28:1b:0c:fb:d3:13:7a:10:7e:60:e5:cb:ee:99:
75:cf:0c:1a:92:6e:87:9b:f6:f9:f8:c2:9a:9b:be:ce:a0:ac:
43:0d:d6:29:b9:e4:be:25:26:99:94:ec:44:c7:fe:c4:c8:d4:
93:69:c8:7a:b7:0e:20:b9:c3:7f:14:32:cd:e9:58:3e:5e:32:
b7:14:a8:3c:c7:3f:94:fc:9e:c6:ee:7f:ae:66:41:c6:65:62:
10:78:4c:5f:8a:64:0d:27:52:b3:0b:5f:99:0e:ff:ba:cb:f5:
89:9d:d4:5a:c9:e4:10:31:e5:a3:ac:15:a8:76:99:9d:a5:b2:
44:a5:4a:4d:8b:cb:3b:19:0b:fe:15:c1:37:98:43:72:22:51:
d4:a6:cc:02:6f:aa:cf:3b:e3:65:63:01:21:ea:69:51:6f:9b:
24:03:70:48:31:48:9a:24:df:b0:b7:98:3e:3b:33:cf:16:fa:
7b:e0:ae:2e:2e:f8:5f:73:10:ae:53:74:b2:73:16:6f:37:c8:
22:cb:ce:ac:50:d2:e4:29:9e:22:7b:1d:8b:55:1e:50:d8:40:
b2:20:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:53 2026 by rpki-client