
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier: 7+0+M5EpJIdq9jnusFQvcdQTFXviFDXjJeMINM+nfqg=
Subject key identifier: AE:5C:D3:CF:93:ED:00:E9:46:6A:55:EC:F6:A9:5D:E4:86:BA:D8:9B
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number: 01C7
Signing time: Mon 27 Jul 2026 05:37:37 +0000
Manifest this update: Mon 27 Jul 2026 05:37:36 +0000
Manifest next update: Mon 03 Aug 2026 05:37:36 +0000
Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: sDfapCWMGCnWMmYVEcLUJ3UCleYroNV89k7o/k9MEs8=)
2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=)
3: 683E73BA664A11F183E2ACC07047A888.roa (hash: zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Validity
Not Before: Jul 27 05:37:36 2026 GMT
Not After : Aug 3 05:37:36 2026 GMT
Subject: CN=6a66eea0-92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:ec:c3:80:d0:e3:25:8c:87:18:64:d2:a9:
09:89:29:d5:3d:98:db:b6:9d:cf:89:ca:c4:84:2e:
cf:fb:c5:9b:29:2e:b4:b4:b7:74:b2:b9:ef:2f:5a:
d9:3f:9d:4a:c3:ae:35:25:b4:74:95:d9:be:a3:f9:
0d:e5:ee:64:ec:2e:02:39:7d:2c:c5:42:44:c8:6b:
f8:ea:4e:2c:73:98:c4:02:cd:7f:6b:aa:45:b0:ee:
e5:d3:e7:dc:fd:05:d2:75:59:db:4b:57:83:7d:2f:
50:cf:37:eb:01:0d:79:74:cb:8e:91:07:d5:d5:9b:
bf:27:02:31:a6:f3:46:ee:7d:28:f7:bf:97:73:ae:
51:42:7d:85:a1:ab:a0:00:d0:1f:3e:43:e4:60:ec:
df:3a:78:f1:91:60:87:4b:0e:db:2f:ca:29:08:8d:
75:8e:77:d2:48:9e:9f:e3:84:a9:9d:d2:d4:42:68:
26:60:eb:cc:ab:94:27:f9:05:27:7c:2d:55:00:2e:
d9:9f:40:62:56:43:7d:2b:56:48:00:66:78:ef:89:
cd:e3:23:21:f0:c6:d9:e5:91:c1:15:ec:6d:72:25:
5f:eb:54:42:10:79:2f:1f:a4:e1:4c:75:ca:fd:2d:
2c:68:d8:4f:c5:09:8f:f4:87:62:34:24:85:bd:2e:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:D3:CF:93:ED:00:E9:46:6A:55:EC:F6:A9:5D:E4:86:BA:D8:9B
X509v3 Authority Key Identifier:
keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:20:2a:06:b6:c9:bd:5e:c9:9a:38:2d:38:63:c5:e2:4c:
cb:d4:6b:d1:f1:14:f8:f8:59:bf:19:06:2d:95:a0:bc:f5:b8:
4c:5c:cf:dc:3a:bf:a3:57:04:fe:0e:b1:5a:6a:b5:50:17:ba:
cf:5a:60:cf:cb:73:ca:a9:9f:98:16:60:d3:09:0d:29:76:0e:
ca:6e:c6:39:0f:ca:ad:68:8f:a1:e3:78:f4:68:7b:a8:5d:21:
72:db:c7:ab:b8:8e:1a:dd:0a:74:f8:51:f3:77:8f:52:2b:7e:
ef:b6:0d:57:d6:5f:13:f5:64:70:4d:6e:a7:fc:9c:b3:8a:f7:
6a:bc:68:1b:8a:97:5b:88:64:a0:26:6e:16:c3:32:86:ba:c8:
20:46:e8:6b:b3:69:18:f0:63:d5:4e:5a:b5:97:f1:a7:53:c3:
0c:26:a4:36:ec:59:85:71:2f:c3:3f:64:d2:d0:6f:88:3c:3c:
44:e8:fa:8c:1b:50:8c:e3:c9:a7:fe:19:10:04:72:ba:87:35:
d4:71:3d:e6:57:3e:e5:54:6b:59:1b:0a:55:97:c6:5c:c4:2c:
71:1f:89:ff:9c:4e:19:5d:a3:f6:a4:3d:25:87:d5:83:b8:a9:
6f:42:d3:46:35:cb:44:6d:99:94:02:0f:0d:80:be:ac:11:37:
6b:ed:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:44 2026 by rpki-client