
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier: xl6LeehvTJx9fsOFgzWViLFoaKIFYThQQ785zZ9k0AQ=
Subject key identifier: 54:8A:8D:C5:6E:A3:E3:5F:8C:E0:5B:D3:41:62:94:FC:70:28:3C:7D
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number: 01B1
Signing time: Sat 13 Jun 2026 04:09:50 +0000
Manifest this update: Sat 13 Jun 2026 04:09:49 +0000
Manifest next update: Sat 20 Jun 2026 04:09:49 +0000
Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: fB4l7SwaCOcFnDJgfAIUBVtqydwR943pgp7Yd++XiXg=)
2: 683E73BA664A11F183E2ACC07047A888.roa (hash: zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=)
3: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Validity
Not Before: Jun 13 04:09:49 2026 GMT
Not After : Jun 20 04:09:49 2026 GMT
Subject: CN=6a2cd80e-ef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:6e:d9:e1:c0:e1:af:8f:11:3b:bf:7f:86:
ef:c7:68:28:4b:df:22:5e:b1:76:26:71:de:ac:26:
4e:32:32:ab:04:44:8d:ad:bd:22:f0:81:7f:7e:5d:
d7:f6:fa:82:47:10:80:c6:75:19:3f:ae:70:51:38:
b9:ce:14:08:68:f7:3b:f9:ba:ca:9b:cd:84:dc:90:
f3:fa:ac:8c:d3:c0:d5:54:f0:82:46:fe:ab:94:b5:
80:1f:c9:ab:c2:6e:54:54:2e:2e:d2:e4:5e:e2:3c:
bf:a2:b5:b6:84:3c:45:5c:44:2f:91:ff:a2:e6:19:
e2:b5:6f:36:55:98:5f:94:27:cd:ab:ec:6a:5a:02:
80:be:8c:7c:4a:83:ea:92:e6:b6:d0:6a:5d:c6:53:
1a:35:7b:b0:23:45:a8:c5:f7:5b:16:a6:f2:12:41:
39:34:3b:e9:7e:de:29:3a:61:45:e4:9d:58:6c:f2:
28:f3:95:45:ff:0e:47:ed:a8:01:78:e1:69:3e:b4:
62:07:cb:78:fc:8d:e7:be:58:2b:8a:1b:37:de:54:
ee:49:09:cc:fc:f4:e8:fd:8c:06:f3:4a:6b:51:8b:
79:d4:08:1a:04:8e:33:99:2e:f2:10:25:50:63:9c:
5b:52:27:52:89:8d:86:d2:eb:81:0c:1a:09:25:b4:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:8D:C5:6E:A3:E3:5F:8C:E0:5B:D3:41:62:94:FC:70:28:3C:7D
X509v3 Authority Key Identifier:
keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:3b:ca:43:90:0b:11:da:9d:77:05:1b:c5:65:83:dc:f8:28:
41:a2:a6:7a:c2:de:74:34:e8:d8:b5:b5:70:e7:75:49:9a:09:
0b:e1:e3:33:2a:88:5b:2f:93:5e:bb:72:e3:6e:7c:e2:86:57:
82:66:18:07:2d:73:81:6e:79:21:68:6f:87:8e:30:89:f4:df:
8a:4d:7b:d0:d7:35:04:68:7c:14:a0:b0:77:2a:9d:ca:ca:d8:
6a:42:f2:1f:00:aa:f6:83:0d:f7:0f:3b:ab:ff:a6:eb:6e:37:
4f:05:23:6c:1b:ac:93:51:d0:cc:8d:f2:2e:da:ce:e3:99:6b:
ff:e2:44:91:3c:8e:37:96:21:a8:98:fc:f1:7f:8c:0d:f1:3e:
4e:d7:68:fc:19:9b:74:cc:ba:c8:48:03:51:c5:b4:a4:0d:18:
b6:c1:7a:1b:31:ba:af:0b:34:4a:be:fe:65:24:57:40:42:b0:
ce:47:0f:ea:46:22:fa:f3:9e:4c:22:79:97:f5:5c:3a:11:04:
05:62:48:ac:50:b1:02:eb:d4:09:54:e5:92:16:2f:6e:a0:90:
fc:54:fb:58:65:06:e1:55:6b:4e:02:c1:da:47:65:a3:b4:24:
23:91:fa:9d:93:ca:6c:42:57:0d:9e:50:17:53:0b:3d:24:b1:
00:84:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:46 2026 by rpki-client