
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json)
Hash identifier: PXD16G5+Rse3VYe8OPxRGsRe66/IEiU6OgXKF2zCIMY=
Subject key identifier: 97:34:5B:ED:88:04:B6:73:64:31:06:32:7D:1C:82:83:C0:22:F6:76
Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
Manifest number: 0209
Signing time: Mon 27 Jul 2026 04:39:52 +0000
Manifest this update: Mon 27 Jul 2026 04:39:51 +0000
Manifest next update: Mon 03 Aug 2026 04:39:51 +0000
Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: ztWF5kInYleobjIU7ryKXCCaA3gMo++EQokpMYAOq4I=)
2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: p/ajLhjfR7/sd63+KlmmSEwV5q6qTvLkZUOVfCuvC7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Validity
Not Before: Jul 27 04:39:51 2026 GMT
Not After : Aug 3 04:39:51 2026 GMT
Subject: CN=6a66e117-5ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:61:c2:9e:c1:f6:59:f7:5c:ed:ef:13:3b:
b3:de:fd:ea:23:8f:91:20:61:88:98:16:25:7a:e4:
bf:e1:48:7a:74:9e:ce:83:cd:71:36:08:eb:a3:05:
9c:c7:26:c4:af:a8:d5:5a:b7:c3:1d:ee:5e:a9:b0:
e8:5c:ce:07:91:f1:f4:4e:0d:7c:a2:69:5d:eb:42:
0d:a6:23:4e:b4:35:98:82:27:e4:8e:78:b0:a4:17:
65:e7:c2:95:d3:0f:71:4c:0c:9a:e5:d3:df:c8:4d:
e5:e8:37:28:47:a2:55:b1:64:20:39:f9:d3:ee:7a:
21:63:3b:14:b0:88:f9:26:73:cf:33:2d:e9:61:14:
0e:21:2c:9b:ff:48:fb:71:84:b2:40:7a:b2:b4:6a:
90:ba:ff:3e:ab:01:67:e4:4f:25:99:1c:3a:20:64:
4d:09:02:99:73:a7:de:24:69:3d:8f:8d:33:db:2d:
d8:96:3b:04:41:11:f6:88:c3:76:45:57:02:f7:0a:
fa:c6:07:f2:a2:dc:c6:8a:47:0d:5d:4e:1a:80:a6:
3a:b8:4f:70:6e:88:0e:0c:76:3c:ab:31:d0:7f:1f:
6a:01:6b:e3:bd:2c:b6:e0:67:a6:6e:dd:d6:38:1f:
9e:2f:62:43:91:ff:bb:a6:40:0f:78:c7:45:38:8e:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:5B:ED:88:04:B6:73:64:31:06:32:7D:1C:82:83:C0:22:F6:76
X509v3 Authority Key Identifier:
keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1d:97:7c:9a:fa:5f:60:5b:73:95:4d:51:25:21:dd:cf:8d:
bc:79:40:18:68:27:12:76:d1:89:bc:11:f0:92:76:57:25:36:
d2:1a:4a:34:7f:4d:33:b3:0a:42:72:d6:4f:a8:2f:7a:6c:aa:
50:c5:ee:61:d6:49:e8:62:e2:18:a0:46:fa:47:11:60:0b:6a:
64:89:11:e4:c7:fc:8c:0c:a8:67:cb:84:c6:df:97:99:4a:57:
44:78:b4:cd:5a:56:ae:c0:59:51:84:25:66:33:14:2d:01:22:
28:c3:28:76:2f:00:67:3c:e5:10:02:45:48:09:03:0e:58:11:
78:46:4d:47:5a:45:d8:08:dc:5b:bb:08:47:de:45:ce:aa:eb:
8b:55:f5:35:09:29:88:fd:04:cb:a3:77:20:73:ae:75:6f:56:
7e:53:d9:7c:9b:f4:df:00:f8:54:f3:97:32:1a:af:b2:3e:74:
24:e5:a3:82:f8:08:e6:ff:52:cc:9f:22:6f:56:df:54:0f:e2:
95:b9:f2:64:47:73:b5:96:29:ce:7c:fc:77:e9:04:ea:8d:47:
28:c7:b8:6a:99:99:b2:d6:00:d7:62:d7:63:54:e4:6c:50:ca:
52:f3:0b:a7:a6:46:a2:d5:c3:44:e7:ef:4f:e4:4f:15:1b:5d:
3c:40:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:04 2026 by rpki-client