
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier: UnuRuXKn6++mvrskEqqVxdeaxwg8NSP8MxaaDi1l7qo=
Subject key identifier: E2:8F:7B:7B:03:FE:F4:D5:77:B9:FF:31:F9:38:70:1E:28:C3:BC:4D
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number: A7
Signing time: Sat 13 Jun 2026 07:21:10 +0000
Manifest this update: Sat 13 Jun 2026 07:21:10 +0000
Manifest next update: Sat 20 Jun 2026 07:21:10 +0000
Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: opasi7BZMlDNrfaWzC2nj/tSHQxal0f7niKCa1UO1Yk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Validity
Not Before: Jun 13 07:21:10 2026 GMT
Not After : Jun 20 07:21:10 2026 GMT
Subject: CN=6a2d04e6-1c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:f8:7e:f4:bb:4e:29:b7:be:79:90:c9:73:
57:c5:15:0a:db:bb:2e:37:94:c0:57:73:85:b2:4a:
12:20:12:21:22:86:94:44:c9:72:f2:8b:c7:13:ed:
a1:fe:30:f8:e5:06:bd:e5:a2:95:e7:6c:c6:a5:5a:
d9:a0:e2:a8:9e:20:80:62:3f:0b:1e:96:ac:a5:6e:
0a:cd:fb:88:46:87:b5:e1:ff:46:c3:88:0b:e4:cd:
3b:90:41:f6:ee:a3:83:85:6a:04:9d:a2:30:ca:b3:
e6:49:13:f7:40:1b:43:5d:9d:c1:5f:c5:6f:aa:bb:
c9:2c:1d:c6:e3:4c:fc:8a:da:5f:75:bb:c7:e7:a2:
fc:ab:20:9c:73:0a:b9:63:ac:68:ef:c1:05:0d:bd:
18:d9:5d:17:e3:66:08:05:d5:59:ee:68:1b:f9:4b:
4d:49:52:0c:36:aa:7e:cf:a4:f5:f6:6d:23:18:98:
68:1e:a7:95:95:04:8c:2d:fd:6c:60:d0:db:41:b5:
4d:f2:ca:cb:b9:c0:d1:54:a8:64:1e:6c:e2:4c:28:
b3:0f:ba:52:0a:43:52:61:ee:83:c9:9e:53:d0:c6:
e8:80:2b:cd:4e:03:0e:7e:46:20:58:79:a1:63:d4:
67:5d:e3:97:ea:77:f6:31:c4:fe:6e:a2:13:11:92:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:7B:7B:03:FE:F4:D5:77:B9:FF:31:F9:38:70:1E:28:C3:BC:4D
X509v3 Authority Key Identifier:
keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:86:fc:a3:bd:e7:38:ea:0f:97:83:06:c3:42:4c:9b:d8:
36:07:94:1e:36:c5:de:39:0d:ab:e2:bf:01:1a:87:a3:a7:4c:
52:50:a1:46:d9:be:cd:43:51:95:24:ca:60:19:1e:c1:39:d5:
ff:03:3a:40:a4:2d:54:d7:32:e6:26:37:1f:8c:98:2f:a2:a6:
57:d6:51:0e:04:bc:cf:e7:44:c6:bc:e2:a8:bb:a8:dc:b8:ef:
db:b5:0a:35:e3:2c:fb:77:fd:b9:79:27:63:c4:35:d9:2c:86:
b8:ea:bd:2c:6a:54:54:22:48:4e:de:c9:e5:3d:49:0f:48:02:
08:67:50:fa:68:99:aa:d4:4b:d7:92:50:b1:d8:c5:eb:a6:89:
61:29:2a:aa:4b:fc:ce:77:6a:7d:25:5c:10:03:5e:17:78:20:
3c:31:d3:f9:8a:b6:14:86:cd:02:93:49:df:6c:db:36:14:ef:
a3:26:5a:bc:b9:49:90:c5:b3:39:68:e8:d4:a0:4a:43:7f:4d:
a6:6c:be:a6:a9:d4:32:6d:21:f3:58:04:ac:56:f0:84:79:c1:
ff:91:8f:48:2d:08:00:ea:5a:37:89:97:c4:cc:44:1d:f3:ff:
ab:5c:4e:07:cb:8f:66:97:a2:db:6c:97:f7:ae:69:e7:be:cf:
3f:77:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:14 2026 by rpki-client