
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: nghp/+nEp53opDZ4CyABgw3+M9NrftA13wLrJXns6eA=
Subject key identifier: F8:CD:B8:63:73:8F:D3:94:8C:3E:7C:55:CF:B0:03:EB:90:AF:78:B5
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: 87
Signing time: Sat 13 Jun 2026 07:40:37 +0000
Manifest this update: Sat 13 Jun 2026 07:40:36 +0000
Manifest next update: Sat 20 Jun 2026 07:40:36 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: QqaYRX3G2ZGIlmUYv7fPZaWLjEYJLgJ33vmqN92Iv48=)
2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Jun 13 07:40:36 2026 GMT
Not After : Jun 20 07:40:36 2026 GMT
Subject: CN=6a2d0975-77ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:c2:7c:bb:e3:eb:58:55:67:d7:47:c7:1b:
62:d6:5a:6a:73:e5:ba:f5:00:f8:4e:d5:bc:79:bc:
47:1b:7a:2c:30:8a:cd:50:fd:a5:d1:18:92:39:da:
e9:57:fd:83:79:bf:82:33:05:f3:da:17:96:68:37:
3d:e3:6d:ca:b2:4a:c3:ea:8b:e5:f9:9b:3e:cb:b0:
6a:7a:d8:1a:de:06:7b:5c:9c:6b:d1:e4:9a:8e:08:
b0:f3:0c:dc:20:01:73:bd:89:27:a5:61:3f:47:68:
2f:65:86:4e:db:69:43:dd:8a:69:b6:23:56:f2:de:
86:1a:a7:75:e3:48:93:ef:15:81:d9:8d:be:6d:f3:
2d:76:b6:26:e3:fb:97:42:c7:72:36:19:fb:aa:0b:
a6:49:f5:a3:d0:8f:8c:91:22:18:ac:82:4a:e8:b9:
99:db:ac:4c:92:16:fb:df:2d:0f:14:56:44:93:18:
7a:8e:52:ee:8b:5d:3e:fb:d7:63:83:15:5b:c5:63:
f4:40:3d:14:00:71:28:bc:93:76:ae:35:57:f0:0a:
fb:18:e3:f8:f0:01:39:db:c3:a4:d8:41:3d:25:60:
1d:74:04:76:62:e5:aa:72:71:04:e4:ed:04:3c:bb:
45:94:bd:10:92:49:dd:46:55:15:fe:01:73:08:45:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:B8:63:73:8F:D3:94:8C:3E:7C:55:CF:B0:03:EB:90:AF:78:B5
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:77:a0:3c:b8:fa:96:f3:88:ad:4b:aa:99:57:d2:04:0c:
be:0e:1e:ed:2d:5a:a0:40:c5:36:aa:b6:a6:0f:37:bb:90:58:
b7:e1:7d:46:40:3f:c7:82:a5:32:c9:7a:e4:5c:af:a2:43:82:
16:f8:01:3b:34:5c:4d:4f:46:9f:12:fc:f0:4f:aa:64:6a:dc:
c5:4b:07:51:c9:b7:63:9b:a1:aa:3c:1c:74:89:a0:0d:86:f1:
c9:98:c1:89:57:64:6f:d7:3c:2e:23:87:22:6b:47:56:58:a3:
7a:9e:09:dd:c4:e7:97:a8:bc:e7:4b:d1:50:bf:c5:a3:0b:b8:
6f:12:01:5f:2f:e6:21:5e:d9:2d:1c:ec:97:8e:25:57:e8:b1:
51:7e:48:13:0d:e0:8f:a1:3e:13:a4:18:4d:b0:60:91:74:64:
ea:e0:f6:96:ef:70:be:8c:d5:8b:e4:77:d4:17:28:67:6b:de:
90:62:dc:f4:bb:16:93:bf:e0:d4:98:39:cf:a1:9f:dd:b0:64:
94:68:0a:4d:ba:c6:d7:e0:48:d4:06:da:13:53:d7:4a:76:7d:
48:07:f9:1c:ba:92:6d:4a:be:5e:72:90:0c:36:cb:72:a9:3e:
df:01:50:60:ce:80:fb:5b:7a:39:6b:0b:be:10:1a:36:65:45:
5d:4d:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:02 2026 by rpki-client