
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier: ensHUJc6sEqORr8+RM9qG2CESQXQFmL8OO32TOn83FE=
Subject key identifier: 1C:B1:BA:3C:4C:3E:CC:E1:B8:96:2B:F4:DB:8D:52:DF:EA:41:69:92
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number: 049A
Signing time: Mon 27 Jul 2026 01:03:42 +0000
Manifest this update: Mon 27 Jul 2026 01:03:42 +0000
Manifest next update: Mon 03 Aug 2026 01:03:42 +0000
Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: kmUYaujh7omK/vVdgNGpevcGVYLpt1CRjUPInZdvaj8=)
2: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: vKCveSRO1lmMSMepRjwFMH5hVO6szfi6cYdihL340nY=)
3: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: kXLkRG4xYfLnM0J2YdWVuS+q04wt6hKsDNBBad1HXsc=)
4: 0B5742C234AD11F1851A1E75B8833773.roa (hash: PgHm8kIkg0ILltI3AvO0evXqOsp4h8xbRfxnnSTT31c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Validity
Not Before: Jul 27 01:03:42 2026 GMT
Not After : Aug 3 01:03:42 2026 GMT
Subject: CN=6a66ae6e-ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:b5:e8:54:56:a3:be:7a:e6:4e:49:e9:45:
c5:4b:1b:47:49:d3:af:65:e4:3b:a9:63:42:8f:18:
95:7c:76:58:01:3c:a7:53:59:f5:25:a4:a4:62:d2:
d1:e8:83:e9:a0:1b:00:d2:4d:66:59:32:c6:d8:09:
39:91:d6:70:e8:15:fc:ff:7c:d1:55:b7:c0:98:27:
ce:ce:1c:3a:8b:f0:4d:4f:26:30:8b:d2:aa:12:e1:
dc:a5:42:77:ea:fa:9c:63:c0:55:7f:06:84:93:cf:
80:9c:4d:a8:b3:54:88:14:14:01:1b:8d:7c:ae:ab:
37:fb:fa:a4:ed:88:6d:87:cd:fb:4c:60:94:b7:0d:
f5:c2:b7:1d:a8:26:2b:84:41:2e:91:ad:73:4b:1a:
de:85:9e:95:00:ca:4b:97:fd:98:b2:ae:5a:9c:8c:
a4:77:9d:bb:ea:b0:cd:20:f6:ad:fc:58:72:4e:48:
65:d2:3a:8a:2b:65:8b:da:85:7e:88:4d:51:b5:30:
7b:64:0e:17:35:af:92:d9:45:49:93:cf:4e:da:6f:
64:84:f0:b0:a3:b5:c7:b6:92:5f:5e:d3:58:a9:e4:
b2:8c:68:9f:a2:fa:7e:ee:09:b1:6f:54:f6:3c:67:
2a:22:ee:2f:90:93:08:8b:cd:72:91:1f:65:67:fc:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:BA:3C:4C:3E:CC:E1:B8:96:2B:F4:DB:8D:52:DF:EA:41:69:92
X509v3 Authority Key Identifier:
keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:67:62:2f:d3:b1:c4:8c:26:35:cd:ec:15:00:75:98:ea:7c:
56:5f:e7:2a:b9:20:ce:52:cb:b6:f0:af:ec:0e:b1:b4:78:25:
bd:d5:a8:03:a3:8b:d5:6d:31:24:9b:52:f1:3f:15:c4:4f:26:
62:b3:44:52:68:1e:54:86:2e:19:9c:3b:6a:aa:2d:61:8a:65:
4f:8c:fe:f6:33:7c:ee:14:35:4d:83:62:40:09:5e:a0:44:07:
c7:d2:35:54:bf:41:1a:80:77:f8:66:ba:ac:6c:1e:40:de:09:
f9:41:37:ca:39:79:01:ab:5c:36:f3:f4:20:86:a7:86:23:9b:
66:93:c9:4e:57:91:2c:d0:f1:a4:af:d6:16:73:34:d9:7d:4a:
d8:4a:62:21:34:0c:34:3d:a8:2a:14:99:28:c2:06:22:5b:72:
bb:f0:cd:6f:ad:d8:0f:a0:a5:e7:4f:6a:b8:eb:f0:87:fc:7d:
eb:c0:5c:c4:f8:f3:5b:f4:dc:b2:ac:fd:90:bc:81:0d:cb:08:
15:b9:29:5a:90:a2:a3:11:a5:79:98:5a:8e:64:d1:7d:19:da:
fe:2d:54:f2:84:5c:ab:57:c3:53:28:7e:70:a5:20:68:bd:44:
61:1e:76:c5:af:69:6f:fa:dd:ba:2d:97:4e:9a:c3:3e:6f:57:
99:84:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:42 2026 by rpki-client