
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: ZmrtcfTdH1Wmb/FB+vX7lpXz5Jrp1s9wSsRSwoaVCSY=
Subject key identifier: 46:D9:1A:89:DB:0C:6A:6C:26:29:B1:13:BE:C6:D7:7A:DB:84:7A:24
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 3586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 3571
Signing time: Tue 28 Jul 2026 15:22:11 +0000
Manifest this update: Tue 28 Jul 2026 15:22:10 +0000
Manifest next update: Tue 04 Aug 2026 15:22:10 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: w/o/hSaga75boFaS2L+fujvd9s0TSURCAp4Gh25DPeo=)
2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ofcFpR0dG4lGMFPSarAEqgGjniCtEUFFNDbSn2FRdQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: Jul 28 15:22:10 2026 GMT
Not After : Aug 4 15:22:10 2026 GMT
Subject: CN=6a68c923-c736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:ec:bd:02:73:a8:d0:10:da:bf:84:a3:ed:
70:0d:b5:6d:96:7a:5b:63:98:f0:13:91:ae:1d:90:
33:b0:69:a3:b5:74:08:6b:41:b6:45:9e:7e:8e:f8:
98:3c:a0:b6:4d:c5:16:46:0c:0a:31:98:6a:02:c8:
dc:2d:92:da:c3:27:85:a2:2c:56:24:93:ff:d9:36:
92:8f:24:41:5d:5b:17:48:0d:06:23:8b:35:6d:ae:
11:6f:d5:9a:77:02:b8:ca:b5:71:76:a0:5d:05:b3:
10:e7:61:69:5a:a3:23:90:ea:3b:f3:24:e9:ee:05:
be:fc:60:04:89:cd:d1:c2:9e:c5:98:27:1a:18:a1:
ef:7a:c6:f6:46:80:86:ad:cf:2b:38:2c:1c:4e:2f:
2a:ae:82:ac:b2:3e:5f:eb:0c:01:3c:50:1c:61:57:
bf:0f:51:6f:0f:86:af:a0:d6:40:30:33:bf:7b:80:
2f:55:30:e3:87:3d:84:44:a8:27:07:e8:d2:96:e6:
0f:4e:ed:01:51:97:d2:f0:44:9d:71:d6:ec:3f:08:
b4:99:11:79:70:c2:43:89:ef:bc:f5:fd:25:89:74:
ab:8b:d7:1d:cb:8d:60:c6:b1:f0:4e:b2:2d:bb:0b:
57:a0:78:03:16:7a:df:38:41:70:42:b1:0b:87:97:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:1A:89:DB:0C:6A:6C:26:29:B1:13:BE:C6:D7:7A:DB:84:7A:24
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a3:40:d7:5c:a0:ca:79:30:67:49:07:7a:ce:77:9f:d4:ce:
63:82:b1:f4:eb:6e:e6:3d:c0:d6:a5:07:87:83:30:0a:bf:26:
a1:81:35:a2:d4:35:fd:59:6c:cb:d6:12:b3:00:5e:e1:9c:f1:
78:32:b0:b3:1a:8a:3d:32:59:91:60:0e:3a:f2:3a:09:7e:27:
96:21:28:98:76:fe:59:e0:e6:b6:10:84:b0:2e:cf:4f:52:79:
1c:ae:04:6b:4c:b7:4a:4a:9c:20:fa:e2:99:7f:17:85:d6:9f:
3b:18:22:1d:bb:ee:84:47:8b:bc:a6:71:f6:a4:dd:de:c7:a4:
39:f2:48:62:93:86:26:8a:be:3d:ba:55:0c:a4:eb:fd:61:f4:
2c:0c:06:3d:c9:7d:90:b4:be:33:ab:b0:a1:4a:22:ff:7b:09:
ae:0c:45:fd:3a:d2:9f:ef:82:87:07:cf:c2:6d:51:8d:1b:a0:
f0:e9:75:74:b4:8e:55:ca:59:a1:58:89:ad:79:d3:ff:2e:20:
05:92:d9:7d:f9:2f:9a:5a:47:bb:3b:e9:8e:e3:de:6a:8f:70:
91:d2:75:92:7b:93:92:ab:f1:48:de:87:a3:e1:94:52:87:fd:
6a:1d:d0:74:59:aa:f4:8c:1f:5e:48:29:67:ca:01:e4:9e:7d:
f3:58:8a:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND
QUU4QkY5MEQwHhcNMjYwNzI4MTUyMjEwWhcNMjYwODA0MTUyMjEwWjAYMRYwFAYD
VQQDEw02YTY4YzkyMy1jNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlBvsvQJzqNAQ2r+Eo+1wDbVtlnpbY5jwE5GuHZAzsGmjtXQIa0G2RZ5+jviY
PKC2TcUWRgwKMZhqAsjcLZLawyeFoixWJJP/2TaSjyRBXVsXSA0GI4s1ba4Rb9Wa
dwK4yrVxdqBdBbMQ52FpWqMjkOo78yTp7gW+/GAEic3Rwp7FmCcaGKHvesb2RoCG
rc8rOCwcTi8qroKssj5f6wwBPFAcYVe/D1FvD4avoNZAMDO/e4AvVTDjhz2ERKgn
B+jSluYPTu0BUZfS8ESdcdbsPwi0mRF5cMJDie+89f0liXSri9cdy41gxrHwTrIt
uwtXoHgDFnrfOEFwQrELh5djuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbZGonb
DGpsJimxE77G13rbhHokMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE
QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ
cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzaNA11ygynkwZ0kHes53n9TOY4Kx9Otu5j3A1qUHh4MwCr8moYE1otQ1/Vls
y9YSswBe4ZzxeDKwsxqKPTJZkWAOOvI6CX4nliEomHb+WeDmthCEsC7PT1J5HK4E
a0y3SkqcIPrimX8XhdafOxgiHbvuhEeLvKZx9qTd3sekOfJIYpOGJoq+PbpVDKTr
/WH0LAwGPcl9kLS+M6uwoUoi/3sJrgxF/TrSn++ChwfPwm1RjRug8Ol1dLSOVcpZ
oViJrXnT/y4gBZLZffkvmlpHuzvpjuPeao9wkdJ1knuTkqvxSN6Ho+GUUof9ah3Q
dFmq9IwfXkgpZ8oB5J5981iKZg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:41 2026 by rpki-client