
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier: nYTJloiAngaPDEAw1PoMGSEykvVprHqyivva79L3iQ4=
Subject key identifier: 72:03:00:7A:89:C4:74:2C:B0:66:3A:45:D5:37:2B:5D:1A:08:30:A0
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number: 027C
Signing time: Sat 13 Jun 2026 01:57:17 +0000
Manifest this update: Sat 13 Jun 2026 01:57:17 +0000
Manifest next update: Sat 20 Jun 2026 01:57:17 +0000
Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: HOyjhZ52UOTXwJo/xpxdxh83ilUlsVjn8C0XYIhaeN8=)
2: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=)
3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=)
4: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Validity
Not Before: Jun 13 01:57:17 2026 GMT
Not After : Jun 20 01:57:17 2026 GMT
Subject: CN=6a2cb8fd-bb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:33:bf:c4:c1:f8:4c:17:c6:99:7f:25:6d:
13:53:62:c7:b7:f6:96:d4:29:02:3b:be:11:20:48:
02:28:45:f6:ab:5f:03:dc:a8:5f:f0:f9:a4:da:ea:
8f:31:56:d3:93:63:81:2c:06:f1:19:69:41:8a:66:
33:f0:74:d5:3e:cf:36:f9:35:44:d8:e9:f7:13:2b:
e2:ef:39:6c:ea:f0:c7:7f:86:ca:7a:8c:5e:7a:36:
b9:a0:29:ad:80:0a:89:26:5c:34:9a:6e:35:4f:7d:
cb:bb:a3:fd:2d:8d:27:80:c0:b3:31:37:00:04:f2:
15:31:03:c2:9a:14:dc:91:c2:99:ca:31:a1:40:c0:
fb:9a:fb:3f:ed:59:db:cc:35:e4:db:5c:3c:8e:aa:
50:44:9f:88:a4:11:47:bb:68:74:5b:d5:f1:fb:f8:
03:1a:64:0a:19:35:35:a2:18:76:c3:5d:50:db:e1:
c3:a6:df:13:89:ae:d5:16:e3:49:9a:8f:c2:40:47:
11:25:68:a6:54:8a:b4:33:95:ed:0e:14:98:7e:89:
79:6d:84:ae:5c:5a:8d:c5:66:ca:cc:24:af:3a:e8:
2c:21:76:b5:df:9a:1b:09:23:83:19:33:67:55:04:
8a:7f:d7:11:07:8f:01:ed:da:85:01:42:0b:4f:26:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:00:7A:89:C4:74:2C:B0:66:3A:45:D5:37:2B:5D:1A:08:30:A0
X509v3 Authority Key Identifier:
keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:02:24:96:42:97:9d:49:72:7e:d9:df:8f:18:ba:0b:ce:
45:87:83:5c:d4:60:1f:ac:16:26:ce:36:b9:4c:fc:01:cf:c3:
71:16:96:41:d5:a0:dc:7f:a4:b2:6c:c9:2c:eb:46:d6:5c:7f:
ec:d8:87:a3:fd:06:ae:c5:f5:94:50:d6:d1:98:56:5b:82:e6:
b8:05:cf:30:45:3b:67:ed:e2:33:84:2c:96:59:a1:bd:c3:e8:
96:0c:37:e3:a7:f9:80:54:35:79:b8:27:02:c3:31:2a:c1:7a:
62:15:2c:eb:cd:f9:74:70:b7:5a:c5:91:d0:10:ee:7b:ad:c5:
3b:40:dd:fc:3c:65:d5:70:f0:07:c0:93:7d:e0:20:cb:77:a6:
1f:ea:38:f1:cc:0a:22:56:e5:ae:89:dc:a9:a5:dd:40:8e:b8:
57:45:c6:1e:fe:bd:a7:e4:52:ef:54:4c:c0:e4:07:2a:bd:9f:
01:3d:f7:e7:31:ba:15:b6:1a:95:fd:a9:ae:2f:8e:31:b4:99:
ed:96:87:5c:46:0e:4e:86:a4:c6:d6:b8:6b:56:60:85:87:53:
88:1a:dd:0b:54:44:17:08:5b:18:73:d0:cd:8d:0b:c9:d3:eb:
99:d9:4a:db:a2:56:4a:d8:7c:de:6c:b2:65:c7:fd:07:cc:7b:
cc:4d:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:01 2026 by rpki-client