
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File: JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier: Dc1TJNycKoGuXL5ZQ8MXUCfnT5FJ8e9mm4GWNFn4plc=
Subject key identifier: 82:8E:F8:5D:A7:25:8D:BC:3E:4E:BA:51:A6:15:86:4C:F1:C1:11:29
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer: /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number: 4A
Signing time: Thu 11 Jun 2026 10:46:01 +0000
Manifest this update: Thu 11 Jun 2026 10:46:00 +0000
Manifest next update: Thu 18 Jun 2026 10:46:00 +0000
Files and hashes: 1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: h9Dobm1CZT9xTvITXZRexPTiKKytT36HZJY+BLOVmSI=)
2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Validity
Not Before: Jun 11 10:46:00 2026 GMT
Not After : Jun 18 10:46:00 2026 GMT
Subject: CN=6a2a91e9-62c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:81:bf:2f:cd:1e:ac:ff:d7:fb:78:da:5d:
3c:91:a8:c1:63:69:d0:e3:aa:90:2a:ab:3f:fa:a6:
d6:34:3f:6a:bc:ba:89:30:15:b8:27:d6:fd:69:0f:
06:9a:0f:48:05:32:a0:cf:ae:fc:3c:da:71:f6:2f:
32:3a:1c:89:ae:28:e1:5e:cf:cd:c2:84:3e:22:f4:
7a:98:dc:7a:54:ef:b5:4b:1f:19:be:4e:26:95:a0:
6e:f4:e7:23:83:3b:96:44:29:7a:a0:fd:74:3d:05:
a8:8a:af:ef:98:69:cf:4d:de:dc:e9:3e:8c:fe:4a:
61:3b:95:b0:66:5b:91:c4:e5:e1:33:92:aa:43:29:
bc:5a:7e:37:47:38:f9:f5:35:e3:65:de:5c:2a:1b:
4f:7e:99:7d:f7:1e:44:2a:d1:9d:9b:27:72:98:7c:
9b:7e:e3:42:2a:80:be:f8:1c:2c:dd:7e:af:b6:52:
d3:a8:6e:7a:f4:f4:b4:83:52:c8:f1:cd:cb:5d:41:
b8:65:d9:43:9a:84:9d:88:51:1a:77:f8:b6:f8:f2:
64:3a:ed:19:b6:b3:e6:f1:8c:2f:73:aa:4c:da:52:
ca:e6:b8:23:a8:aa:44:d4:60:76:5b:a3:91:bd:e9:
f4:4f:ac:ac:74:c6:b9:2a:da:6e:5b:f7:2d:49:92:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:F8:5D:A7:25:8D:BC:3E:4E:BA:51:A6:15:86:4C:F1:C1:11:29
X509v3 Authority Key Identifier:
keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:ac:15:93:06:be:9d:7c:6a:73:2d:2f:39:92:64:d5:6b:
86:cf:2f:65:a4:51:c1:aa:fb:3d:f1:1e:6d:ad:cf:98:f6:96:
bf:65:5c:1a:31:b4:41:ba:4c:cc:0d:ce:d2:d2:dd:ed:20:a7:
72:2f:c9:04:db:cf:ce:ac:c0:68:3a:58:5b:4c:be:d5:b7:3b:
bd:bd:96:3b:ab:0c:7a:8a:56:69:57:ef:8e:aa:80:47:01:20:
f7:82:ba:4d:ce:ef:19:19:5a:00:48:ce:ee:d7:f8:27:cc:bf:
07:99:f7:bd:61:94:dd:3f:fb:57:14:c1:a0:1d:13:bf:7b:06:
bb:38:2f:f4:94:3e:9e:6b:cc:e3:bb:1a:85:4b:d8:0a:c0:91:
59:66:24:0c:5a:02:24:8e:38:76:84:fe:bc:ad:b3:ad:4c:a5:
80:d4:a4:85:37:9d:2b:a5:30:e7:01:8a:ef:0d:16:25:d3:9b:
c8:ac:31:55:1d:0e:16:a9:bd:a5:51:c7:44:cc:17:57:d9:a1:
74:3a:ae:41:4b:57:63:07:e4:f7:d7:22:21:4d:05:ca:2a:1f:
18:49:73:51:48:fb:7b:77:96:36:70:50:ec:3b:0a:ed:d0:cc:
23:3b:53:70:31:8e:ad:ec:d2:cb:72:88:10:9e:c0:81:32:16:
46:36:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:57 2026 by rpki-client