
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: 0Qj2NWFGFyrk+Apev8U0r9fLog2fI6cbjgY/rsBPGkI=
Subject key identifier: A2:7D:E0:68:AB:3C:46:4B:DA:28:83:FE:86:42:34:BA:4A:6B:51:A9
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 0336
Signing time: Sat 13 Jun 2026 01:05:43 +0000
Manifest this update: Sat 13 Jun 2026 01:05:43 +0000
Manifest next update: Sat 20 Jun 2026 01:05:43 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: siP6ZhlG6TaaDrKgJw1prQYok5iVuUpGKBvgmZavCsY=)
2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=)
3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=)
4: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Jun 13 01:05:43 2026 GMT
Not After : Jun 20 01:05:43 2026 GMT
Subject: CN=6a2cace7-0ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:af:b3:aa:df:11:17:8f:a7:25:88:ff:6e:
07:32:f9:13:2a:94:8f:39:4d:64:9d:dc:80:71:d0:
8b:4f:8a:e2:f8:57:45:88:5d:48:9f:50:a0:28:17:
c8:21:ee:07:f2:07:80:4f:24:7a:e8:37:b5:26:f4:
1d:25:c3:c1:c8:c8:85:84:29:22:22:9b:34:0a:78:
5c:46:92:bd:04:43:23:a9:45:f4:94:9a:92:20:0e:
18:3a:18:7d:e7:12:87:76:4a:98:c1:4d:19:4b:db:
f1:bd:f3:2d:79:bf:81:b1:a3:a9:be:78:c4:55:20:
e4:3e:1f:d0:a2:3c:f9:b0:bc:b5:47:d4:19:0e:65:
4e:9b:bc:df:68:0f:56:9c:93:f9:de:ee:10:f2:4d:
f5:c1:27:5a:10:2c:d1:8d:02:b2:3e:3c:28:42:d1:
6a:76:33:96:dc:bb:41:1f:9d:d3:08:02:07:0d:09:
24:2e:0b:d1:c2:ef:d8:36:b7:9e:7f:9f:44:b1:9e:
44:8a:ed:a4:8d:65:87:6a:f4:b7:bc:8a:f6:5e:b4:
b8:f4:b9:1a:da:33:b3:af:21:11:72:ca:1c:ee:81:
b4:1b:eb:2f:84:83:61:67:39:01:cd:af:3e:4b:a0:
cb:1d:4b:de:7a:8b:13:af:e4:40:6c:70:32:22:32:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:E0:68:AB:3C:46:4B:DA:28:83:FE:86:42:34:BA:4A:6B:51:A9
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:ae:06:7b:e2:88:3f:d3:a5:6e:42:4c:5e:cf:d0:46:7d:
0c:32:0d:cc:45:d3:97:99:00:4c:a1:d3:0c:75:6a:a7:3a:38:
f8:96:29:aa:00:d8:3d:ca:d1:01:fb:28:50:d3:c9:61:f5:c9:
83:3c:f8:33:3c:ec:5c:e7:1d:b2:7e:40:63:cc:5a:47:e7:33:
ba:75:4d:38:ab:a4:7d:2d:6c:5f:32:3a:e9:cd:fa:4a:37:ec:
44:3e:5b:10:a1:ca:b8:a4:ee:44:db:1b:ef:f7:4a:89:e5:18:
03:2c:ab:aa:34:36:11:65:9b:a3:ba:ce:76:83:c5:61:ec:b5:
15:e9:b8:6f:26:31:9b:c1:f0:b8:bb:6c:eb:a3:67:3f:6e:1f:
bf:cb:08:2d:d0:86:27:f2:4c:a1:c5:cd:d2:e6:f2:59:a8:6e:
20:32:92:10:d1:24:78:24:d0:71:c2:2b:85:30:4f:1c:67:ea:
b1:e1:aa:7b:1d:bd:5c:c5:27:50:31:26:7d:43:58:85:78:02:
07:10:36:63:21:bd:03:d4:df:f4:30:ab:ee:f6:42:e5:7a:cb:
1a:dd:a9:e0:b9:48:2a:f7:7c:f2:1c:0c:c5:01:32:09:9e:a2:
70:78:20:f4:5a:78:b5:8a:b4:08:bf:3a:40:08:9d:7e:f9:6e:
32:75:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:32 2026 by rpki-client