
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: 6Z2K1K+qJjajnkDJLVPrRiWQALl1zqquNLGF5gyoBCo=
Subject key identifier: 0B:14:26:0B:1B:A7:53:B8:E2:3E:B8:D6:DA:A2:56:2A:13:01:34:1A
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 034C
Signing time: Mon 27 Jul 2026 02:08:05 +0000
Manifest this update: Mon 27 Jul 2026 02:08:04 +0000
Manifest next update: Mon 03 Aug 2026 02:08:04 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: fXeP6BzVRJrWxwkzW+3RZ5DHsd7RtvvJZvqjINoeVu0=)
2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=)
3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=)
4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Jul 27 02:08:04 2026 GMT
Not After : Aug 3 02:08:04 2026 GMT
Subject: CN=6a66bd84-da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:16:49:5c:93:a6:73:95:95:1b:ef:04:ea:
df:f1:01:30:34:99:a3:0b:6e:71:70:20:c2:02:4b:
eb:25:20:d8:d7:7a:85:ab:56:21:44:58:ed:ff:55:
7e:7f:c3:16:91:88:d3:6f:69:e2:90:4d:a8:fc:71:
18:15:46:a8:35:03:5a:13:aa:c2:39:39:65:f9:86:
bb:1d:31:23:16:e7:ee:e0:5c:a2:dc:0e:a8:ff:c9:
53:97:0b:03:ae:f6:64:5e:19:b5:4a:43:d0:f9:fb:
ae:95:41:dd:21:eb:6a:b5:cf:48:16:f9:05:ff:2f:
d6:a0:2c:bf:b7:9c:0c:60:37:a0:88:71:90:b6:d2:
21:3b:6f:91:0d:c1:7e:76:4f:a0:4f:1e:a5:41:3a:
ae:7f:f4:ac:0e:06:82:a0:a5:b0:f6:56:3d:d0:1b:
07:0e:fa:93:14:71:3c:f9:a3:a8:87:cd:a3:83:14:
48:36:e9:38:f4:18:cd:bf:86:e0:e6:d7:fe:99:dc:
a2:bf:06:57:2e:6c:99:db:88:ec:3a:c4:21:ba:4e:
15:66:0d:b4:3b:0e:c4:a9:6f:d1:79:8f:86:95:6f:
bb:85:96:6c:d0:15:cd:b1:7a:c9:16:b8:86:99:ab:
7d:ad:3b:09:4d:cc:95:1b:d5:8d:c9:92:98:62:6e:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:26:0B:1B:A7:53:B8:E2:3E:B8:D6:DA:A2:56:2A:13:01:34:1A
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:8e:a5:5d:fb:61:99:e6:a2:1b:63:d5:5d:49:76:f8:f7:
53:0f:7b:40:63:01:68:6d:76:c7:8e:1f:30:cb:19:53:b5:c4:
7b:43:71:2e:73:af:91:df:1a:19:33:d7:b1:34:87:1c:2d:6c:
7a:6a:e7:7c:d0:26:75:98:9e:60:34:32:16:3a:5a:93:c1:0e:
64:49:2b:38:16:86:cb:e1:9e:50:30:16:b1:cb:2e:a9:84:b8:
2a:57:4b:d7:0b:7e:93:b2:b3:b4:f8:0e:b3:45:0b:1f:f5:de:
e3:68:be:fa:76:37:5c:62:40:43:46:81:b1:fd:12:56:5c:73:
cc:dc:cb:cd:e0:c8:65:50:b9:66:7f:5e:fe:26:df:ca:ff:17:
33:bd:82:af:17:f8:87:01:5c:eb:77:c6:4c:16:a8:46:6f:5e:
7f:91:95:24:d4:9b:1d:3d:b0:2c:cc:06:31:fb:93:49:23:9e:
08:05:4c:81:ee:c9:37:ff:86:49:c8:49:8b:6d:6b:e8:16:3f:
40:25:02:68:a5:99:e5:e4:ea:5e:2f:a1:65:b1:d2:22:91:ea:
18:7d:a9:cb:7c:57:aa:42:f3:f2:2d:bc:56:1a:7f:3a:94:63:
b3:d1:f2:4b:ba:91:45:99:29:05:a7:d8:2a:89:a9:21:71:7d:
17:c6:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:24 2026 by rpki-client