
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier: z6eTG94hDcqbqDcAQ/t/xui0YSu7e1hUt+WTdlHw9WI=
Subject key identifier: 58:BB:80:15:D0:F2:3A:7D:64:2E:9C:97:DE:62:75:72:82:2F:21:32
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number: 02B5
Signing time: Sat 13 Jun 2026 01:32:14 +0000
Manifest this update: Sat 13 Jun 2026 01:32:14 +0000
Manifest next update: Sat 20 Jun 2026 01:32:14 +0000
Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: DKwY2MDFMeRD3WRy31tLSv3MvokPTIPpEacvGKrtkDQ=)
2: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
3: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
4: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Validity
Not Before: Jun 13 01:32:14 2026 GMT
Not After : Jun 20 01:32:14 2026 GMT
Subject: CN=6a2cb31e-11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:ef:28:4b:83:74:84:f5:b6:a5:86:f1:2b:
83:88:20:97:4f:10:b6:c2:af:94:19:5a:c5:96:2c:
e6:b9:bc:d9:5d:d5:ae:65:36:19:a7:bd:fb:6a:37:
ae:e1:f0:08:f0:3a:7b:e2:88:7b:20:b5:12:6a:b5:
b9:6a:37:9c:c0:0b:70:55:f2:72:2b:e1:60:13:7c:
c6:c3:76:7b:5a:62:03:0d:32:0b:08:f7:60:22:17:
15:66:c3:a1:44:c8:43:22:2b:17:94:75:cb:11:f7:
b1:26:4c:3f:a1:d1:b3:11:5a:e3:02:cf:13:bd:52:
81:ba:bf:3a:b6:71:b7:13:aa:8a:82:f5:4a:63:40:
90:6d:27:c9:be:29:c5:b3:e2:e5:1a:b8:16:62:53:
81:c0:67:fc:04:04:25:b7:71:ff:a5:e3:83:5e:e3:
aa:7e:4b:37:9c:8c:42:36:26:51:22:5c:5d:26:b2:
6b:a2:31:d3:09:da:f9:a9:26:61:8c:8f:c5:c8:35:
a6:5e:85:e7:82:cb:d6:0f:74:7b:af:59:85:ec:cc:
10:5c:2d:3d:7a:ae:42:06:36:fd:dd:a6:f8:4c:79:
c7:19:1a:0b:8c:6c:95:d3:83:f0:3d:ef:45:96:aa:
00:44:5e:3f:1b:1d:00:cf:c0:1e:93:8c:7e:2e:46:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:80:15:D0:F2:3A:7D:64:2E:9C:97:DE:62:75:72:82:2F:21:32
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:ae:54:54:7e:74:1c:13:72:a1:70:02:9e:18:4d:1e:85:
8c:52:06:3b:9c:01:ab:5b:80:4a:d9:a8:1f:3b:8e:98:54:44:
00:b3:f2:88:7b:bc:2b:56:7f:b2:27:0a:39:7b:94:9b:24:60:
a9:25:4a:d4:c6:52:10:0a:3b:43:73:17:2b:c3:7e:86:63:cb:
0f:8a:77:18:a8:2f:e6:a8:bc:3b:c9:e8:7f:56:d9:1e:d9:61:
2a:bc:f2:6d:54:86:df:e0:58:ef:f3:8a:68:61:d1:41:4a:64:
0f:f8:b3:c8:1e:76:d7:9c:58:34:5f:cc:a4:92:97:a1:1f:9a:
7c:12:a8:04:08:35:ff:ae:b7:e0:13:01:b4:32:eb:69:36:08:
33:8d:e0:04:13:a1:c7:47:f0:13:d7:ec:95:f6:21:dd:1a:8f:
21:a3:b6:10:23:c2:62:14:6d:56:f9:42:84:91:31:41:86:da:
f4:e8:5b:c3:5c:a7:bc:d3:b4:ec:0a:bd:a7:23:94:ca:0f:9b:
8b:44:85:22:40:6b:e0:1f:7b:21:38:4b:06:ec:70:39:c1:0b:
1d:03:10:37:fa:e7:6b:d5:d6:c7:ab:81:09:91:14:de:7c:91:
0c:98:7c:06:f3:d2:41:56:1e:1e:ff:a7:ac:0b:51:3e:60:7d:
dc:dc:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:39 2026 by rpki-client