
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: PIOkz/8aAjtOCO2U3lHZRgVWC+S+7DMGZjtC8fiGIoY=
Subject key identifier: F7:97:D4:7C:8F:12:82:AF:AF:39:96:C4:45:56:98:EE:6D:84:4A:03
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 011E
Signing time: Thu 23 Jul 2026 07:30:36 +0000
Manifest this update: Thu 23 Jul 2026 07:30:36 +0000
Manifest next update: Thu 30 Jul 2026 07:30:36 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: r7zR8VqWFJDvTvoTG+SUjUEl3Vv5L93f3Dmkzxvm9gc=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jul 23 07:30:36 2026 GMT
Not After : Jul 30 07:30:36 2026 GMT
Subject: CN=6a61c31c-abf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:60:04:c6:bd:18:65:5b:af:95:16:d1:d1:
0a:48:cf:ae:df:3f:53:6e:57:d9:c4:99:75:44:fe:
cb:15:4d:3e:e0:2b:46:9f:d2:34:5c:5e:d6:6d:29:
bb:d7:fd:0e:79:97:fe:24:4b:f1:dd:7c:73:97:c8:
d2:11:66:d1:c1:86:a0:ab:cf:6a:69:a1:87:17:cb:
ab:4b:41:ef:f9:b9:ae:fa:f3:bb:bf:65:78:c4:af:
98:21:15:f5:92:a4:b1:d0:30:af:2d:c3:41:0d:7b:
6b:16:50:31:0e:1c:ec:0e:78:42:04:7f:ad:af:2e:
83:a4:ef:c7:74:e4:e5:2d:bb:a8:4b:63:07:b7:13:
db:b2:1d:a0:f8:b6:c8:11:0b:f6:a0:a3:53:70:d0:
cf:6a:17:75:6c:cc:fa:bf:f0:fc:cc:3f:fe:c2:bc:
41:d7:5e:44:8e:38:6f:c8:b7:b3:80:19:1b:72:04:
ac:c3:2f:34:c8:1d:3c:4a:51:d9:14:18:01:45:26:
08:5a:bf:a8:e9:80:67:9e:85:97:b5:0f:c8:9a:ca:
f4:d8:89:6e:e2:c6:24:1a:02:01:b3:5c:86:a1:28:
fe:1f:9c:54:c0:8a:c4:ed:6c:82:d6:41:d7:41:57:
bc:c0:e2:a8:4e:cf:c0:df:5f:8c:3b:02:71:bb:33:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:D4:7C:8F:12:82:AF:AF:39:96:C4:45:56:98:EE:6D:84:4A:03
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2c:c6:ba:72:49:0b:a5:ef:ba:72:5b:64:a0:a1:02:e0:e8:
d2:73:0d:8d:39:77:70:2e:01:01:51:2d:03:b8:eb:28:d4:b4:
47:06:20:49:47:94:3e:44:c4:2c:91:92:9f:08:44:76:99:2e:
2a:be:f7:ba:6a:10:50:13:06:2f:4e:ae:cf:7a:a7:92:1d:51:
33:4c:cc:0f:6c:0e:e4:dd:b2:2c:65:5a:18:2f:5f:18:3a:13:
a7:02:3a:d7:ac:11:d2:33:88:92:33:86:fd:0b:7c:64:36:23:
cd:b3:a0:dd:3d:59:57:60:c0:99:a1:8e:ed:0f:ab:50:04:a3:
bc:44:b3:8d:ea:8e:ff:ec:00:c6:2c:2f:0b:ce:ad:27:49:c5:
72:1a:a4:fe:2e:60:b7:f8:41:46:96:28:77:70:93:4e:95:5c:
0d:b5:a8:3e:0f:dd:b9:93:7e:2a:4f:5c:49:b7:8b:e5:68:39:
60:98:51:57:c2:df:bc:e4:05:81:75:75:4e:96:16:f6:b0:80:
f0:61:a7:a4:20:12:2a:74:03:8b:c7:92:f3:5e:87:03:f9:49:
a1:48:34:e8:fc:4f:f5:dd:a6:92:63:35:5a:8a:69:ac:ee:15:
06:83:97:c2:a8:09:a9:4b:00:8d:84:8b:7f:fc:0d:a7:21:5c:
6e:c9:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:46 2026 by rpki-client