
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File: JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier: 4bjV2K8B3kBFOCBd9N7muCXCSCNMOjp9UQsBy4/ZFRI=
Subject key identifier: CB:AD:1F:73:3F:B9:89:74:00:07:A6:F9:79:BC:C5:5C:80:E3:51:FA
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer: /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number: 01AD
Signing time: Sun 15 Nov 2026 04:22:38 +0000
Manifest this update: Sun 15 Nov 2026 04:22:38 +0000
Manifest next update: Sun 22 Nov 2026 04:22:38 +0000
Files and hashes: 1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: LNkUZ0OQwCevBj/B4oE+1HwaDy8sev6JczcFqleYSmQ=)
2: DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa (hash: u23FB+guonR/g8Bs9AVntNN8XZjIlu0ZJiya6lu6OcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Validity
Not Before: Nov 15 04:22:38 2026 GMT
Not After : Nov 22 04:22:38 2026 GMT
Subject: CN=6af9338e-392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:40:b0:f2:0c:ab:42:c6:24:e5:97:d6:5f:
44:8d:b2:32:82:c6:86:a4:4d:bf:df:d8:f8:a2:fd:
de:1f:fc:91:f2:98:bf:fa:3e:fd:27:45:cf:84:27:
00:0f:28:bf:dc:e5:88:16:13:34:d8:50:55:c7:67:
0b:ff:bb:e9:dc:d3:4f:54:33:4a:57:6c:93:aa:bc:
48:be:87:ab:21:99:27:12:84:09:16:af:63:99:50:
a6:89:f0:6d:e1:7f:f5:45:eb:19:98:17:2b:a0:a9:
b0:1a:03:33:de:e1:23:62:3a:be:e2:9e:d6:dc:eb:
92:35:18:f3:07:62:13:6c:57:41:89:0b:a5:f1:e1:
c2:b6:46:b6:51:d3:3f:e9:f1:11:bd:6c:ea:44:6b:
ef:bd:e0:39:7b:e5:64:9f:48:ed:43:c1:db:aa:af:
db:99:d7:0c:37:da:40:01:ef:a7:47:be:23:97:f1:
67:14:bd:25:41:71:95:38:41:c7:46:5d:a4:27:f1:
b0:31:6b:99:0a:47:61:a3:ca:d3:a0:65:f9:a3:08:
8c:94:df:b8:63:a2:90:e5:a4:f2:e0:ac:d7:77:cd:
f5:ac:e7:b7:25:2b:1a:f0:b0:87:48:b3:06:82:a6:
a6:28:7b:0e:88:be:3f:c7:63:07:21:ee:4a:a0:38:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:1F:73:3F:B9:89:74:00:07:A6:F9:79:BC:C5:5C:80:E3:51:FA
X509v3 Authority Key Identifier:
keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:7e:50:d4:09:80:5a:dd:d3:8a:44:d8:c8:39:5e:b7:1b:
0e:fd:99:4f:29:aa:32:d2:1b:02:ca:5a:9d:46:9f:39:31:e5:
37:a2:5a:5e:b1:35:d0:50:a0:a0:3e:ef:11:99:97:b4:8b:96:
ec:65:ac:c7:fe:be:11:61:90:d8:d2:5a:f6:51:2e:d4:01:48:
4d:c7:d5:4d:fe:30:14:37:16:28:8c:5e:26:b0:7d:cc:2e:8a:
14:03:2d:d1:63:70:15:c8:53:7f:a4:dd:d1:f0:79:11:a5:dc:
ca:91:b0:62:18:2a:a7:f6:62:8d:1c:31:37:bb:ad:31:9c:d4:
e4:a9:ac:52:e1:f7:c6:22:a1:1e:41:15:00:07:24:f9:b6:25:
81:e6:2e:20:22:4f:a4:04:b6:d9:46:12:03:06:be:b8:f5:3b:
01:a4:79:3b:9e:77:9b:34:26:e3:77:88:d4:61:ee:50:d5:91:
fa:d1:00:e5:5c:bc:37:c2:69:f7:27:3f:05:3a:7e:9f:b3:a7:
23:7b:2e:fb:ba:bf:57:0d:1a:82:f6:0b:92:9e:5a:72:93:32:
4c:51:27:18:35:c7:76:8e:0f:37:ab:80:13:99:bf:52:31:40:
67:b4:41:b0:4c:5d:ff:47:5c:75:9b:25:63:d5:a5:eb:67:ef:
b2:78:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:52:32 2026 by rpki-client