
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier: Gz5wCJUo/hISn/sQjPhDAwcbc4vyD+AoK5fng/3C/hQ=
Subject key identifier: 83:0F:C5:9F:17:CE:B6:CB:5B:68:B0:00:2E:52:B8:9E:16:B0:FE:FF
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0D11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number: 0CF9
Signing time: Wed 22 Jul 2026 18:43:04 +0000
Manifest this update: Wed 22 Jul 2026 18:43:04 +0000
Manifest next update: Wed 29 Jul 2026 18:43:04 +0000
Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: h1aS4MLF2dkNatWiXFuXrxGacb1CEq29tMcR0L8A794=)
2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Jul 22 18:43:04 2026 GMT
Not After : Jul 29 18:43:04 2026 GMT
Subject: CN=6a610f38-6763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:34:39:dc:c3:6d:ac:d5:ee:7f:ad:d1:04:
ff:1f:6c:b9:f7:03:22:5d:a4:70:20:a9:2c:49:81:
cd:e2:c1:e6:da:1b:13:48:0d:1e:dc:06:20:dc:58:
61:92:20:ee:c3:50:c8:5f:48:b7:7e:0e:bf:3e:f4:
dc:2c:6e:81:07:3c:78:3b:34:59:f9:4a:08:93:d4:
f9:53:d5:0a:3b:89:d2:6f:cb:c5:91:a6:b6:54:1e:
41:80:5a:d9:df:98:7b:bc:35:69:7c:20:49:4b:e6:
6b:d5:63:ca:2e:18:f0:57:20:fd:09:3e:1e:81:99:
ef:78:93:82:26:d8:98:b6:d1:d9:e0:c5:8f:fd:8f:
38:06:3f:3e:1b:e3:eb:c1:31:56:86:a5:2b:7b:ed:
09:79:69:21:f7:2e:07:7c:44:9a:1a:fb:2b:85:96:
df:d4:1e:1f:22:51:7a:21:61:5d:ab:41:83:e2:47:
95:b4:4d:f4:37:ca:10:1a:31:3d:a3:e4:77:fb:24:
55:39:78:b3:b5:1c:97:82:db:f3:d9:49:14:43:e6:
27:02:2b:82:b4:e7:64:2b:86:e8:7d:2d:3c:59:50:
7a:64:e8:88:d8:ef:6e:f3:ce:96:61:13:b7:6c:eb:
65:02:87:31:90:77:7e:18:e7:9d:1d:0a:52:b0:61:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:C5:9F:17:CE:B6:CB:5B:68:B0:00:2E:52:B8:9E:16:B0:FE:FF
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:56:d6:e6:d1:5d:3c:16:0a:d8:87:40:9d:7f:5b:77:d2:
96:f5:9f:e9:4d:b0:bf:03:f3:b8:8f:33:7c:67:67:00:ea:00:
e1:11:4e:cc:dc:4d:bf:24:5e:5d:08:14:00:f4:64:4f:a2:2d:
9d:8a:59:3d:97:f1:de:9a:38:fc:f0:0a:8e:02:ac:2c:2d:aa:
27:42:d5:e7:16:a8:1f:2a:86:cc:5c:e4:88:ba:1e:ad:9d:0f:
89:ef:23:c9:2d:bc:39:22:be:85:be:17:a1:ab:08:81:ac:02:
e5:52:07:1e:dc:7d:93:da:63:23:2c:2c:14:eb:d4:dd:fb:6a:
a7:5f:76:60:41:47:72:76:41:b0:49:80:09:56:1e:f9:d7:91:
f2:15:88:2f:3a:19:fb:70:d4:cf:f8:c6:a5:96:35:ea:04:36:
03:e8:51:c3:96:f4:d0:bf:9b:ba:c1:3d:30:68:6d:cd:43:97:
a1:81:69:65:65:5d:b7:ba:fb:fa:31:ac:83:b9:5e:7a:6d:68:
5c:d1:21:02:64:61:4e:fe:7f:3c:b8:22:82:82:20:67:50:dd:
9a:d3:cf:bb:aa:8d:14:ac:df:76:51:62:a4:e4:b7:eb:00:ac:
ff:60:a3:b9:87:11:ad:70:39:83:02:46:1b:b2:ec:32:47:27:
25:d3:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:37 2026 by rpki-client