
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: HaEerT02C2KKleiR3DSKMq34Ary9J4aSc+5I7rxGZlQ=
Subject key identifier: E4:CC:B4:F9:82:05:00:6F:A4:BB:86:78:E3:62:95:E5:62:23:23:CD
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0BB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0AF5
Signing time: Wed 22 Jul 2026 20:02:43 +0000
Manifest this update: Wed 22 Jul 2026 20:02:42 +0000
Manifest next update: Wed 29 Jul 2026 20:02:42 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: gTFSUPMXVDuU2ln+408wYrHzCrgpKg1RJj0XfZLw/eU=)
2: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
4: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Jul 22 20:02:42 2026 GMT
Not After : Jul 29 20:02:42 2026 GMT
Subject: CN=6a6121e3-500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:81:23:11:b8:1f:e3:c6:ea:90:2f:2e:85:
8d:ff:ad:a6:3d:af:bc:3f:d4:3b:22:2a:94:90:ac:
7c:9b:77:b3:59:95:7d:3b:85:0f:45:2c:05:5e:54:
e4:9e:43:6d:a5:d5:48:06:ec:34:37:f2:24:c2:98:
7b:a1:07:de:ee:f8:ed:f0:33:45:68:d1:7c:6c:e2:
11:95:81:55:73:99:93:1b:e7:a3:13:bb:de:ed:87:
1d:cf:ea:e5:48:e6:22:17:23:1c:ec:3b:ae:d2:23:
fd:49:f0:90:7d:ae:ba:5e:35:4e:14:5f:79:54:0c:
1f:ed:6e:cd:e5:4e:f6:5e:ac:fe:f2:8f:90:28:15:
4b:5a:62:70:1e:a2:33:fc:74:6a:b1:da:e5:02:0e:
39:ab:c9:af:4f:10:a2:15:34:38:d0:d7:44:fc:06:
8b:66:be:35:ff:eb:64:ed:b3:38:e9:f7:18:00:57:
12:7e:0b:bf:61:6a:cd:f6:8b:41:10:7e:9f:0b:ef:
93:4f:e7:d3:46:14:60:3f:2e:9a:5a:b7:45:e0:11:
0c:03:3d:72:70:7e:88:bb:9d:6b:a7:6b:0b:ff:92:
c9:e8:c0:db:c2:0e:ad:fc:84:65:d7:44:41:9c:da:
bd:12:40:7c:44:c7:16:0c:2a:18:9a:c2:18:8f:88:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:B4:F9:82:05:00:6F:A4:BB:86:78:E3:62:95:E5:62:23:23:CD
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:b9:19:ce:84:e2:f1:f1:d8:00:6b:5d:0d:f8:05:db:eb:
2a:1d:ab:63:0b:0f:a2:14:5e:ca:67:e8:ac:ca:c5:42:96:8b:
a9:6d:b1:be:bb:94:69:2e:c3:71:4a:a2:cb:13:5f:23:0b:b9:
2f:ee:d3:f9:93:66:e5:b3:3b:ee:4a:e2:56:f1:88:ce:a2:ee:
3e:d0:0e:af:85:67:22:c3:82:2e:c6:4f:b3:08:1f:f8:39:4c:
ce:fe:5f:a2:91:4a:2a:a9:86:1b:98:bb:e0:aa:41:48:9e:3b:
26:b3:14:da:1e:ce:fe:e5:62:58:0d:af:10:55:82:20:0d:19:
47:8a:b7:60:10:6d:de:16:bd:e1:77:46:2a:62:85:6b:54:86:
2f:02:07:d5:ce:2e:3e:b6:01:b0:1a:a5:a1:9b:c5:96:df:3a:
37:cd:28:de:ef:5e:29:0a:58:ab:e2:1f:b1:24:d8:53:af:cc:
be:5a:ed:24:bc:ad:0e:5a:41:5a:cc:7a:cc:55:19:2a:a6:f0:
8a:c7:1f:57:5c:31:9d:fd:ee:a3:d4:73:f3:57:2b:4b:9e:7d:
c6:06:9c:45:1f:1b:0c:92:da:ff:6a:a4:9b:54:1e:66:ef:d5:
cf:47:82:85:42:8c:a0:75:0f:10:35:ab:f2:e5:8a:ff:cc:a6:
db:74:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:04 2026 by rpki-client