
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json)
Hash identifier: 5pJlSfy4lA4kbgHDkljcGkE7DcawtlKSGAIykmnvN1I=
Subject key identifier: B9:1B:1C:67:D1:43:32:BF:41:B3:F7:26:47:5A:59:1F:AA:A3:A9:BD
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial: 059B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
Manifest number: 0591
Signing time: Wed 22 Jul 2026 23:59:47 +0000
Manifest this update: Wed 22 Jul 2026 23:59:46 +0000
Manifest next update: Wed 29 Jul 2026 23:59:46 +0000
Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: QwnKv3Y/gdiko8V+G68ef6CPTpVQ3Et6/gXKrYIzbc8=)
2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: yt+ZtKnpbuqQeAQi0WMw2FAsGK7S+Q6MIWDK5QZrGws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Validity
Not Before: Jul 22 23:59:46 2026 GMT
Not After : Jul 29 23:59:46 2026 GMT
Subject: CN=6a615973-dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:86:a9:8f:49:a6:b7:cc:ec:6a:d9:8f:0e:
65:53:3c:f5:d6:c9:44:83:28:98:1a:37:77:9e:7e:
0b:d0:7d:84:8b:f2:07:d9:5e:fd:09:9d:4e:dd:cc:
e8:81:ba:02:4a:67:45:bb:15:13:c9:90:2a:4f:4d:
68:58:d8:00:9c:ec:3d:d0:c0:f3:20:78:e9:b6:ab:
33:5b:89:84:a5:c0:aa:e3:9f:62:72:5a:78:df:ea:
19:e6:16:83:9a:93:10:81:d1:e2:7d:15:f4:fa:b2:
20:1f:c8:d4:72:7e:d0:eb:68:e1:6a:95:05:e5:d8:
8e:a9:76:51:b8:cf:3b:2b:a6:a8:93:f6:d1:de:9f:
d8:98:35:d6:df:45:d3:36:79:53:55:78:b0:7f:1b:
f3:4b:ef:50:49:71:1b:86:a3:87:76:59:e2:3a:22:
af:39:21:e0:05:97:47:6f:4a:1f:17:69:37:bd:df:
6f:61:f5:8c:8b:d5:f2:f9:4d:06:42:15:7b:e6:9f:
1c:c4:f3:b4:02:70:2d:4d:87:49:ae:58:74:b1:24:
20:09:44:75:05:aa:76:6f:d1:31:89:14:71:9c:e2:
82:30:9d:1c:4f:e1:0d:1a:1c:39:fe:e8:85:f6:a2:
ae:cb:f8:73:51:46:76:fe:e2:55:e8:8a:b6:d1:b5:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:1C:67:D1:43:32:BF:41:B3:F7:26:47:5A:59:1F:AA:A3:A9:BD
X509v3 Authority Key Identifier:
keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:22:39:36:d7:2a:e7:be:b0:f8:2f:b0:c8:5d:bb:4d:49:
d0:ed:87:84:68:0d:8b:7f:05:c8:b2:25:cc:19:aa:2e:a4:aa:
fb:33:44:63:41:73:90:e4:1f:62:62:0c:c5:90:c4:dc:cc:c3:
ca:e6:63:3c:36:db:c4:56:10:8e:39:d9:37:d7:70:7e:16:50:
8f:84:ce:b0:1d:ca:15:18:27:70:b3:21:d9:32:ad:2d:12:03:
ae:a1:45:9f:d8:7a:89:1f:0d:f6:4b:11:8e:b1:b1:78:2c:57:
83:1b:8a:e7:ac:d4:ed:77:9a:26:c8:1c:c9:d8:01:cf:2f:74:
a1:05:b5:68:dd:d4:16:0b:91:4e:7e:eb:38:9c:ba:3d:8d:b7:
41:83:5a:35:8f:4b:7e:ac:ef:d7:cb:26:0c:35:e1:a6:9b:2e:
85:9d:f8:e2:06:28:0a:8b:5b:24:22:af:17:63:7c:06:77:65:
d7:1b:45:19:6a:fe:7e:1c:bf:27:1d:90:4f:89:f4:2d:e0:88:
95:78:fc:8d:07:d7:33:96:ad:7e:bf:03:6e:82:1e:48:b0:bf:
e8:9c:62:d5:b3:43:8b:f3:41:17:13:f7:56:85:51:d1:6e:85:
de:25:41:f2:59:94:26:8a:69:50:86:11:fe:aa:78:d3:40:a4:
38:fc:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:08 2026 by rpki-client