
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: VubK1Oi1YPoOIBAUWdyM5wGxHZra7C6iEVtyEJcnTAM=
Subject key identifier: 1A:61:DC:0E:FE:76:BD:04:8B:E8:B6:4E:8D:C5:89:1C:2B:6E:97:E0
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: 0167
Signing time: Wed 23 Sep 2026 04:45:34 +0000
Manifest this update: Wed 23 Sep 2026 04:45:33 +0000
Manifest next update: Wed 30 Sep 2026 04:45:33 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: OGeDN04W1GEJORy+tTwN+Ja8kTUO8E3gbxa3ek0xicg=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Validity
Not Before: Sep 23 04:45:33 2026 GMT
Not After : Sep 30 04:45:33 2026 GMT
Subject: CN=6ab3596d-065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:73:c6:cd:3b:53:ad:71:d1:78:8e:ac:a3:
ae:8e:8b:94:79:e6:db:a3:2f:4e:75:98:dc:3a:78:
4c:e1:a9:f4:21:b0:46:7d:fa:ee:5d:29:5a:d5:b4:
88:1d:2e:d6:f1:43:34:d0:18:83:35:87:92:63:61:
65:b2:3a:e3:09:b1:8b:e3:3d:fc:26:21:19:f9:69:
0e:e4:79:9c:d6:42:c1:eb:d0:89:0c:8a:7a:9c:68:
80:f7:bb:e5:b7:d2:41:a7:d8:ab:05:a3:a9:b9:98:
28:3a:35:6a:3b:9f:7c:d5:a7:d1:1f:c8:3f:22:b8:
91:d6:be:c7:c7:c1:00:cf:1f:24:eb:07:41:c5:b4:
09:5b:69:3a:65:30:f3:6b:06:3b:32:72:17:77:4c:
c2:05:23:09:4d:26:90:ac:d7:eb:e0:ea:95:03:80:
ce:17:de:b2:0f:2f:7f:af:71:fb:33:6f:5e:c2:ac:
64:ea:bc:00:87:57:e0:2d:8a:72:a6:91:08:08:a6:
d0:82:94:ac:d5:6a:21:6b:7e:1f:7a:78:ef:14:dd:
82:25:13:06:24:4a:84:26:4d:e1:60:58:1e:91:d7:
71:dc:0b:24:66:cd:ce:62:a3:c3:fc:15:2f:94:1a:
f6:35:76:cc:32:4a:01:05:e9:bb:79:00:73:5b:20:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:DC:0E:FE:76:BD:04:8B:E8:B6:4E:8D:C5:89:1C:2B:6E:97:E0
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:a2:b5:94:86:69:a8:a2:5c:81:27:fd:06:d9:88:2d:2d:
f1:dc:31:3b:c0:8d:b6:5e:bd:e6:08:00:1c:44:f0:7a:3f:93:
90:8f:61:8b:74:5d:97:d3:93:9f:fb:94:b3:2c:60:29:f4:c7:
46:11:44:9f:0b:d4:8c:91:96:cd:80:20:54:57:b3:77:f0:5a:
ce:0c:b7:15:54:00:dc:fa:5d:12:d6:ab:71:4b:f0:69:10:16:
6b:0f:77:cc:0d:e4:24:3f:99:ea:0a:43:84:91:be:1a:6c:65:
2f:e2:d2:6e:9f:a7:ab:91:f5:b2:cb:f6:34:99:ae:13:4a:73:
94:c3:54:7b:12:8b:85:69:c1:ba:f6:6e:76:5c:4c:38:eb:78:
47:9b:b7:7c:5e:14:8a:0b:28:78:33:f3:be:25:f2:50:41:46:
58:27:af:b6:07:d1:da:9c:0b:3e:c1:f3:0d:97:09:7e:29:2e:
f8:75:4f:a7:c3:78:ea:7a:e7:72:a1:3d:c0:c6:c0:68:e8:05:
44:69:fe:99:8b:57:ea:59:18:01:fa:31:05:27:34:32:86:5c:
9d:48:74:79:e9:c3:8b:09:e9:08:7a:d4:37:d4:04:48:3b:dc:
8b:44:b8:8b:b7:38:06:f6:b5:cb:2c:b2:ec:0b:a7:11:6b:c9:
ee:9b:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:46 2026 by rpki-client