
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: Cz3XxRDVL/neAdskgPAsBAlhfMmUm8SQkFiTl6jDQxA=
Subject key identifier: 4A:CF:15:A7:81:C1:4F:BF:E2:92:CC:54:FE:34:4B:1B:8C:60:63:03
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: 0147
Signing time: Thu 23 Jul 2026 06:53:32 +0000
Manifest this update: Thu 23 Jul 2026 06:53:31 +0000
Manifest next update: Thu 30 Jul 2026 06:53:31 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: kVJzb4N3cGx1Zq/oEW0q/XXZGBGS//BIWx7TXpslENQ=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Validity
Not Before: Jul 23 06:53:31 2026 GMT
Not After : Jul 30 06:53:31 2026 GMT
Subject: CN=6a61ba6b-7814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:03:fd:6f:04:d7:1b:44:ed:ea:04:b5:71:
e7:40:7f:9e:0a:73:4f:ef:14:e9:fe:17:2f:fd:c9:
57:45:d6:8f:0f:bf:7f:16:95:5b:43:da:08:0e:48:
de:f1:d1:ae:1a:18:5c:7d:69:76:a6:ad:00:fe:af:
ac:84:c4:e4:3b:9c:c9:c8:53:58:ff:a6:bb:ec:50:
8e:02:88:33:e3:ba:e7:69:5b:61:ae:73:c5:45:de:
70:ce:6c:0d:09:d7:34:a1:6f:45:1b:82:cc:fc:f2:
af:a0:0e:21:ca:e8:c2:36:d3:9d:11:ad:e0:4a:8e:
0a:9e:46:49:1a:23:cf:d7:5e:31:26:2e:4d:8b:82:
1d:76:02:0c:f7:4e:38:de:26:f3:b7:75:f0:1f:e2:
fa:11:c0:eb:7f:1a:11:b1:cc:05:0f:24:da:e8:4a:
36:1e:ee:7a:37:6f:dc:ad:57:92:68:06:19:d9:43:
ff:75:be:85:7c:45:ac:af:3c:38:ae:b6:95:0b:35:
13:45:e4:06:42:11:7f:1e:6d:ef:ec:c4:ce:64:56:
02:3e:31:d2:bc:8a:4c:11:66:1b:0d:cb:9e:6d:42:
a1:3f:a1:bf:c8:b2:ec:ea:74:b5:40:7c:4e:06:45:
e3:91:9f:74:63:ba:98:57:75:74:f3:8d:88:be:0f:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:15:A7:81:C1:4F:BF:E2:92:CC:54:FE:34:4B:1B:8C:60:63:03
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4e:ed:a0:e3:0d:63:4d:c2:d0:64:e2:be:8f:12:aa:69:f6:
0e:c9:08:26:14:d8:7d:d4:2d:24:8b:90:88:c5:ba:c4:47:4d:
6f:75:b5:d4:1c:8a:3e:5f:00:61:a2:80:80:6e:62:56:07:6a:
de:3d:a3:9b:d5:39:a7:36:54:7d:9a:74:10:ae:80:f5:17:15:
69:3a:0c:a9:42:29:49:89:30:04:8f:5f:cd:34:85:70:4e:60:
f4:a2:73:83:f2:b3:62:bb:75:d4:28:61:47:36:ee:dc:b6:aa:
c8:7f:b6:67:d6:28:51:7c:79:ff:0e:28:48:05:53:df:38:f1:
08:7c:8e:ed:00:02:c8:0a:d0:98:bd:c3:2b:ac:0d:6e:d7:78:
75:e8:be:9c:07:f2:bc:e8:c9:a8:aa:b4:4b:10:90:d2:db:0c:
10:89:b6:68:31:5e:c0:15:78:5b:2e:bd:45:1e:a8:01:b4:18:
d2:be:bd:1b:23:bf:d3:19:b3:80:b3:3d:74:56:3a:97:46:d3:
41:fe:87:97:31:66:86:11:94:9d:5e:de:a8:01:0d:74:d8:3f:
80:b7:7d:40:44:40:34:92:0b:7b:fd:d9:27:c4:b2:55:ec:48:
9a:54:a5:34:cb:31:0a:4b:23:62:f6:9e:e5:0f:df:ac:9d:6a:
e9:6e:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:25 2026 by rpki-client