
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier: Bimb/Eb7f/nFII5Zm0PZo5jz473JWbh4Nhr7lz0YtFE=
Subject key identifier: E4:25:AF:FC:81:A2:77:D9:EF:03:A8:A8:79:D6:CB:B8:29:48:41:E2
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number: 017F
Signing time: Thu 23 Jul 2026 06:07:29 +0000
Manifest this update: Thu 23 Jul 2026 06:07:29 +0000
Manifest next update: Thu 30 Jul 2026 06:07:29 +0000
Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: xrKl3i+g/EkurOrI3QTytScj5B7uJmlMNW0BAZvmRsM=)
2: 863F0DD25A7111F1AAD3157ABD833773.roa (hash: XX+jIToyo9IFnK0I5bFVzqEt6Lm2ccIcYxfwAnhOJ78=)
3: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: sr4Cah733B97dhkxeL+rixTREcZ+VoyvCGgZsHawZaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Validity
Not Before: Jul 23 06:07:29 2026 GMT
Not After : Jul 30 06:07:29 2026 GMT
Subject: CN=6a61afa1-bf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:d1:e4:32:c3:d3:4a:a5:3d:5e:34:47:32:
22:aa:52:f9:af:ab:b5:67:38:d5:32:f5:65:70:1c:
b1:c4:35:ab:ca:a1:a7:da:07:05:e8:b2:cb:4a:a2:
70:a9:35:5c:80:ab:d3:3b:78:8d:80:22:fc:69:f2:
92:3c:22:f0:64:8d:a1:86:a2:ef:6c:3a:a7:7a:a7:
27:1d:15:4f:7d:ec:41:79:78:c3:43:72:45:60:ea:
38:a1:bb:88:a2:86:57:bb:a8:4a:45:07:d0:d1:3e:
da:88:03:38:eb:e6:a9:d7:b5:05:cd:1a:b0:10:96:
e4:bf:ce:c4:2c:d5:35:5e:a0:0f:99:b8:02:85:b3:
39:61:e0:7b:c4:49:07:85:e7:86:12:a2:a9:46:0a:
b3:09:ab:44:ca:19:01:30:be:8a:b3:9a:0d:b4:41:
e3:2e:9b:e2:a2:7b:55:fa:1a:0f:50:84:68:ec:a7:
31:22:34:8b:eb:6d:cf:e4:d8:01:4b:f9:7b:60:08:
ca:c1:ce:24:e8:b9:ea:25:68:2d:b0:df:19:82:4b:
aa:09:fd:f5:0a:e1:6b:f7:9f:38:a0:60:13:41:c8:
24:f2:9a:f9:14:a8:9d:61:45:30:df:97:49:e9:02:
c6:5b:16:d2:b2:1e:1e:31:42:66:ee:58:d0:09:34:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:AF:FC:81:A2:77:D9:EF:03:A8:A8:79:D6:CB:B8:29:48:41:E2
X509v3 Authority Key Identifier:
keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:5e:7d:27:d4:5d:c5:90:81:9c:14:fb:05:6d:c6:a7:57:
62:2e:5e:d1:b8:9a:e4:0f:72:9b:75:34:de:91:4c:24:9a:e9:
08:9d:d0:a0:28:a8:3b:60:bd:ef:6d:b0:b0:8f:e7:c8:a6:96:
7e:08:24:73:53:ac:f4:1e:4e:83:04:4a:b2:c4:3a:c4:ba:f6:
a9:23:38:8b:49:d6:7b:f2:85:35:bd:86:c5:a5:0c:5e:84:05:
98:e3:ae:5f:5f:dc:4b:b0:28:ac:a9:dd:6a:2b:66:94:bc:1f:
31:c5:0c:91:ea:27:de:1b:91:15:ad:a5:13:aa:26:7d:77:74:
74:35:d9:e8:97:24:76:06:06:12:60:76:78:82:17:12:45:37:
2b:e9:0f:29:af:7d:80:c3:8c:c1:e4:2c:97:ea:8b:7d:39:7c:
cc:68:3e:ba:2c:7c:05:87:34:bb:81:bf:89:e3:89:44:51:c5:
0a:e3:98:77:25:4f:af:82:1b:e2:45:a4:b6:35:2f:fb:d2:ea:
04:93:bc:7c:37:15:cf:6a:7d:bf:bb:9a:f3:21:67:39:81:08:
ef:37:5d:8b:f9:81:10:bc:d5:23:69:b6:9a:42:e8:19:f0:45:
76:6d:ab:1e:f4:b5:99:85:d7:e9:65:dc:6e:ca:5e:8e:fc:28:
3f:aa:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:38 2026 by rpki-client