
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier: /CtIJrzi8PRF9s48vqcn3bVbQTrGNS7iihkuiF3nOIY=
Subject key identifier: 0D:88:8E:57:77:F5:99:D8:64:5B:28:71:B2:26:E8:3C:A6:65:CE:90
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number: 015A
Signing time: Wed 13 May 2026 05:05:06 +0000
Manifest this update: Wed 13 May 2026 05:05:06 +0000
Manifest next update: Wed 20 May 2026 05:05:06 +0000
Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: /jJNqGmETVDeQX/O8Ij87jLNnRRSbYZYDfMdUL9PuFQ=)
2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: sr4Cah733B97dhkxeL+rixTREcZ+VoyvCGgZsHawZaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Validity
Not Before: May 13 05:05:06 2026 GMT
Not After : May 20 05:05:06 2026 GMT
Subject: CN=6a040682-0095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:17:85:10:5b:cf:27:c6:ad:ba:14:0f:b3:
9f:ed:38:31:55:f2:71:b5:ba:f8:c5:5d:d1:03:56:
4b:36:6a:17:56:9e:c8:73:f9:2b:5a:c4:f6:d4:bc:
32:04:b7:34:eb:05:f7:b2:0a:3b:34:85:f7:8c:f8:
58:36:fa:5b:a7:78:14:ae:c6:9c:b7:e5:cf:ec:85:
63:b3:c8:2c:5a:3e:21:bc:63:d4:42:8d:b5:37:3a:
10:16:bc:12:55:2d:e9:6f:c7:3e:b7:93:c7:db:0f:
15:dd:0d:d0:61:28:12:88:55:67:3c:42:c7:27:e7:
0c:b0:77:7c:3b:25:a5:90:ea:26:34:37:39:40:3d:
00:99:75:79:ef:8a:73:71:61:8a:ad:0e:c0:b0:87:
18:10:7c:1a:39:37:a9:48:42:37:d5:9c:1e:36:e8:
6b:75:69:fe:1e:ca:ff:ef:df:dc:7c:0f:96:1e:45:
d6:08:da:92:e6:95:d2:0e:f6:46:32:9e:ba:f7:a4:
6c:22:8c:96:d7:0b:6c:e7:71:aa:4e:85:3c:70:3a:
33:6d:8e:eb:ca:aa:b4:f0:c9:01:35:45:a4:66:1e:
2e:b5:c0:a7:34:de:38:f4:8d:15:2f:34:1b:c3:3d:
31:ba:06:0f:b5:a8:a2:51:56:f8:c5:8e:0e:a7:0f:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:8E:57:77:F5:99:D8:64:5B:28:71:B2:26:E8:3C:A6:65:CE:90
X509v3 Authority Key Identifier:
keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:57:56:5a:e1:c8:1e:61:19:55:0f:b5:c8:94:e6:72:7a:
2b:74:01:02:e7:0c:50:c3:58:35:f3:31:6d:62:85:a5:cc:0c:
33:a5:26:bc:da:08:65:5d:60:70:4e:3e:a6:6a:b6:e1:4f:65:
9c:1a:6c:c1:14:55:4b:df:13:0a:64:aa:02:97:61:7b:53:2b:
5a:cd:81:04:d6:75:e5:c8:ee:c9:28:f4:86:ec:1a:87:2d:f4:
cd:3a:8c:cf:92:70:26:2c:d4:b0:e0:b3:e3:b3:7b:5d:b4:c9:
d9:a7:15:e4:c9:74:13:52:26:4c:4f:a2:60:8f:0e:1f:5b:2d:
5d:21:1c:81:f0:23:d8:76:3c:4c:38:50:04:c2:72:86:60:89:
1c:83:54:a8:cf:6f:04:1c:1d:ed:39:fe:d4:22:1e:32:d0:2b:
6c:aa:8b:a9:cd:c9:08:7f:fb:c9:0e:cb:6a:8c:1e:f5:86:0b:
4e:75:fe:2d:83:5b:1c:0b:cb:75:55:a6:2d:67:39:fa:44:13:
6e:9d:09:67:4b:cd:da:d6:4d:bd:68:ec:92:20:13:72:14:2b:
16:fd:d2:96:d1:af:b8:19:ef:28:3d:e1:3c:35:5a:5c:95:bd:
70:e4:7e:1e:06:43:6c:b3:aa:8f:9d:60:a5:b2:82:24:82:64:
28:2f:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:57 2026 by rpki-client