
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier: FzTFwB2I0XCGpNmbnZm+isndo52B9OEKL+LLmZaO+bA=
Subject key identifier: 7D:9D:55:01:1C:72:6A:B8:15:4B:CD:AB:EE:D5:98:E7:02:32:87:74
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0AF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number: 0AE3
Signing time: Tue 12 May 2026 19:27:59 +0000
Manifest this update: Tue 12 May 2026 19:27:58 +0000
Manifest next update: Tue 19 May 2026 19:27:58 +0000
Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: t92PUZ6o65/MlE71n4hjy2nQwA8rWFxOcCPRW13ifOs=)
2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Validity
Not Before: May 12 19:27:58 2026 GMT
Not After : May 19 19:27:58 2026 GMT
Subject: CN=6a037f3f-1efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:03:56:c0:c3:f9:5f:04:4a:ef:1f:25:ed:
04:b2:e7:af:51:f4:c4:92:ce:28:ee:ba:89:6e:b9:
2f:2b:de:2d:80:cc:7f:22:50:2d:e2:04:e4:68:bf:
55:88:1c:dd:04:b2:14:ae:51:ef:ce:9d:10:93:7d:
79:b3:29:1b:d5:f7:5c:0d:70:45:5f:b7:dd:ff:a2:
2c:25:ad:97:2e:60:ee:68:55:60:b5:e9:b9:46:b6:
8b:60:58:2c:2d:e7:c8:94:a1:6e:f7:16:f0:24:46:
8e:4b:9e:8c:fe:82:89:9a:b3:15:f6:b0:25:24:37:
26:5e:96:fe:81:96:b1:6b:c6:b9:54:cc:09:84:2d:
13:d1:18:49:26:4e:39:8c:ce:62:5e:c4:10:de:f5:
de:69:f2:eb:1f:70:77:12:f0:bf:d3:67:a2:bf:b8:
ba:8a:69:05:32:84:e4:ce:59:b2:fc:e0:1f:88:af:
1b:cb:b8:b0:c9:90:fb:ad:31:0c:fb:b8:40:64:e5:
0e:50:c0:65:86:dc:06:44:72:b5:f6:e7:99:07:3f:
0f:07:80:95:d2:67:51:8b:02:42:a6:49:19:90:74:
52:36:4e:d7:9f:00:13:b2:1e:74:73:06:26:14:56:
a5:ba:e0:60:4e:48:ef:4a:0f:1f:f0:f9:45:49:f7:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:55:01:1C:72:6A:B8:15:4B:CD:AB:EE:D5:98:E7:02:32:87:74
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:b9:aa:39:03:df:e7:d7:0a:88:90:f7:92:52:b9:11:a6:
74:df:cc:6f:5c:c8:ff:7d:89:a2:46:cd:be:f5:41:34:de:e5:
8a:a0:a8:73:1f:4d:1f:86:2a:1a:fa:84:aa:f6:12:7b:e6:99:
6d:37:20:13:2f:13:b6:08:19:8a:ff:b1:68:96:7e:e6:f4:1a:
25:26:26:e2:87:16:63:e9:db:1b:6a:f7:ce:14:0e:ed:2d:cd:
ea:dd:6f:3d:bc:13:25:d4:a4:e1:41:5e:a5:dc:e2:ef:6c:6d:
1b:51:58:a8:1e:68:ce:01:02:f9:ff:ba:69:40:b7:f7:80:e8:
9e:ba:93:4b:c4:fb:ee:d1:62:0a:9d:c8:c9:5a:e0:30:22:93:
0f:72:c7:b1:5f:36:02:1f:a2:2e:b8:45:58:40:ef:ee:89:1f:
35:12:04:54:8b:3c:b9:96:ce:a5:b7:60:4a:37:6e:5c:ad:49:
a9:35:06:ed:c4:11:ac:92:25:26:c2:cf:e2:82:af:53:07:f3:
4c:fe:ea:17:e1:d3:c3:cc:8a:7e:86:01:d5:0d:5a:88:0b:a4:
18:0c:33:88:4c:63:d7:58:69:cf:ba:ec:72:c2:01:ca:94:d1:
33:d0:90:4a:50:31:9c:f1:87:30:66:08:2f:26:55:40:b2:8a:
29:41:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:35 2026 by rpki-client