
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
File: 1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json)
Hash identifier: TeIPMccEdgaTCGK2LO2vXT+EeIwotTmhKdZ9yF2oDWQ=
Subject key identifier: 29:FC:6B:A8:06:39:97:67:DD:DC:FD:D8:CD:3E:EB:BC:1A:99:26:14
Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
Certificate issuer: /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
Manifest number: A2
Signing time: Wed 13 May 2026 07:24:07 +0000
Manifest this update: Wed 13 May 2026 07:24:07 +0000
Manifest next update: Wed 20 May 2026 07:24:07 +0000
Files and hashes: 1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: TAZDl9bMTn/WiUHoHtvOfTMzecBy9Vrys50eZ+quoPQ=)
2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: oj8oghJ9Y6bqzBuYhxmjs+BUoyd94rS36kWzLfbq8Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Validity
Not Before: May 13 07:24:07 2026 GMT
Not After : May 20 07:24:07 2026 GMT
Subject: CN=6a042717-fc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:16:b7:f8:7a:2a:88:19:c7:71:4e:fb:00:
36:0d:ab:69:3b:88:9c:ad:bc:bb:75:84:5d:7c:5f:
d8:3a:48:70:8f:52:76:e5:05:17:43:75:df:a3:d0:
a1:5c:d2:47:3b:8e:cf:aa:17:d9:5e:6d:d6:a9:77:
6b:08:ba:70:a5:01:41:63:22:64:ba:ee:82:95:17:
c8:90:92:bb:01:1f:31:1e:61:ea:04:9a:d8:32:11:
76:59:3b:f8:ea:f4:0c:f9:30:0e:e2:91:a5:c0:11:
0b:72:6b:4d:4a:f6:42:3e:08:00:a1:42:b6:56:e4:
a5:de:70:cb:27:64:b5:42:5c:61:17:de:e0:80:92:
4c:0d:e0:a4:8c:7c:bd:5e:5a:37:dc:34:90:08:dc:
d2:84:df:bf:f9:e1:33:60:92:e4:7c:4d:e3:1c:4f:
43:1e:c3:5f:31:f8:fe:44:93:cd:68:cf:76:89:23:
11:26:c6:b8:e1:4d:78:86:77:05:e6:7f:7c:65:a4:
61:f9:a2:56:d3:44:ae:87:60:80:8c:3e:29:83:89:
62:9b:f4:da:2b:d3:2b:d6:7d:e0:8b:0e:f9:a7:93:
a6:d7:16:ec:11:ea:40:2a:67:14:a6:2e:e5:38:ca:
6f:5b:a3:fc:5c:97:76:1f:00:85:aa:b1:da:24:1a:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:6B:A8:06:39:97:67:DD:DC:FD:D8:CD:3E:EB:BC:1A:99:26:14
X509v3 Authority Key Identifier:
keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:7b:ac:dc:b8:8e:77:67:07:2a:eb:10:ba:3f:de:36:42:
a6:86:1a:68:63:05:db:f6:d5:0d:ee:3d:8b:31:36:1f:c2:f3:
9e:af:fe:80:f7:67:5a:80:0c:d8:69:74:dc:04:26:48:c6:76:
8d:e6:f4:bd:a2:59:71:95:0f:3b:09:49:02:14:a2:ea:0a:fb:
d4:55:a4:90:e5:dc:66:3b:e6:b8:bd:ed:6b:1a:65:38:33:48:
0f:48:34:93:28:f7:b2:74:02:65:dd:46:94:8e:05:75:17:be:
30:9c:58:a5:9b:8f:27:c2:a7:da:1a:b0:1d:63:b7:ad:26:13:
25:27:e1:62:4a:cb:48:5c:31:46:7c:93:aa:b8:06:8d:8e:1b:
59:17:bc:f6:35:00:24:fb:89:5e:e0:40:91:64:bd:67:cb:ed:
94:5d:32:cb:2c:13:1b:97:d4:07:36:63:61:0f:a8:64:6c:f1:
64:b3:b7:3e:85:45:9e:29:99:7a:e6:24:52:df:d8:c7:62:08:
43:c7:ae:e5:5e:38:09:1c:56:d7:84:59:9d:2c:e9:59:1a:95:
0f:5d:7f:ba:95:11:f4:42:ab:c1:bd:64:17:96:81:59:7b:6a:
47:2a:a2:70:16:4c:0a:ab:e3:ed:9f:16:15:86:89:aa:79:50:
9b:3c:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:05 2026 by rpki-client