
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier: BVdHC4pH9msZ2ognOy7Sjg6wlQJy61W+tBUkF8Ll5xU=
Subject key identifier: 9B:93:EC:FB:66:3D:B5:65:1E:E0:ED:B0:71:1B:EF:78:CA:F3:25:CB
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial: 0D63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number: 0D58
Signing time: Tue 22 Sep 2026 17:55:29 +0000
Manifest this update: Tue 22 Sep 2026 17:55:29 +0000
Manifest next update: Tue 29 Sep 2026 17:55:29 +0000
Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: 6UQ4slJOAUBqO7HItIhlNXxHuYdngnQvN3ey4GNQQq8=)
2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: RiwHeRk8VWcBAazIYgTzPI1hQB18IPCOX+XKmTtPU4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427 (0xd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Validity
Not Before: Sep 22 17:55:29 2026 GMT
Not After : Sep 29 17:55:29 2026 GMT
Subject: CN=6ab2c111-c49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:7a:68:b7:3d:71:57:ca:81:30:12:1f:9e:
68:de:53:1a:bc:16:29:19:e3:88:1d:a1:57:1e:a6:
66:33:d7:54:fd:fe:e5:b5:c7:59:50:57:7d:9e:01:
c2:ad:20:b0:7d:cb:25:aa:0d:30:0c:d6:5e:ab:d9:
2e:f7:92:c0:56:23:1f:df:1d:ec:28:24:6c:18:38:
2b:0b:53:a3:df:00:fa:49:93:d4:0e:a9:b6:c2:67:
a5:5b:8b:4d:f7:d0:34:cf:7f:c1:fa:0d:aa:54:4d:
85:38:46:06:22:2d:0a:f1:da:fc:bd:86:b5:f3:f0:
38:78:50:b2:63:dc:5e:4b:40:92:60:c7:ed:1a:99:
a7:04:19:33:44:92:28:15:f4:e3:c0:9c:76:f1:82:
83:2b:b0:5b:cb:22:4e:ec:7b:ec:48:fc:94:6b:6d:
c6:75:db:1d:7c:fc:f5:3c:1f:a9:32:db:1e:88:5e:
d7:ba:bc:bb:8a:3a:58:c0:97:83:3d:d9:a6:4c:34:
f0:67:10:72:ed:f7:2b:50:bb:4d:85:cc:18:71:c1:
3d:31:c4:e4:04:fd:56:bd:33:64:3f:44:05:3b:fd:
4c:f1:26:28:dd:34:b5:7f:f5:71:50:79:60:35:cc:
8b:b6:75:44:54:b4:10:8b:5c:f0:47:f0:6b:5d:27:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:93:EC:FB:66:3D:B5:65:1E:E0:ED:B0:71:1B:EF:78:CA:F3:25:CB
X509v3 Authority Key Identifier:
keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:30:e4:f8:3e:06:6e:0a:34:13:45:a5:8a:e7:42:d5:10:
51:be:c5:f3:0d:8d:90:b7:7f:97:56:fe:49:81:44:3a:1b:7e:
54:35:cb:58:5f:1d:84:74:17:90:35:a6:25:bb:34:64:41:09:
b7:7d:3e:8c:3c:a6:9d:45:d7:ac:0e:67:ab:29:b4:19:e5:92:
97:8f:79:72:07:0b:68:d9:e6:2f:ee:d7:d2:b4:8d:c4:ce:e2:
d0:d6:ba:14:b1:f4:c2:e6:72:7a:2a:6b:7c:6d:fa:42:70:23:
37:6b:58:89:16:c3:2f:30:ec:db:42:3e:b7:58:92:81:a3:bc:
e6:bb:ee:57:10:5d:07:fd:f5:76:63:e6:ea:f5:79:eb:c2:0d:
53:32:1a:64:87:4b:18:71:bf:c3:63:9f:98:ee:31:6d:90:04:
cf:f6:30:d6:ce:95:c0:f0:92:84:06:f4:6e:c7:b2:34:28:0f:
9a:89:c0:9e:f9:c0:23:9f:7a:70:de:49:5a:93:81:ed:d2:87:
04:da:39:70:4d:ac:08:99:0f:bf:68:0a:71:83:0b:44:b7:08:
84:57:37:24:15:1d:24:aa:e9:19:5a:cb:e1:f2:16:ca:75:71:
fd:8e:c4:dd:dd:81:7f:29:4a:24:a2:d8:eb:2b:c3:c3:f1:e1:
64:cb:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:27:37 2026 by rpki-client