
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier: vNKk4APC6B0UmawOPZLODq1RrFFMkaglReKR6zFkILI=
Subject key identifier: 78:F2:D7:EA:CD:58:8E:A7:C5:DB:37:FF:29:59:91:ED:CD:45:48:54
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial: 13A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number: 1397
Signing time: Wed 22 Jul 2026 17:03:52 +0000
Manifest this update: Wed 22 Jul 2026 17:03:52 +0000
Manifest next update: Wed 29 Jul 2026 17:03:52 +0000
Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: kOQakSqd4drVpbJjcv1Ywqkrq3D/X+bwz5n3bHqwLC8=)
2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5031 (0x13a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Validity
Not Before: Jul 22 17:03:52 2026 GMT
Not After : Jul 29 17:03:52 2026 GMT
Subject: CN=6a60f7f8-621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:81:c3:f2:4b:4a:43:6f:03:a4:c5:73:4f:
80:62:c6:22:e3:b6:d3:3d:26:7d:1d:41:7a:91:1f:
16:66:7d:f6:53:01:3e:d5:14:c3:94:ca:5c:f2:20:
83:2b:53:d3:05:1e:5f:21:b7:a7:30:fb:10:2f:26:
db:99:95:1c:51:14:80:18:54:7f:f6:c9:da:df:17:
89:b0:61:58:d5:fc:fc:12:31:04:3c:9c:20:0d:cf:
ae:07:aa:73:57:e9:4a:43:be:6b:66:b0:70:0e:d0:
b4:8d:02:f5:07:a9:ee:a2:82:0e:58:5a:94:26:d6:
a5:6e:cd:2f:83:15:77:b1:85:ed:26:c3:60:2e:64:
62:18:d7:92:36:30:a2:ca:d3:f4:78:63:73:8e:b5:
5b:01:09:20:3f:48:ba:ea:30:c6:72:2f:36:02:3a:
d4:22:33:d4:0e:c3:f4:09:fa:d8:5d:3a:df:79:71:
00:1f:64:df:16:45:16:1e:c3:e1:89:b7:23:db:a9:
fd:93:dc:8a:21:43:98:22:e7:b1:1b:48:40:e1:35:
2d:2c:aa:30:12:b5:08:47:c0:8e:49:19:70:e1:7a:
94:f0:08:d0:75:cc:74:2c:de:44:5e:db:f6:75:00:
47:40:4d:e7:61:a2:b5:66:4b:ed:23:13:c7:0e:50:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:D7:EA:CD:58:8E:A7:C5:DB:37:FF:29:59:91:ED:CD:45:48:54
X509v3 Authority Key Identifier:
keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:6d:f5:bb:4a:75:ac:35:f8:48:8f:11:be:84:b0:4a:cb:
63:c0:b5:e0:67:1b:49:2f:1b:05:86:b7:72:1e:31:43:cc:be:
9c:c9:73:fc:95:31:7b:c1:0c:e6:64:cd:9e:f0:c6:f8:b5:d9:
dc:d7:97:3f:7b:2f:25:bb:0b:82:17:7e:11:7d:32:11:34:9a:
73:2c:b1:fd:fb:5e:00:63:2d:08:90:df:67:78:fc:3b:6d:50:
a2:31:76:db:28:0e:1e:50:bf:04:22:11:ae:fb:fd:82:e9:52:
a9:ec:2d:55:a1:86:ed:27:31:da:af:36:42:4a:66:4c:20:f2:
83:c6:d6:58:53:aa:74:6b:ab:5d:d6:9e:2b:37:e4:58:14:64:
c2:4d:14:20:19:7c:d3:6a:c6:24:d5:d2:01:0e:a0:4b:64:c0:
3c:80:af:87:01:1f:51:9c:2c:d7:a9:62:72:97:80:05:22:12:
a9:d7:ee:87:96:30:24:d2:88:fd:ab:11:d1:98:51:e5:dc:f6:
f9:2a:60:a2:df:ba:7e:5f:ae:f4:3a:de:c3:24:9f:ec:f8:e3:
37:bd:28:2e:e6:5d:16:8b:5d:00:19:74:ff:05:ac:cd:19:5a:
dd:2c:0e:36:d2:dc:e0:75:a0:35:56:b7:4e:53:eb:d8:69:26:
f8:d8:d7:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx
NDVGQ0Q2NTkwHhcNMjYwNzIyMTcwMzUyWhcNMjYwNzI5MTcwMzUyWjAYMRYwFAYD
VQQDEw02YTYwZjdmOC02MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnSKBw/JLSkNvA6TFc0+AYsYi47bTPSZ9HUF6kR8WZn32UwE+1RTDlMpc8iCD
K1PTBR5fIbenMPsQLybbmZUcURSAGFR/9sna3xeJsGFY1fz8EjEEPJwgDc+uB6pz
V+lKQ75rZrBwDtC0jQL1B6nuooIOWFqUJtalbs0vgxV3sYXtJsNgLmRiGNeSNjCi
ytP0eGNzjrVbAQkgP0i66jDGci82AjrUIjPUDsP0CfrYXTrfeXEAH2TfFkUWHsPh
ibcj26n9k9yKIUOYIuexG0hA4TUtLKowErUIR8COSRlw4XqU8AjQdcx0LN5EXtv2
dQBHQE3nYaK1ZkvtIxPHDlAD/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjy1+rN
WI6nxds3/ylZke3NRUhUMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG
QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx
SGphV3EzbGkyQ01VWDgxbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUrZt9btKdaw1+EiPEb6EsErLY8C14GcbSS8bBYa3ch4xQ8y+nMlz/JUxe8EM
5mTNnvDG+LXZ3NeXP3svJbsLghd+EX0yETSacyyx/fteAGMtCJDfZ3j8O21QojF2
2ygOHlC/BCIRrvv9gulSqewtVaGG7Scx2q82QkpmTCDyg8bWWFOqdGurXdaeKzfk
WBRkwk0UIBl802rGJNXSAQ6gS2TAPICvhwEfUZws16licpeABSISqdfuh5YwJNKI
/asR0ZhR5dz2+Spgot+6fl+u9DrewySf7PjjN70oLuZdFotdABl0/wWszRla3SwO
NtLc4HWgNVa3TlPr2Gkm+NjXrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:11 2026 by rpki-client