
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: Gb+45eXx+DI+UGOox8aHlbOC5M9bSzhuEit+o9HZfZI=
Subject key identifier: 16:3A:46:A7:EE:20:34:68:C7:BB:39:AC:AC:65:B0:B3:F6:6E:93:1F
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: 013C
Signing time: Thu 23 Jul 2026 07:19:19 +0000
Manifest this update: Thu 23 Jul 2026 07:19:19 +0000
Manifest next update: Thu 30 Jul 2026 07:19:19 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: EgpuHGvqBvmiy67e1rPK2xstxK0lioL1mJ474rhyrsk=)
2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Jul 23 07:19:19 2026 GMT
Not After : Jul 30 07:19:19 2026 GMT
Subject: CN=6a61c077-4196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:fd:9e:47:97:b7:7d:58:70:88:73:41:0e:
6d:70:f4:75:23:1e:de:64:45:10:0a:ef:e7:03:54:
5e:16:62:92:10:05:c4:fc:e5:20:84:bb:41:3b:90:
7f:4b:0b:da:50:ee:8b:61:49:54:02:f7:79:03:38:
a8:71:7a:38:a4:ed:14:34:2b:ae:99:c3:8b:ff:0d:
7d:1a:86:bf:39:a0:e3:4d:0d:45:b1:e3:30:36:74:
bf:5d:21:8f:05:30:61:f3:ec:00:88:9f:6c:63:f2:
6a:1a:bd:e1:56:6c:cd:5b:32:16:e9:23:02:d4:0f:
57:08:36:9f:ec:b0:60:77:07:7e:c2:d2:cb:17:31:
ae:fe:a1:90:be:b1:72:d5:03:fe:67:3e:b5:a0:8f:
e4:77:03:1a:2e:77:79:7b:15:63:ef:e4:33:e9:31:
f0:bd:d7:bd:0c:4a:36:de:b8:26:8e:26:77:4f:23:
64:a4:f9:8f:41:75:3f:c4:69:5d:59:5d:55:fe:23:
b0:a0:f9:d7:38:0e:77:55:13:93:66:73:fd:78:c0:
d9:e6:06:3e:6d:98:5a:b0:f5:4a:9e:7b:db:d3:e4:
77:68:ab:15:e6:b2:88:2d:b6:48:12:86:b4:0b:ad:
e8:ee:d3:a8:40:5b:95:e5:b9:4d:37:e4:08:8c:4f:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:46:A7:EE:20:34:68:C7:BB:39:AC:AC:65:B0:B3:F6:6E:93:1F
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:08:b3:22:37:d4:4d:4a:a8:c9:05:2f:55:2a:95:06:b8:d0:
27:c0:22:22:76:3d:7c:55:3c:cf:6e:64:b8:ab:55:97:77:44:
73:a5:6c:8d:f7:dc:aa:ad:38:e7:ce:f6:0d:91:34:66:35:60:
b1:b3:ac:c9:52:f8:5c:d7:eb:01:3d:da:1c:8c:94:cb:ff:1f:
68:d6:e6:e4:ea:80:b5:a8:bc:ed:24:93:50:a8:e9:48:f6:16:
8f:8b:94:7c:8c:6c:53:60:a3:49:81:fb:f9:12:d3:5e:6d:50:
0c:58:a1:67:25:bc:fa:0c:a0:f3:37:5e:0e:d8:3d:ec:10:41:
fe:84:f7:da:1e:f1:85:9f:29:6b:2d:bb:36:46:5a:5a:12:f1:
d8:51:4b:2f:1b:ff:c2:94:04:d2:5b:62:4a:83:83:6b:27:ab:
90:1e:6b:e6:a9:4c:67:43:14:0b:d1:62:ce:9e:1d:41:83:85:
71:24:4f:81:6a:38:cd:f9:64:75:b4:f6:82:d5:1c:4c:3e:bf:
61:e7:7a:89:3a:7d:66:54:bf:fa:fb:39:65:66:a1:6b:5f:e4:
1d:8c:ce:af:16:38:ef:bd:a4:c3:d0:c6:4f:3b:e8:29:23:29:
cd:11:11:0b:a5:79:fe:7d:4f:11:21:30:eb:95:e9:dd:7c:b0:
a9:fc:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:26 2026 by rpki-client