
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: eq3TwODIV0hTHRz8/XgtqGELgah+13pCE99Z1B2vcbk=
Subject key identifier: 95:55:CF:5A:F9:D0:79:09:6C:72:3C:DE:70:25:26:9C:73:C4:83:C9
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: A9
Signing time: Mon 11 May 2026 07:20:19 +0000
Manifest this update: Mon 11 May 2026 07:20:19 +0000
Manifest next update: Mon 18 May 2026 07:20:19 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: PWsyF5eNrMLYheL+m6GF5rw69KGJFpmJxEyK0cCV54Q=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: May 11 07:20:19 2026 GMT
Not After : May 18 07:20:19 2026 GMT
Subject: CN=6a018333-364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:c3:94:75:a4:e0:b3:68:63:12:c9:a0:df:
9e:02:f7:f6:5d:f7:ff:e7:fd:57:ff:e7:16:eb:24:
a2:c5:18:e9:ff:c7:36:85:af:0e:f1:6e:29:1c:de:
f8:46:4a:3b:0e:87:79:df:99:22:83:20:ff:c5:61:
32:88:a3:fc:ab:de:73:56:5f:9e:e4:51:a5:25:bd:
b7:9d:34:c1:a4:0e:45:38:24:5e:01:e3:96:a4:95:
f7:8d:53:09:b3:17:6c:14:40:84:10:d6:8c:33:5f:
bd:8e:25:66:af:82:0d:6b:6c:1d:ab:49:98:16:f8:
fc:c9:23:95:d2:83:30:56:aa:61:83:d8:f2:77:5a:
c8:48:85:db:9d:74:02:83:6e:df:3e:6e:2c:12:e6:
45:aa:f2:64:94:11:cd:26:2b:86:7f:19:a3:f6:e5:
b2:36:e4:3f:e2:2b:e9:62:73:74:4f:1b:eb:88:18:
65:32:c7:05:1c:e0:8d:f8:9f:0c:e1:39:65:77:7a:
40:73:41:8a:f3:58:af:fe:24:bd:0c:da:a9:1e:73:
ab:91:12:07:9c:86:d8:22:f3:60:c8:09:95:ae:27:
3b:ca:36:41:c6:1a:69:cd:84:f2:03:d7:bc:e7:29:
14:ee:4d:60:b2:cc:e6:f4:5a:7a:87:fc:5a:25:46:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:CF:5A:F9:D0:79:09:6C:72:3C:DE:70:25:26:9C:73:C4:83:C9
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:03:4d:4e:20:cf:eb:c5:36:8f:c5:83:62:a4:5c:3a:75:9e:
20:95:32:88:61:6e:94:10:b6:a2:c7:00:99:c9:35:d8:87:98:
02:3a:e6:8e:3f:3c:47:bd:51:08:c3:32:19:6d:b7:92:26:4d:
e8:18:e6:0d:cd:d0:af:50:a0:83:76:7e:4b:2e:a4:f7:6f:90:
1f:cc:fb:6b:8b:fa:cc:9f:7c:09:77:ef:c0:c0:ba:a6:44:6b:
8d:f4:8a:a4:e8:81:46:86:53:bf:36:f0:0e:95:55:af:f8:3d:
09:99:09:c3:b8:1a:92:5d:6e:7a:7a:4f:ad:33:a1:21:ab:2d:
51:a9:28:b6:0d:4e:99:f8:93:f2:a9:de:5d:cd:57:0b:e9:13:
4a:41:f7:bf:e7:d0:7c:ce:2b:d7:38:91:39:f8:ef:dc:70:5c:
f4:43:38:24:8a:01:60:71:cb:dd:b7:3a:89:4d:bc:53:c1:89:
4c:b2:ce:42:32:89:98:40:4b:eb:24:3e:b6:b7:5b:d4:e2:f7:
2b:33:4a:72:74:4a:49:83:db:90:38:e0:2f:41:3e:53:ae:82:
0a:d1:61:5b:bc:9a:ea:f6:bb:69:0d:92:e6:85:fe:ec:1b:54:
3f:4b:56:ec:41:ae:8e:bc:65:cb:fa:65:51:a4:c9:c9:9f:b8:
2d:a8:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:42 2026 by rpki-client