
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: q1FJEbq2pilgomAsOu+Rd6E711vwf/HhIiN2WtkgEyA=
Subject key identifier: 91:D8:D4:7E:8D:D4:F8:11:DB:60:6D:45:AB:F9:9A:06:DF:DC:0C:D1
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1E0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1DFC
Signing time: Wed 22 Jul 2026 16:10:11 +0000
Manifest this update: Wed 22 Jul 2026 16:10:11 +0000
Manifest next update: Wed 29 Jul 2026 16:10:11 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: idVGiLcEw01UtTBlD4HmjrZidtPYzQ57JMGOKHBrACI=)
2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7693 (0x1e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: Jul 22 16:10:11 2026 GMT
Not After : Jul 29 16:10:11 2026 GMT
Subject: CN=6a60eb63-a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:94:a1:7f:b0:04:a5:c0:66:40:d9:9b:f0:
e0:34:16:3f:ea:cd:e1:b6:9a:b8:73:f1:1e:fa:ed:
8b:a8:a9:7b:71:94:1f:63:51:88:fc:62:7b:eb:e7:
a2:23:24:8c:e0:3a:fc:27:70:07:dd:cb:91:7c:34:
7a:c5:ca:47:74:5e:ee:5b:45:37:a1:e8:1d:86:3b:
2f:6f:b9:96:f9:b5:2d:ce:8c:79:ca:72:02:38:28:
59:89:68:2a:04:4a:af:71:a5:c3:06:bd:a1:89:e3:
60:4d:c5:e4:b6:15:d3:d4:da:1f:37:18:85:2a:de:
f7:aa:d7:83:b2:ae:83:0b:4e:1b:d5:e0:74:53:b4:
b6:72:e1:66:ad:28:0d:81:bf:d2:f8:d6:50:da:55:
eb:22:53:8e:fb:b9:8c:ac:c2:ad:fd:9c:c5:bc:2f:
a6:5f:13:35:f7:71:5c:1f:bb:04:27:86:93:aa:70:
73:2e:6c:ed:2a:ce:68:6c:ed:4d:96:ef:0c:4f:c2:
3f:4e:8a:dd:17:b6:1f:aa:4a:71:24:7a:f0:d1:6f:
e0:e9:7e:8d:cd:9c:80:78:82:e3:eb:3c:4a:b1:05:
26:3b:a8:ab:d6:a9:50:96:01:12:76:b0:3b:84:a3:
0c:2a:b3:90:70:82:09:31:17:2c:43:30:7b:15:bc:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:D4:7E:8D:D4:F8:11:DB:60:6D:45:AB:F9:9A:06:DF:DC:0C:D1
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:21:fb:77:3b:d8:d6:68:c2:54:91:8c:14:35:6d:e8:71:
9d:8c:00:7f:f6:4c:c6:e9:7e:cc:76:d5:f2:88:06:39:8e:98:
c0:e4:88:f2:3a:60:e0:d9:ef:48:88:29:e7:4b:dc:05:f4:a0:
31:51:5a:89:2e:4b:ee:3f:39:08:f6:c1:d5:83:6c:5a:46:60:
a0:f3:a9:fe:37:31:c4:d4:87:28:4f:db:d9:2c:ed:48:ef:19:
06:6b:6c:73:07:88:da:c6:6a:33:b0:da:42:c4:6e:46:c7:3c:
c8:9a:d2:4d:ff:8e:0c:2c:8b:12:0d:d4:90:78:0e:59:ba:1c:
07:ca:85:d9:6c:d2:d5:c2:06:9a:e8:9e:dc:82:ef:fa:a4:22:
1f:f4:dc:77:2c:13:32:7b:eb:37:95:ad:c2:a3:2d:af:09:12:
fe:02:2a:d0:4b:31:b8:1a:7f:8c:9f:ac:02:14:05:71:81:60:
3b:5b:26:4d:8d:dc:14:df:d2:74:24:b1:55:6c:07:50:b7:1f:
65:8e:ad:d3:b8:1b:8b:84:a9:a6:28:96:73:0b:66:0c:27:c0:
66:e9:0e:cf:6a:4b:25:e8:ee:69:a2:a7:89:3c:43:9b:f0:db:
6c:1e:60:89:34:bf:4a:c8:28:05:de:6f:3d:7d:54:3b:0c:4e:
c8:b2:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:43 2026 by rpki-client