
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: jcWgdBW7X5yNXghhdqPb+7Mi3R3rJanMPYpbse8JbJM=
Subject key identifier: 2F:8B:BD:15:4C:4C:46:F1:29:96:95:74:3D:F8:3C:3C:1F:FD:31:0C
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 09E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 09D1
Signing time: Tue 12 May 2026 19:57:48 +0000
Manifest this update: Tue 12 May 2026 19:57:48 +0000
Manifest next update: Tue 19 May 2026 19:57:48 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: zuCDEMy0BPyKEPgB//R1IgEwC6qMaxcUkj0Rw6eWYl8=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2535 (0x9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: May 12 19:57:48 2026 GMT
Not After : May 19 19:57:48 2026 GMT
Subject: CN=6a03863c-eea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:5e:23:ff:6c:9b:38:68:92:43:3e:5c:25:
37:02:01:9b:54:de:fd:d5:f4:c9:bc:6d:6d:8c:e7:
c6:de:14:97:45:1b:d0:26:84:98:5e:fd:fd:d3:a3:
33:8d:7d:2c:b0:0c:ef:3c:06:7a:55:04:bf:1c:20:
68:51:45:a2:db:59:09:a1:8e:51:3b:1d:1a:87:da:
b2:99:6d:67:ee:b1:0c:0b:d3:9e:a1:3f:e4:20:21:
95:ac:6c:02:10:14:00:58:d8:c0:a5:6f:3f:00:68:
e3:e8:80:dd:c3:46:c8:4b:e8:d0:d8:a3:1a:b4:9e:
4c:65:80:30:34:a8:79:01:0b:15:69:2d:4c:06:68:
20:0f:88:71:de:5a:d9:30:dc:2d:31:d0:6e:19:b1:
37:f7:13:25:60:a4:ee:46:98:21:fa:53:26:8e:71:
20:90:71:7c:5d:8c:cb:7a:33:61:68:dd:96:38:7c:
06:9c:21:b7:85:4b:f6:4f:54:90:2e:28:17:49:99:
6a:ee:d9:93:f3:d5:9a:6b:09:70:77:4d:a4:8a:ad:
84:c7:bf:f7:fe:27:0c:f6:a9:d1:5a:32:6f:c5:8c:
32:e9:de:e1:76:17:68:77:88:4c:d9:8b:a7:37:89:
d0:2d:48:56:ea:49:1e:80:9b:d1:ed:ed:97:e3:7a:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:BD:15:4C:4C:46:F1:29:96:95:74:3D:F8:3C:3C:1F:FD:31:0C
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:38:1d:d4:95:04:57:9f:93:99:75:04:59:9c:56:49:26:
48:f9:37:83:01:33:eb:2e:49:50:02:1b:51:60:f3:86:fb:f2:
de:4a:16:ca:35:c9:1a:b8:22:88:b1:14:b4:2a:ba:67:61:61:
4b:ff:50:af:06:38:e2:fa:13:43:b8:0c:de:79:c7:63:a8:81:
ae:93:f6:a5:5c:b8:39:41:c4:29:ec:25:1a:63:bb:70:e4:be:
de:28:07:21:97:5e:63:3b:50:61:10:12:9f:6e:8d:16:26:4f:
4a:4f:4a:21:06:a8:d7:dd:f9:c7:f7:75:14:ed:10:52:a2:25:
58:97:63:a4:f8:30:76:7f:2d:65:fe:67:ee:f0:72:0c:67:ab:
48:32:6b:45:a4:73:b7:7f:e6:1a:d3:ca:ff:92:c7:3a:9f:8b:
6e:24:a2:db:5b:b1:b7:95:b0:1c:72:34:48:37:0f:43:af:48:
51:a0:37:74:23:85:70:fb:56:73:79:0c:bd:ee:05:df:bd:94:
64:f1:f4:73:ae:7d:56:a3:21:8e:72:9a:e5:08:4f:92:3c:a5:
39:e7:6d:b1:22:f6:78:0f:30:31:20:c8:c0:c4:31:7d:09:5f:
f0:a3:5d:b7:75:ac:a6:6c:b5:fb:2e:87:27:1c:d0:ea:7d:ab:
40:ba:86:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0
NUM5NzZDQkYwHhcNMjYwNTEyMTk1NzQ4WhcNMjYwNTE5MTk1NzQ4WjAYMRYwFAYD
VQQDEw02YTAzODYzYy1lZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbVeI/9smzhokkM+XCU3AgGbVN791fTJvG1tjOfG3hSXRRvQJoSYXv3906Mz
jX0ssAzvPAZ6VQS/HCBoUUWi21kJoY5ROx0ah9qymW1n7rEMC9OeoT/kICGVrGwC
EBQAWNjApW8/AGjj6IDdw0bIS+jQ2KMatJ5MZYAwNKh5AQsVaS1MBmggD4hx3lrZ
MNwtMdBuGbE39xMlYKTuRpgh+lMmjnEgkHF8XYzLejNhaN2WOHwGnCG3hUv2T1SQ
LigXSZlq7tmT89Waawlwd02kiq2Ex7/3/icM9qnRWjJvxYwy6d7hdhdod4hM2Yun
N4nQLUhW6kkegJvR7e2X43ojqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+LvRVM
TEbxKZaVdD34PDwf/TEMMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1
NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz
aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASZw4HdSVBFefk5l1BFmcVkkmSPk3gwEz6y5JUAIbUWDzhvvy3koWyjXJGrgi
iLEUtCq6Z2FhS/9QrwY44voTQ7gM3nnHY6iBrpP2pVy4OUHEKewlGmO7cOS+3igH
IZdeYztQYRASn26NFiZPSk9KIQao1935x/d1FO0QUqIlWJdjpPgwdn8tZf5n7vBy
DGerSDJrRaRzt3/mGtPK/5LHOp+LbiSi21uxt5WwHHI0SDcPQ69IUaA3dCOFcPtW
c3kMve4F372UZPH0c659VqMhjnKa5QhPkjylOedtsSL2eA8wMSDIwMQxfQlf8KNd
t3Wspmy1+y6HJxzQ6n2rQLqGog==
-----END CERTIFICATE-----
Generated at Wed May 13 09:04:49 2026 by rpki-client