
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: aG2oFRR1UtnRhDEMybiBG3s7Rci4PuB1L2xy4CB3iHU=
Subject key identifier: AC:97:52:1C:53:7E:EB:42:3D:0A:8C:1E:5A:67:D9:1D:B9:A7:8F:F7
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:14:39 +0000
Manifest this update: Thu 23 Jul 2026 09:14:38 +0000
Manifest next update: Thu 30 Jul 2026 09:14:38 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: EWi75oCCyAyfRVOtYoeGzBXNoTCYGkjpE0k9D6qgw3A=)
2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Jul 23 09:14:38 2026 GMT
Not After : Jul 30 09:14:38 2026 GMT
Subject: CN=6a61db7f-4f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:fd:69:c2:9f:69:ef:46:0f:ae:01:22:28:
7c:14:d4:f6:81:25:6b:1a:d6:0f:41:19:89:db:7b:
db:3b:a1:fe:35:f5:51:25:79:e7:55:06:e1:0a:c3:
a1:17:08:03:10:c0:59:3a:4e:f5:23:d4:90:ad:a2:
8c:3d:8c:9c:45:4d:f2:ab:a3:6c:18:f2:58:34:96:
28:ea:f0:8d:b2:04:7d:21:a9:74:5a:5d:af:c2:9c:
82:46:b4:cf:2d:80:f1:69:36:d3:cc:a9:9c:b2:24:
91:7d:7c:6f:f6:15:c6:24:e4:72:37:21:24:5c:04:
c3:a3:f8:f5:53:ed:48:98:25:96:71:91:ab:68:c5:
61:46:f6:31:25:d9:3d:a9:bd:87:03:a5:56:44:ee:
83:fa:a3:0a:43:75:cc:20:4e:15:76:0b:ab:6b:96:
2f:74:fe:ee:32:12:ea:be:ab:40:89:bd:1b:e4:fb:
60:27:73:b0:3d:b3:43:78:be:7e:20:68:9b:74:89:
b8:13:36:78:4b:92:5c:6a:13:0d:11:fb:0f:e3:b9:
4a:4d:70:c6:71:0e:88:15:96:0f:7a:71:1a:e5:2e:
ac:39:14:aa:3f:ee:9d:de:e6:10:82:58:5d:3d:af:
bf:95:fa:bf:6d:24:96:a6:1f:18:6a:47:f2:1b:31:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:52:1C:53:7E:EB:42:3D:0A:8C:1E:5A:67:D9:1D:B9:A7:8F:F7
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2a:98:7b:d6:a9:25:60:3f:2f:ee:ad:73:a5:48:5c:19:9f:
4c:d6:00:fd:d8:23:f3:a5:79:b0:de:ff:a5:de:c2:b2:33:de:
f1:fd:43:c0:5f:95:12:76:c6:e0:fd:ab:e8:fa:e7:3c:4d:31:
ff:80:dc:55:5e:4f:55:39:15:65:05:26:aa:97:c4:0a:48:65:
5f:5f:f0:3d:85:15:f1:52:9a:76:2a:ed:03:ef:7d:97:39:12:
c4:29:d3:68:9f:f2:7e:06:e3:48:3b:4f:2d:43:76:53:de:7b:
21:e3:0c:26:2a:8a:b4:44:02:f7:d5:31:2f:db:89:43:f5:b5:
fd:2d:41:03:27:0f:78:2d:2c:a3:09:d4:66:fc:87:51:88:25:
f6:08:d7:5a:82:5a:bc:15:c8:f3:f2:ea:bd:b3:41:7c:a4:ce:
6d:34:1f:37:ea:f0:b4:b9:05:01:f6:e6:08:64:96:d4:23:32:
51:16:7a:b7:30:27:b4:de:6f:47:f7:33:32:42:24:bc:44:fc:
31:25:e6:02:17:ce:9d:54:90:b8:91:f9:b5:20:dd:7f:13:e9:
35:61:1c:05:82:81:4e:19:69:38:2a:78:16:5f:21:48:b8:f6:
96:b3:c1:1c:b8:7e:30:4a:4d:1d:34:e6:e6:89:84:39:ec:81:
01:e9:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:03 2026 by rpki-client