
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier: VT+H8JdeLK4hdAWmbclGA1V3ve0PxjKXmGBFtjLwUtQ=
Subject key identifier: 76:2C:6E:9C:F4:3D:6F:C1:8C:59:1F:AA:23:4B:56:47:D3:86:75:F0
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial: 09C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number: 09B3
Signing time: Tue 12 May 2026 20:00:03 +0000
Manifest this update: Tue 12 May 2026 20:00:02 +0000
Manifest next update: Tue 19 May 2026 20:00:02 +0000
Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: zzw1ByJHFRbonoYB5w7Lny/DQOlnGb85bVkWW9QfIoc=)
2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: JBjC/hjIFgijHYWzdFZhAZ7It9/PA5hptGK+4xTPsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Validity
Not Before: May 12 20:00:02 2026 GMT
Not After : May 19 20:00:02 2026 GMT
Subject: CN=6a0386c3-82dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:27:98:16:56:d0:e9:71:15:50:2b:83:8a:
f2:c3:8e:6a:33:fd:de:d9:a6:df:fc:0e:39:b1:54:
89:83:98:3c:f8:40:aa:6a:a5:f6:ea:06:b0:e7:fd:
05:64:0c:b1:26:06:f3:db:6f:3e:eb:46:da:f4:23:
94:28:65:14:ce:75:f1:02:a4:48:80:58:c2:33:a3:
2f:01:1e:7e:7c:83:22:50:5d:94:15:b9:1a:e8:ad:
9a:84:03:76:04:42:28:31:14:56:5c:67:bb:9d:b2:
aa:ec:51:4b:a6:35:41:1d:1e:c0:de:8b:49:71:1d:
89:4c:d0:87:f0:c1:ec:49:8e:90:73:8e:ee:f9:ae:
4a:33:30:87:fb:18:76:d1:c6:6b:36:61:a0:06:fe:
e5:27:95:24:65:78:11:c5:f9:ca:b6:72:8d:5c:74:
c5:85:e2:ec:65:05:7d:3e:8f:12:d2:1a:cd:4a:3e:
da:73:18:20:b9:0d:d1:28:34:4c:33:d6:3a:98:6a:
ae:84:9e:73:ec:56:4e:c7:42:ee:7a:d1:d1:6f:ef:
bd:97:73:4a:04:61:2a:bb:4a:2c:ff:ff:85:e8:9a:
61:57:10:2b:5e:fd:71:d8:88:84:e1:4f:a6:bd:a3:
a0:e4:ac:b5:6a:2a:59:d0:f0:33:10:6a:b9:b2:43:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:6E:9C:F4:3D:6F:C1:8C:59:1F:AA:23:4B:56:47:D3:86:75:F0
X509v3 Authority Key Identifier:
keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:7e:f7:14:2b:f5:bc:22:60:89:6b:8d:65:f0:ad:40:7d:
e0:32:24:50:57:ee:64:d7:21:8a:e1:04:88:2f:9c:3d:34:32:
5f:5a:61:8e:18:39:43:36:1d:6d:52:30:7d:11:31:d1:0e:98:
ad:af:47:df:67:b2:58:c8:b3:39:05:0e:57:14:af:79:d7:89:
5f:f4:c3:6f:89:34:0c:ab:2a:e1:3c:ff:1c:9d:37:fe:39:38:
0a:8c:c2:7b:0d:2b:9f:47:73:35:da:5f:ed:48:ed:52:eb:46:
9a:10:7f:6b:57:fb:25:d7:98:e3:26:36:be:59:36:66:6c:f3:
05:a4:a1:93:63:0b:3f:8f:88:b1:5f:8d:64:95:f0:f2:15:77:
0f:9d:e4:0d:80:62:8e:3b:0c:51:9c:8a:71:71:24:59:62:2f:
7e:67:87:6b:6f:27:dd:02:b9:7c:89:5c:33:c0:ed:d0:21:c3:
d1:6a:b6:87:b3:2c:8a:f4:ea:a6:85:e8:b0:37:37:49:54:c5:
94:f4:24:2a:41:40:18:7a:90:62:a5:d7:d6:16:a0:70:2d:30:
99:3e:b9:06:14:d3:a9:8b:63:44:65:b7:22:d0:f1:9b:7e:d2:
65:c5:e8:71:da:52:5a:f3:39:c9:77:41:03:d9:f8:00:27:4e:
65:df:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:23 2026 by rpki-client