
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier: y9B5sHvJSQybTqHsvVm9cGs07uwJFgMIqqhNYFOu8LE=
Subject key identifier: F8:06:69:D0:C2:C5:88:EE:60:58:A7:16:65:4D:93:44:AE:2E:0C:BB
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number: 0848
Signing time: Wed 22 Jul 2026 21:38:19 +0000
Manifest this update: Wed 22 Jul 2026 21:38:18 +0000
Manifest next update: Wed 29 Jul 2026 21:38:18 +0000
Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: u0vViX6dMkWvCFuR+HdqjjuzA7etDKdB5KYPp8YKgSU=)
2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=)
3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=)
4: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=)
5: 7C76080E08D611EE82522448C4F9AE02.roa (hash: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: Jul 22 21:38:18 2026 GMT
Not After : Jul 29 21:38:18 2026 GMT
Subject: CN=6a61384a-73a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:60:c7:fe:2d:e9:bf:2e:1e:d9:6b:cd:0b:
e8:8d:6e:fe:e8:6b:a1:32:6a:5b:7c:02:2b:69:70:
35:04:7a:df:4e:c4:b9:ef:b0:6b:77:c9:70:8d:b9:
e1:70:16:f3:e0:e3:5f:73:31:b1:91:b8:f3:6a:af:
88:57:93:9b:53:d9:4b:8f:b7:c2:a4:de:7a:e2:e4:
fe:dd:7a:41:52:5b:ac:b5:eb:45:2b:56:cb:22:1c:
47:30:f3:9c:62:16:8e:8d:ed:26:89:51:f9:91:8e:
7d:d1:ec:fd:3b:e0:d6:a2:59:40:3f:2e:c2:b0:dc:
6c:25:87:e0:21:4e:e1:7f:c1:f8:94:8c:28:27:34:
69:6e:31:25:d1:05:0f:e4:19:2d:d7:d3:a5:00:ce:
60:a9:d4:c8:f4:a4:48:dc:cc:13:50:63:b9:56:f2:
10:36:9f:ef:2b:bf:8d:b7:6d:63:00:8d:59:da:76:
1f:e0:f9:72:f8:a7:89:41:39:3b:24:d5:ca:6a:69:
e0:54:9a:03:f0:39:3c:55:d1:38:70:82:15:a7:17:
8a:87:1d:83:d7:71:99:51:90:38:d1:44:94:7e:a8:
04:69:fb:b4:49:a0:49:cb:80:89:f5:82:f9:67:62:
f3:7e:a1:2b:43:23:54:40:32:f0:c8:31:4e:07:92:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:06:69:D0:C2:C5:88:EE:60:58:A7:16:65:4D:93:44:AE:2E:0C:BB
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:37:1b:c5:71:56:b1:65:c0:f7:c8:fb:24:f2:17:98:7d:0d:
ae:bf:28:99:36:b8:c6:d1:ca:1b:1e:ad:a9:a1:21:3d:de:a1:
e7:3d:b4:aa:fc:94:23:b5:7e:eb:9b:a7:3c:e2:3c:57:0e:7f:
e2:c0:e6:a7:25:ea:e1:84:e2:7e:63:80:5e:de:3f:51:f1:22:
78:d6:d2:49:d4:00:6e:d3:68:db:a3:04:ea:0f:16:5a:0b:3f:
d9:e6:29:97:ca:19:d8:ed:1e:f1:59:1a:fd:b8:9f:a7:40:55:
13:57:08:57:4b:50:79:3d:c0:6d:d1:50:a8:0d:86:b1:3e:66:
18:c9:4e:b3:39:ad:f2:42:37:6b:96:79:28:a0:31:0d:50:65:
18:26:b0:a9:fe:4f:26:98:d1:47:5d:9c:fa:1b:c7:44:b1:81:
e8:a7:d3:1b:43:af:81:16:a1:1a:a8:55:59:8d:e9:ab:35:7e:
c0:6b:45:a9:c8:86:41:ce:f4:4b:db:ce:7d:50:5e:4e:69:f5:
5c:ad:9f:90:f4:36:8e:89:19:f0:ac:1a:9f:28:c7:f3:98:4c:
20:7a:4c:22:7e:a2:5c:cc:e3:1e:3b:d3:94:e5:0e:db:26:0b:
1b:a1:89:d2:8c:98:79:5e:7a:0c:8f:4b:99:98:93:fa:53:e6:
5a:61:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:57 2026 by rpki-client