
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier: uce4vUf4J9KFSRzIB0j6Mz80EQe34DKepMY+1NR8uVk=
Subject key identifier: 00:85:49:7B:8C:34:C9:9B:FD:0A:7C:D1:A4:44:65:93:91:19:2E:0B
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial: 0A4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number: 0A2C
Signing time: Wed 22 Jul 2026 20:10:06 +0000
Manifest this update: Wed 22 Jul 2026 20:10:06 +0000
Manifest next update: Wed 29 Jul 2026 20:10:06 +0000
Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: mvpjI78ON4t7kTS+ss71+6zrjQQSNYgaWWnBfON6Z4Y=)
2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=)
3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=)
4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Validity
Not Before: Jul 22 20:10:06 2026 GMT
Not After : Jul 29 20:10:06 2026 GMT
Subject: CN=6a61239e-e6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:37:27:f3:31:bd:1a:c7:f8:d4:92:9a:e5:
73:a3:6c:43:10:01:ca:64:5d:c8:9c:5a:03:77:fb:
20:c1:63:80:f9:1d:d0:b3:6c:d9:70:f4:ee:c9:8d:
55:29:46:ce:17:70:61:97:7e:13:39:c0:ee:15:d2:
26:48:c0:25:e9:2c:90:0d:93:7e:fa:1d:0f:c9:06:
1c:78:30:f5:46:94:6d:78:fa:b3:5a:59:54:c0:7e:
47:69:92:28:e4:43:3a:74:65:2a:9a:42:40:ef:42:
e9:65:2d:bf:44:a7:ef:fe:25:47:48:92:0d:0f:eb:
d3:d6:f3:80:1b:b9:41:f9:19:0b:07:df:65:37:bd:
ad:8b:a0:7c:8d:a3:75:d4:d3:1b:f2:5c:49:55:7e:
7c:80:85:07:6d:62:8f:c5:a1:35:9d:1d:1f:f6:72:
79:ce:70:66:a6:41:ca:8f:6c:fa:cf:f8:f5:fd:30:
89:bb:a5:70:51:eb:81:40:e0:94:b1:ef:5d:ea:c7:
84:cd:ad:1b:93:e6:10:c3:53:28:0a:b1:26:e5:1d:
71:3f:58:80:92:b5:29:e1:5c:07:5b:a5:3d:d2:5d:
f2:b6:e6:e6:c2:f1:04:0a:ff:2b:cc:8e:14:67:9a:
b5:34:26:4a:71:c6:02:be:3c:67:8b:d2:8a:fa:8a:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:49:7B:8C:34:C9:9B:FD:0A:7C:D1:A4:44:65:93:91:19:2E:0B
X509v3 Authority Key Identifier:
keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:77:23:f0:6e:10:5f:4c:28:b1:1e:48:52:75:b8:f6:d5:
b2:98:24:06:23:4c:16:61:ae:38:44:2d:98:2b:e4:79:d1:ac:
4b:0d:68:03:83:85:70:a9:26:25:e6:cf:8d:a0:1e:30:87:1f:
db:17:85:a4:75:aa:38:1e:50:70:b1:65:dc:99:80:fd:93:08:
c7:22:80:7e:5d:b4:9b:48:2e:96:76:b2:03:ee:dd:06:e6:40:
96:3d:6a:c8:72:7f:cc:97:19:3b:47:55:ae:38:77:e8:3e:23:
f7:83:ce:71:ae:e9:57:08:89:52:4c:47:e3:30:52:55:df:a8:
5c:00:14:9a:b4:0d:4c:af:82:ed:6c:b6:49:97:01:e5:18:18:
17:05:05:e6:25:2f:2d:7d:4e:4b:8a:2f:5b:e3:2f:08:44:82:
c7:6a:6e:df:ba:12:a8:13:e0:76:28:b9:83:10:c2:41:d9:bc:
c9:1e:7d:d9:3a:bc:f5:e2:b9:1b:b7:a2:ef:e6:6c:e1:45:fe:
a1:f4:79:c9:1c:42:73:34:a4:82:ac:20:68:c7:81:e8:29:59:
b0:f9:07:98:b7:1e:7d:71:6a:50:6b:ae:88:f0:64:41:54:26:
78:8f:42:e4:e1:50:b0:66:13:f7:15:28:78:3d:0b:24:43:80:
2c:a5:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:04 2026 by rpki-client