
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: knQsCY1VG5nF6syqv17ADD81LXTUJ2ZWUkBCPMJWKx4=
Subject key identifier: 57:C5:12:65:F2:3B:30:14:CE:3B:CF:A3:EB:56:B6:8D:87:01:2B:82
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 356E
Signing time: Wed 22 Jul 2026 15:21:26 +0000
Manifest this update: Wed 22 Jul 2026 15:21:25 +0000
Manifest next update: Wed 29 Jul 2026 15:21:25 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: 2wtR+husy56NKdOtPgX+h5hQfPFrxaLvM81d8UAOYzo=)
2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ofcFpR0dG4lGMFPSarAEqgGjniCtEUFFNDbSn2FRdQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: Jul 22 15:21:25 2026 GMT
Not After : Jul 29 15:21:25 2026 GMT
Subject: CN=6a60dff6-bd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:36:36:50:5d:c4:f5:a8:6f:20:b7:3c:af:
36:e1:f6:94:ea:c8:3c:0e:c7:fb:e3:b2:a9:a6:98:
e4:f2:86:cb:94:d7:d3:3a:54:76:75:06:36:dc:f4:
a8:a9:7b:43:70:77:8f:44:6e:e4:c5:f1:fb:c9:53:
bd:79:3d:6b:03:ee:e4:25:fd:ca:4f:f2:69:62:e8:
13:58:97:7c:50:bb:52:90:0a:78:2a:36:44:06:b2:
4d:91:ed:ad:99:6e:2f:ce:2e:b2:9c:ac:74:96:e6:
80:97:b8:37:fd:54:ae:ee:e4:9b:46:18:9b:7c:fe:
26:06:ba:c5:dc:d3:7d:0e:03:ed:cb:5b:1b:8b:22:
ec:20:72:01:00:17:46:e1:ee:40:88:f2:fa:eb:b5:
ba:09:e7:2d:b5:db:7d:0c:5b:d2:2f:68:9d:32:cb:
49:05:3f:99:af:ad:bd:ba:d6:88:1c:82:20:fc:9e:
f7:1d:f1:2c:e4:a1:6a:d0:87:7a:11:f4:13:b4:40:
eb:4d:4b:14:df:c8:d9:ec:8c:24:f2:a9:c1:5c:9b:
99:cf:d1:2c:b7:5c:14:ab:41:7a:f5:32:6f:84:78:
c8:dd:14:b2:c4:db:4f:01:63:b1:69:4a:54:1a:3f:
ce:4b:a5:b0:30:f0:9c:4c:87:a5:31:58:5a:d8:1c:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:12:65:F2:3B:30:14:CE:3B:CF:A3:EB:56:B6:8D:87:01:2B:82
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:8a:56:1f:da:00:af:63:77:f0:ea:ea:1f:8d:86:01:d8:
83:d2:44:ed:69:ea:33:a1:a6:52:d7:4a:cf:4b:bb:e5:db:b7:
12:ef:db:0b:94:1c:3a:1b:03:9e:d5:ea:6c:de:59:1c:d0:87:
e2:6c:a7:4b:56:38:90:87:e4:9e:54:df:5b:49:a8:19:e3:7c:
86:b7:c0:7c:c2:e0:d6:1c:b7:e2:ea:15:f7:86:b7:20:ed:b2:
90:fe:65:03:63:df:45:42:b0:5e:b0:b6:33:d5:04:33:67:8b:
41:4a:17:5e:d4:ad:34:dc:25:02:6f:3b:c5:91:b3:28:0c:bf:
7e:5c:0b:25:ba:11:9e:67:40:c3:c3:c1:71:5a:28:3d:8b:e3:
35:c6:69:df:58:7b:0f:ee:3b:77:95:09:34:b8:16:2f:c7:31:
4d:4e:e4:65:d5:1e:39:1a:10:3f:8a:9c:3f:f3:19:01:00:9e:
46:97:41:53:c5:fb:d9:92:63:1c:7d:6d:8e:dd:eb:bb:c4:7a:
f7:1b:f6:aa:7d:74:b3:f8:48:75:15:c6:13:c2:c0:fe:e3:da:
85:03:e7:81:89:cf:81:ae:9d:94:78:46:d2:d6:e3:1d:61:bd:
cf:cf:68:e8:85:f6:20:f8:58:cc:b8:07:36:0c:d1:50:00:c4:
50:74:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:36 2026 by rpki-client