
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: FPhA/oVkduMu8t2ojvFlvxsft/suOhd3zFzxVqTgUUc=
Subject key identifier: 0C:72:A1:9D:ED:A5:98:17:C0:E7:EF:F0:6F:8C:1C:24:39:F6:88:83
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 355F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 354A
Signing time: Tue 12 May 2026 15:17:48 +0000
Manifest this update: Tue 12 May 2026 15:17:47 +0000
Manifest next update: Tue 19 May 2026 15:17:47 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: Iv/GPguZvcI0qoxtsy+HngZoKijxovaEkjdd7S1ETOA=)
2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ofcFpR0dG4lGMFPSarAEqgGjniCtEUFFNDbSn2FRdQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: May 12 15:17:47 2026 GMT
Not After : May 19 15:17:47 2026 GMT
Subject: CN=6a03449c-09bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:3f:55:94:31:b4:4b:2d:25:6b:e3:80:38:
e5:79:37:0f:79:ac:88:eb:e1:56:f7:7a:75:cb:88:
d9:63:83:50:96:3d:fb:34:f6:1d:55:f2:e4:c3:9e:
4e:b2:2d:f2:41:6e:4d:17:5a:33:95:18:75:a5:33:
72:49:3a:96:d7:84:5c:d2:bc:f6:fb:f7:3e:4b:a2:
b6:c4:69:5a:66:dd:47:5a:d3:fb:fb:a2:a9:ad:01:
1f:01:8e:04:63:2e:d1:12:b9:25:eb:60:38:5b:49:
5b:3b:6f:07:94:9f:45:f0:71:29:fb:13:82:ac:06:
5b:22:eb:3f:54:f2:5d:68:0a:6a:34:e7:bb:72:0f:
81:46:9f:df:9b:e2:19:10:be:c4:59:c5:85:78:d1:
89:aa:8e:36:41:98:0a:b3:6f:65:bb:ee:76:1d:7e:
1a:ca:89:5e:b8:29:a0:3a:a6:80:c8:8d:3e:69:19:
fb:21:b9:83:92:63:98:d8:c0:54:8d:eb:46:6e:9b:
86:eb:d9:2d:87:6f:34:b4:2d:49:15:72:29:82:45:
1e:a7:4b:6b:38:55:b9:d1:d8:dc:dc:c7:80:85:48:
31:ba:92:ba:93:af:ef:22:3b:36:dc:45:72:64:e5:
02:f8:54:2e:34:7e:b7:e9:30:64:24:0c:db:50:e9:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:A1:9D:ED:A5:98:17:C0:E7:EF:F0:6F:8C:1C:24:39:F6:88:83
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:a7:0f:b3:87:37:13:9e:e7:2c:89:17:8f:2f:0f:ab:f9:
c6:95:35:5f:07:b4:d1:7e:49:f1:81:74:70:24:b2:28:79:20:
35:3a:d9:04:ec:f1:94:ac:68:e4:30:3f:01:93:54:4e:82:4a:
2b:ff:67:be:64:54:4f:0f:aa:25:a4:ba:d2:bd:c5:dd:fa:ca:
d1:83:ed:6a:c7:90:13:b2:d8:4e:33:ab:ba:37:3c:54:80:90:
1e:00:b8:c8:c1:9d:a6:17:d7:bb:5c:8d:87:f2:89:f6:9b:57:
0b:c9:4c:8d:b2:48:24:c9:d7:b5:78:f1:fc:c5:39:83:64:83:
27:8d:00:c8:f2:c0:70:75:97:6c:ea:b4:f6:16:ec:95:a6:72:
0b:62:c4:a6:1d:83:3c:cb:7f:85:02:a4:02:19:31:40:0a:54:
54:89:5a:c3:6b:5f:46:39:0c:25:3a:7c:50:a7:4c:d4:58:5a:
7f:96:cd:d7:96:38:a4:f4:09:eb:a3:cf:9b:09:6d:63:b4:cc:
cd:2d:c0:c6:f7:cb:6c:53:1c:00:72:63:32:9d:c2:88:25:00:
9f:86:2c:ae:bc:43:84:bc:80:90:5e:a1:59:cf:d0:e3:ff:74:
24:2d:64:5e:42:b8:98:e2:6f:02:64:5b:bc:f5:11:a7:b5:7f:
18:d5:12:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND
QUU4QkY5MEQwHhcNMjYwNTEyMTUxNzQ3WhcNMjYwNTE5MTUxNzQ3WjAYMRYwFAYD
VQQDEw02YTAzNDQ5Yy0wOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsig/VZQxtEstJWvjgDjleTcPeayI6+FW93p1y4jZY4NQlj37NPYdVfLkw55O
si3yQW5NF1ozlRh1pTNySTqW14Rc0rz2+/c+S6K2xGlaZt1HWtP7+6KprQEfAY4E
Yy7RErkl62A4W0lbO28HlJ9F8HEp+xOCrAZbIus/VPJdaApqNOe7cg+BRp/fm+IZ
EL7EWcWFeNGJqo42QZgKs29lu+52HX4ayoleuCmgOqaAyI0+aRn7IbmDkmOY2MBU
jetGbpuG69kth280tC1JFXIpgkUep0trOFW50djc3MeAhUgxupK6k6/vIjs23EVy
ZOUC+FQuNH636TBkJAzbUOlh7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxyoZ3t
pZgXwOfv8G+MHCQ59oiDMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE
QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ
cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXKenD7OHNxOe5yyJF48vD6v5xpU1Xwe00X5J8YF0cCSyKHkgNTrZBOzxlKxo
5DA/AZNUToJKK/9nvmRUTw+qJaS60r3F3frK0YPtaseQE7LYTjOrujc8VICQHgC4
yMGdphfXu1yNh/KJ9ptXC8lMjbJIJMnXtXjx/MU5g2SDJ40AyPLAcHWXbOq09hbs
laZyC2LEph2DPMt/hQKkAhkxQApUVIlaw2tfRjkMJTp8UKdM1Fhaf5bN15Y4pPQJ
66PPmwltY7TMzS3AxvfLbFMcAHJjMp3CiCUAn4YsrrxDhLyAkF6hWc/Q4/90JC1k
XkK4mOJvAmRbvPURp7V/GNUSfA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:22 2026 by rpki-client