
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier: tyTov2YlpxoMjJLkgCafxYx5XX6mv33IDUaWFaIJHJM=
Subject key identifier: 2C:02:87:C6:6B:45:37:CB:91:DF:88:DF:FA:53:82:C0:AB:5E:0A:2C
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number: 026D
Signing time: Wed 13 May 2026 02:08:26 +0000
Manifest this update: Wed 13 May 2026 02:08:26 +0000
Manifest next update: Wed 20 May 2026 02:08:26 +0000
Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: 4YcHIfQ6wOoYZxogS3OfXtZHSbfErqUja4XXRId0SJE=)
2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=)
3: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=)
4: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Validity
Not Before: May 13 02:08:26 2026 GMT
Not After : May 20 02:08:26 2026 GMT
Subject: CN=6a03dd1a-1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:b1:a2:ed:a7:79:45:a9:7a:aa:94:34:f8:
d5:3d:8f:90:3d:4e:d1:b5:e6:70:2b:10:f0:25:cd:
ab:56:fa:f2:7c:99:80:51:23:e9:8f:74:97:81:70:
98:ba:5b:01:02:f2:51:a7:9a:a5:d8:40:ec:d8:7a:
32:6b:e7:c7:eb:58:ef:09:5b:e4:71:92:65:9f:39:
6c:92:11:1c:57:3c:6a:8d:7c:4a:fd:e2:62:1a:4e:
1d:a9:9c:a9:2a:ee:68:b1:7b:bd:76:8d:f3:5e:58:
52:0a:40:f2:4f:84:42:a6:35:10:9c:34:ba:88:c0:
bf:72:57:42:44:02:d9:97:2b:4b:65:18:95:41:7b:
29:c7:6d:b8:b1:ed:56:23:d0:3c:7d:5b:a9:cc:a8:
95:2d:3e:b7:b9:a0:09:2b:bd:c8:99:a1:ca:90:5e:
c0:f7:10:10:2e:fb:66:fe:f7:8b:60:9f:01:e8:00:
b7:00:d1:fe:69:42:1e:7c:3f:f2:5f:e7:f6:ca:d6:
2c:fd:80:4d:5b:69:f4:bc:1e:45:cf:78:67:04:25:
84:fa:4e:f8:25:99:ab:16:d2:d8:22:5d:a0:52:e4:
52:59:8d:f2:bb:37:2b:dd:6f:8b:25:79:8c:0c:36:
76:4d:a1:dd:87:a0:3d:91:91:d6:e3:ec:67:d1:49:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:87:C6:6B:45:37:CB:91:DF:88:DF:FA:53:82:C0:AB:5E:0A:2C
X509v3 Authority Key Identifier:
keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:4f:db:7c:eb:37:74:f9:06:63:15:e9:ad:48:54:10:f2:a2:
90:f1:81:7e:bc:3b:96:e6:5a:38:e1:84:2d:7d:91:75:b1:61:
17:26:0a:a3:ae:3c:4a:68:b5:53:85:07:63:08:d3:b2:03:be:
0b:51:ce:7a:4f:6b:f1:57:15:5e:04:9e:18:58:eb:4b:5f:79:
95:9f:e4:29:44:df:4f:3c:9c:5a:7c:4c:8a:02:66:c3:1a:40:
31:2e:af:20:18:24:97:84:d5:3e:3a:93:9a:21:6a:ae:f7:28:
8e:d3:5a:79:39:61:49:e5:47:90:f6:26:15:0a:b2:e4:ea:3d:
24:2b:12:94:e4:de:fc:8f:3f:e7:8c:49:b5:2e:10:a6:0e:88:
90:70:1b:96:fd:68:78:c0:5c:ea:1e:03:76:e1:51:20:ad:d2:
1b:38:49:c7:f0:0e:b0:7f:df:1c:ce:81:58:9b:5c:60:95:2e:
45:61:87:9a:fa:fa:9f:bc:31:c8:1e:d6:d4:da:4a:83:a0:7f:
21:39:7d:8b:6e:b0:54:37:11:cf:1f:12:e2:73:40:51:ab:fa:
79:cb:cf:f8:62:5f:ba:eb:f5:1a:a8:73:9a:8e:09:20:cf:ba:
f5:d7:17:fb:98:50:ff:85:dc:50:da:19:c6:fe:d6:21:9e:61:
54:48:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:27:22 2026 by rpki-client