
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File: JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier: dSX2yzO6bZ58P3BlnmHdFI4pTs+yHapxjZrQdpmocJQ=
Subject key identifier: 19:B4:2B:3C:37:57:98:11:33:CE:0F:02:4F:F2:EF:9E:1D:8D:14:27
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer: /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number: 9A
Signing time: Sun 15 Nov 2026 07:40:15 +0000
Manifest this update: Sun 15 Nov 2026 07:40:14 +0000
Manifest next update: Sun 22 Nov 2026 07:40:14 +0000
Files and hashes: 1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: eQWRO6D7HWwtdrghhZPW4ghzx96m37ul2cA84C/dgIA=)
2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 07:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Validity
Not Before: Nov 15 07:40:14 2026 GMT
Not After : Nov 22 07:40:14 2026 GMT
Subject: CN=6af961df-d81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:99:99:d0:59:82:f8:ac:1b:a6:7b:93:89:77:
11:3a:e9:22:9a:a2:1d:56:e3:58:77:7c:c0:b6:94:
30:e6:2d:cd:7e:d2:c1:2a:85:c0:dd:c2:15:71:f3:
be:8e:5f:4c:64:30:ca:08:e6:55:1d:03:e5:8a:e9:
b4:60:de:e8:95:c6:86:f6:de:df:fc:af:54:cb:ba:
b6:11:a5:e1:09:df:57:81:c5:b6:af:40:7c:5b:a3:
cd:d7:5a:8b:b1:bf:b8:4d:3e:50:7a:71:fc:81:27:
16:a0:58:62:6b:61:2b:c4:9f:8a:86:aa:80:28:f4:
2d:96:cf:9c:88:d1:2f:39:5e:cc:d6:2e:1c:62:b1:
3c:74:48:e6:8e:bb:73:49:98:6d:b7:28:83:6d:d1:
49:fa:c4:b9:39:30:c3:c2:68:7d:e8:92:f7:b7:e2:
c4:45:79:44:d6:53:6e:dd:32:c5:38:87:b5:1e:86:
3f:be:33:a1:4a:34:7b:df:ce:5d:61:7b:2b:48:d0:
da:4b:b8:22:55:97:9f:9e:fd:c9:61:92:1f:92:78:
f6:8e:e8:f3:55:aa:ee:88:4e:87:50:65:b2:de:2f:
30:85:e0:53:f6:52:64:80:ef:62:27:7c:0e:97:60:
5f:b1:2d:5c:dd:36:5c:eb:3c:3f:47:42:d1:79:18:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B4:2B:3C:37:57:98:11:33:CE:0F:02:4F:F2:EF:9E:1D:8D:14:27
X509v3 Authority Key Identifier:
keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:fa:8e:30:5c:35:e4:24:a0:64:87:0b:9c:f7:ec:4e:40:8a:
f0:75:70:40:e8:fb:33:36:28:ed:85:ec:49:a9:d5:f7:e7:6f:
d1:9f:f9:3c:89:79:53:f4:98:d7:4a:c7:f8:c9:ff:5f:40:2d:
44:0b:06:ba:da:31:56:fa:26:03:0f:5c:38:8a:0b:0a:c0:56:
0d:71:35:a0:8e:30:7d:db:86:3d:24:cb:cf:b2:c7:61:60:d3:
3a:b3:9e:74:99:ff:c5:8e:3d:42:1b:8e:bb:23:33:dd:6d:31:
c9:4f:88:76:74:62:ad:e4:55:4b:e9:03:6b:9b:6d:f7:38:c6:
e9:bd:fe:4b:67:d8:a5:ed:86:aa:12:2a:00:b8:fb:b4:df:41:
04:d7:5b:15:fc:91:3e:6e:fa:43:ba:d3:a2:c8:b6:41:33:7e:
d7:8d:88:1e:b2:e8:39:8d:d8:b6:d4:fb:07:17:e1:51:f0:34:
c4:3b:d8:a1:cc:b8:2f:53:4f:a9:e7:a8:7c:90:f1:f7:65:60:
98:ed:dc:97:73:5c:34:54:ff:2f:fb:33:fc:75:07:be:82:27:
5b:ab:3d:9c:0d:4c:c6:54:f0:f2:b4:a3:df:e5:b1:d5:d7:4d:
20:95:5d:89:f1:ca:70:d0:34:00:f5:6f:92:58:81:9a:a5:73:
10:81:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:47 2026 by rpki-client