
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File: ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier: szNdwLClHSDwZgedKOF0wfSnD+KDV9tQ3UxauCVSlAM=
Subject key identifier: 10:1B:A9:E4:5C:3B:DA:67:4F:6C:A3:0B:97:6A:51:8C:97:D6:81:31
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer: /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number: 38
Signing time: Mon 11 May 2026 08:48:46 +0000
Manifest this update: Mon 11 May 2026 08:48:46 +0000
Manifest next update: Mon 18 May 2026 08:48:46 +0000
Files and hashes: 1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: e0YaFOgvK7nIri78VHMK/4JejXQ1aWpZYgPNk2H/6TA=)
2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Validity
Not Before: May 11 08:48:46 2026 GMT
Not After : May 18 08:48:46 2026 GMT
Subject: CN=6a0197ee-2e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:91:cc:c7:d5:1b:39:4d:60:ce:ab:63:83:
90:b0:72:32:5d:56:b5:1a:80:87:90:8b:d3:4f:79:
04:ec:66:e5:0c:6b:57:9f:33:a7:f1:60:a6:2c:ec:
d4:8a:44:fa:70:1d:ba:f4:8e:d2:0e:80:65:7c:fd:
a7:54:79:13:0a:b2:45:90:61:94:88:38:f7:5e:8d:
b1:cf:b5:31:61:ac:6d:3c:e5:76:fd:14:d3:f6:21:
41:f4:96:de:a9:89:0c:59:02:0f:7b:a3:00:8f:d6:
b4:2d:f9:c8:43:2a:35:e4:f9:06:96:83:4a:21:d9:
1a:6b:c2:5d:10:21:bb:72:e1:b1:d4:7d:c3:20:9a:
ba:cd:a1:b4:89:ca:51:1d:d3:16:03:b1:e2:7b:d5:
1c:6d:45:7d:37:bc:9c:d8:19:f9:61:97:0a:38:93:
fd:9b:de:50:f3:fc:0e:d4:e3:60:c1:63:38:ce:98:
64:da:8f:29:d3:f6:de:65:00:18:b1:d9:7e:ea:40:
1a:02:22:3d:44:c0:6e:d8:57:3a:bf:eb:9f:58:07:
07:61:30:ef:7d:c6:6d:cd:1f:6f:53:bc:06:e8:96:
79:ad:ca:f2:d9:b1:9d:a0:70:86:05:da:7c:3f:8f:
6c:e8:9b:86:6b:2f:09:b7:6b:aa:20:72:59:e4:69:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:A9:E4:5C:3B:DA:67:4F:6C:A3:0B:97:6A:51:8C:97:D6:81:31
X509v3 Authority Key Identifier:
keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:59:e1:18:08:eb:06:d7:40:03:d1:7f:33:f7:7a:7f:6f:25:
cf:74:af:33:fa:d5:ee:6c:e7:bb:36:4c:ca:34:09:58:9e:67:
b1:cc:98:61:c5:99:7a:97:c8:89:2d:99:74:14:ee:df:14:c8:
09:1f:e8:6c:fd:a5:e6:2c:b6:90:28:fa:de:59:9b:bd:23:a9:
62:b6:0b:1d:ee:a2:5c:51:6c:1f:9d:7a:32:f2:78:20:bc:d4:
47:ee:b5:12:91:0c:a9:62:57:21:3a:ef:98:ba:ce:92:3f:65:
5a:47:b4:83:b8:06:2e:12:ed:e5:15:8c:80:6f:a1:30:cd:cd:
f3:5e:88:e6:b9:82:65:f6:bd:d6:01:5c:4b:f8:4c:2d:76:ca:
ce:ff:59:90:ad:0b:e0:0e:ae:83:fd:0c:4c:35:ae:4b:2c:f8:
31:d6:ad:3a:c6:5c:2c:9d:e4:1f:e5:1d:91:40:97:ba:76:71:
31:0c:e6:08:b6:fc:71:aa:69:45:72:25:d6:bb:a3:43:ff:cb:
2f:aa:7e:63:1a:d5:dc:c4:ef:26:bc:41:5f:7d:c8:93:4e:7a:
bb:3a:19:db:b7:c0:de:54:da:8c:2d:b4:50:67:cb:37:49:91:
60:75:66:10:d5:95:45:85:ca:2a:b5:e4:80:86:0d:7b:18:70:
93:cc:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:46 2026 by rpki-client