
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
File: JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json)
Hash identifier: Is4tKRp7s2yc9LTbevZE8FqOqffCUylcdbaX9komdOk=
Subject key identifier: 49:E7:96:5B:8E:A1:D7:35:52:FA:7F:98:D8:CE:00:E6:DA:4A:1A:E6
Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
Certificate serial: 0D16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
Manifest number: 0D03
Signing time: Tue 12 May 2026 18:20:00 +0000
Manifest this update: Tue 12 May 2026 18:19:59 +0000
Manifest next update: Tue 19 May 2026 18:19:59 +0000
Files and hashes: 1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: nzhSAT8jcNb8NL6j5QlriNWIPiELAr7YzLx6pUVhUEw=)
2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: VuO6oFmdrg28zC8aljPGAA2mZqdTmBMcrxACwaZ0phY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl
rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
Validity
Not Before: May 12 18:19:59 2026 GMT
Not After : May 19 18:19:59 2026 GMT
Subject: CN=6a036f4f-742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:85:6d:fd:8c:07:e7:18:1d:a4:23:95:f3:
3a:5c:39:de:67:ff:ca:c7:dc:1f:a8:ea:cf:74:16:
78:cd:21:3e:9e:ae:68:8d:3c:3f:7a:51:89:8d:16:
39:d0:e5:73:b6:27:71:5c:4c:e4:29:2d:ad:b9:25:
5e:05:06:5e:da:a2:4a:99:b2:04:d4:5e:19:6b:15:
d1:b8:5c:0f:d2:88:31:31:c4:1b:28:c7:86:65:1d:
41:9e:b0:1d:ef:b4:bc:01:a9:49:c2:3d:8b:be:b7:
e3:f9:de:3e:80:a4:f5:1e:8b:fd:f2:81:5d:c3:2a:
7e:1f:3e:01:01:c3:0d:3b:b4:80:6c:20:95:43:35:
a0:b0:ee:23:bf:b5:ed:78:88:cb:5b:21:91:76:55:
23:ff:87:98:24:de:20:3d:5f:1e:42:b4:da:25:fd:
b3:85:16:cf:46:a1:43:4d:52:d9:19:95:0c:fb:fe:
3b:d2:04:d6:1a:0e:a3:f7:1a:52:cd:b3:d5:b0:2c:
a4:db:f2:bf:08:e3:cd:88:35:fa:75:0d:b5:97:38:
96:73:ee:3f:28:70:97:78:d3:1a:be:cb:ce:95:a5:
42:b0:2f:59:c4:a6:06:94:41:12:72:a6:87:66:a5:
61:c4:5f:2c:63:72:0b:93:d4:a3:1d:b4:b1:79:68:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:96:5B:8E:A1:D7:35:52:FA:7F:98:D8:CE:00:E6:DA:4A:1A:E6
X509v3 Authority Key Identifier:
keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:cc:61:32:3e:73:26:32:e5:53:49:a9:d8:52:e5:89:08:
f2:12:7c:8f:58:62:c0:5a:5d:91:79:93:bf:ff:5b:d0:91:0b:
74:92:89:45:f1:e0:ff:5f:b7:99:56:9c:9d:db:14:57:72:41:
d4:5b:a5:f8:ef:5a:79:83:ea:d8:37:ce:45:52:af:d9:cf:90:
e0:0c:db:99:7f:9b:a5:76:a5:4a:14:12:38:72:0c:8c:c3:5d:
89:78:1c:77:5f:f7:5a:b7:f9:97:02:d6:29:b0:7a:ce:7d:d9:
28:b8:ba:19:46:99:82:37:7f:91:af:93:40:97:4b:bf:d4:e6:
7c:ca:dd:93:6e:47:71:22:64:9d:8e:e8:91:3e:7d:b1:70:ca:
cf:e0:ec:fc:c9:d0:1d:0e:1b:65:cf:94:ca:3e:45:60:be:e8:
1a:11:34:c7:06:c6:90:c1:02:03:f6:90:65:26:e0:9e:83:97:
87:1e:45:d4:66:98:7e:32:00:04:13:00:88:ce:81:38:fa:b1:
2d:37:9b:47:a7:82:26:f6:35:80:04:e4:dd:d0:a9:61:96:eb:
d8:14:7a:8f:30:28:72:48:52:bf:4d:ae:37:f4:01:08:7f:70:
92:51:32:62:fb:c7:4e:47:13:2c:de:3f:12:c3:4b:08:12:4c:
6a:18:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:58 2026 by rpki-client