
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier: egVb2rWybKjup9G0l8fr+xgN9/P1uIh5uSwQYNgcTro=
Subject key identifier: 3E:B5:42:FC:E3:6D:AF:7C:A3:E4:EA:A3:2C:AE:48:E4:36:2C:B3:9B
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number: 02C9
Signing time: Thu 23 Jul 2026 02:24:33 +0000
Manifest this update: Thu 23 Jul 2026 02:24:32 +0000
Manifest next update: Thu 30 Jul 2026 02:24:32 +0000
Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: kXAg9v+9dR2oXSS5URFpHwgUEoW0Gm1nOMJAblTLMsw=)
2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
4: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Validity
Not Before: Jul 23 02:24:32 2026 GMT
Not After : Jul 30 02:24:32 2026 GMT
Subject: CN=6a617b61-efe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:ad:e2:14:43:03:e6:45:9c:07:28:42:6b:
cd:09:b8:6d:b6:7b:3a:66:5b:c0:52:3d:32:48:d0:
00:e5:4d:72:e6:44:c9:2e:de:b3:af:ec:47:04:db:
11:9d:5f:99:80:03:49:8c:11:92:b0:04:bb:60:43:
86:f2:e0:bd:1b:94:d8:45:be:71:e4:93:43:a4:c9:
19:c7:89:aa:32:38:d1:4a:8b:9a:be:98:7c:50:5b:
61:45:30:65:73:8c:14:a1:0d:a0:56:5e:9a:eb:36:
02:cb:0e:16:24:f2:ce:56:75:87:27:60:f0:f9:b4:
a3:52:3d:04:bb:d2:17:a7:db:dd:06:2c:ac:e8:9e:
ec:d8:51:28:3d:dc:52:0e:a7:f1:0e:01:e3:df:3e:
94:d5:bf:c0:36:aa:38:38:04:cb:96:a7:fe:a2:d7:
42:b1:d0:40:47:ac:e0:82:ae:c8:d8:2d:e6:fb:10:
ab:6f:6b:ff:ea:e3:ac:83:54:89:c4:23:97:ff:49:
9f:8b:5d:cb:40:ec:ac:dd:28:ea:44:f1:03:a8:0c:
38:79:fa:7a:af:5a:a8:59:fe:8d:d2:6b:67:68:68:
d8:60:44:81:12:e6:b4:7a:b7:aa:f9:57:34:1b:84:
61:9e:8d:e8:84:7f:37:c1:2b:1c:b2:6a:a5:ed:8b:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:42:FC:E3:6D:AF:7C:A3:E4:EA:A3:2C:AE:48:E4:36:2C:B3:9B
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d9:91:ce:74:40:d6:41:95:02:57:f1:2d:f4:f9:f1:fd:75:
fb:f5:3f:9d:d2:83:88:f5:7c:07:d0:1d:34:20:88:06:d0:dd:
00:88:c4:ee:53:41:28:fb:69:f0:ba:d4:f7:97:4f:68:4c:fb:
8f:e6:08:c4:62:be:d9:c7:45:a7:9c:45:10:d4:3d:be:63:5a:
35:2a:64:f8:81:cf:93:ae:ac:91:56:5e:ff:9c:30:d5:17:be:
f5:71:33:41:84:2b:9f:ad:d0:d3:b2:31:c1:5a:81:a2:b5:62:
e3:04:b0:eb:34:71:44:1a:3d:cc:19:1a:f9:4c:e7:f3:89:b8:
e8:85:4b:74:a6:53:51:3a:08:3f:d8:63:63:08:dc:58:f7:21:
e7:c9:f1:52:7f:28:55:6c:6a:07:a7:92:59:cc:cc:78:75:a2:
8e:35:90:2f:bf:6c:38:92:be:22:f1:4c:d5:95:ba:4c:68:89:
ca:34:96:d2:cc:b1:85:5a:86:98:ce:3d:38:fe:e5:c3:39:0f:
52:1b:4e:26:72:f5:c3:f3:c1:42:81:80:4d:37:55:36:be:6c:
99:63:35:5b:28:d6:fd:73:a1:31:46:78:8f:6a:94:ed:d5:f5:
b4:73:56:50:b3:a4:29:ea:6b:a8:74:4e:a2:ec:5a:f4:da:47:
a5:70:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:35 2026 by rpki-client