
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier: P09dSIoUB/kZw6e91WUfcEXeyJZXZda7F2i55SMWKoU=
Subject key identifier: D2:A0:96:FC:B8:C4:82:F5:94:B8:0C:2C:94:8B:41:1D:21:6F:B9:10
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number: 027F
Signing time: Sat 05 Sep 2026 01:50:43 +0000
Manifest this update: Sat 05 Sep 2026 01:50:42 +0000
Manifest next update: Sat 12 Sep 2026 01:50:42 +0000
Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: eD61woJaviIXGHMKDVGGQUwUh/+Znhidyv9YXApDufw=)
2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4GMNfCTUHQ1rV2C9XWos7Hdj0ySssxUEkLEdwlySSs0=)
3: FD678F40214E11F095B05918C4F9AE02.roa (hash: Vm3x4XjI71ZGXzqh/k1zDRwiOP341qe7iTCno94apNg=)
4: 4798C37060C511F1938892A38247A888.roa (hash: NqECYph2+dX2EILPMOrULQRj9cohk7FoO97wfRrmrZA=)
5: D84BF6B860C411F18C6019A18247A888.roa (hash: QIlUH1QNdLALbUbhElUoD+izhiqfEVazksdCsrI3VgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: Sep 5 01:50:42 2026 GMT
Not After : Sep 12 01:50:42 2026 GMT
Subject: CN=6a9b7573-ddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:51:a4:42:ad:15:c4:a2:e3:b2:58:95:ac:
3d:58:09:2e:b0:ad:e7:10:4a:77:06:68:29:9d:53:
2a:02:82:ab:e0:ab:70:6e:96:a0:4a:33:31:17:78:
1b:93:20:c1:b8:af:04:b2:f3:8f:0f:a4:45:95:d2:
23:f3:11:2f:58:b1:24:71:63:00:9a:e0:c3:86:d2:
70:98:d1:44:14:04:78:51:05:55:91:e0:06:f5:fa:
63:96:7c:20:b2:57:3a:ad:89:c8:ef:db:18:67:cb:
ed:c7:f6:e8:1a:b5:d4:f6:87:2f:4b:e2:65:17:b3:
55:01:9a:41:29:da:9c:d9:20:d7:64:33:87:d7:3b:
6e:9f:cf:e2:9f:b0:d7:81:21:73:0b:a9:78:b7:55:
2c:73:b2:94:f4:55:d3:8c:eb:c2:01:ab:e5:af:fe:
a9:d1:0e:4e:9c:62:00:dd:2a:79:4f:a0:4c:ca:e2:
e2:c0:be:7c:9e:7a:07:77:70:c7:f9:5b:6a:3d:00:
c7:49:65:25:47:29:c0:b6:62:e3:4f:cd:4c:be:cc:
ba:c9:1e:84:6a:75:bf:88:31:c0:fb:ad:0b:67:65:
ac:30:cc:4a:2a:07:fa:f0:ee:2b:a8:e1:8e:83:e0:
91:13:72:c5:b6:8f:66:8a:bb:af:c5:87:55:e4:f9:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:96:FC:B8:C4:82:F5:94:B8:0C:2C:94:8B:41:1D:21:6F:B9:10
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ea:b8:91:f7:ff:f7:2a:2d:ae:c3:40:58:f0:7c:aa:e9:88:
80:b3:51:e2:4c:c0:9c:36:01:ce:40:80:ec:bf:71:e6:22:a7:
44:68:0c:95:a8:b0:ab:fa:07:86:fb:fd:04:e0:40:c9:c0:31:
50:33:85:73:4d:ef:9d:b0:23:1c:13:57:5a:92:27:84:30:b5:
52:e5:af:f3:d5:f1:c6:c2:b7:b5:31:ff:f0:ad:81:57:f2:8a:
d6:71:b5:7e:7e:94:9a:8d:eb:63:ec:54:7e:bc:38:9b:d3:12:
2d:e3:92:44:64:1c:67:06:5d:bc:66:06:12:85:e3:fa:05:a0:
58:52:99:1c:fb:af:6b:00:6b:7d:83:43:14:a8:e9:49:16:0e:
7a:69:97:3d:81:14:36:3f:2a:c2:57:6c:c3:d6:f5:ff:0f:a4:
b1:67:88:37:f1:60:00:0e:59:75:6f:cb:9e:4d:9a:dd:22:f3:
f2:f9:79:ee:a8:e5:04:a1:c1:ef:6d:09:e4:f8:17:bd:30:7f:
8a:60:e7:9f:a5:bc:c0:b8:86:87:30:dc:b4:7b:c9:19:66:c0:
5e:2a:c7:e3:47:76:5c:09:b3:b4:1c:49:a8:d2:fe:b2:99:46:
ea:af:46:7c:ed:4b:33:f4:85:c8:51:0b:cc:88:03:7c:19:40:
4b:2e:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:30:50 2026 by rpki-client