
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier: vW6eGiqd+ccIZgHO5TP55CtxSHmFT5QSLaYSevl8378=
Subject key identifier: 06:A4:31:4D:17:11:32:E8:4E:D1:B7:4B:0B:1B:80:2D:61:33:5F:6F
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0ECC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number: 0E9C
Signing time: Mon 20 Jul 2026 17:26:26 +0000
Manifest this update: Mon 20 Jul 2026 17:26:26 +0000
Manifest next update: Mon 27 Jul 2026 17:26:26 +0000
Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: Z+D0aTk7sjxjLmyQErZr2awjkowg9kVLBqTWAR7Uaxw=)
2: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: FZBTRmN4jNtPYjIkOHiUIokPiCQDNfx5hxg3M5I9k0s=)
3: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: JaUMO42d058IElCDiIbG4Rs0tOfpVC1kruVkh0dRo+Q=)
4: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: yXwdOd72bbovK/lF6Uti3upvDyZiu0XdcxdU6SGbEWE=)
5: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Jul 20 17:26:26 2026 GMT
Not After : Jul 27 17:26:26 2026 GMT
Subject: CN=6a5e5a42-b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:0f:a7:09:96:38:f6:e2:ff:08:e9:03:09:
e4:59:1d:18:bf:c0:68:bc:68:c0:0a:f1:7f:36:e4:
60:6f:83:e9:9f:38:0c:5b:bb:d3:9b:04:a0:ee:94:
9c:d8:8d:8b:39:71:e4:a2:66:9a:3b:12:a3:68:c0:
70:05:de:48:19:0d:cc:bf:16:5f:0d:a4:4f:56:d5:
43:5f:31:72:96:d8:aa:ae:e4:5e:0f:6a:50:c9:bf:
05:af:16:30:68:50:b3:d3:0f:70:ee:2a:9f:df:6a:
90:75:28:83:1c:84:f7:f1:e4:d4:02:b9:7b:e4:6c:
a4:bc:11:60:2b:34:6c:2e:0b:f8:99:f1:b9:ef:46:
64:74:a1:73:70:1f:39:62:22:6e:dd:cf:ba:c9:96:
d0:6c:4f:e5:5d:ab:fe:7f:5d:99:e0:05:c5:7c:e8:
7d:0f:5b:7d:b0:e3:1b:7b:52:9f:24:a1:f0:e3:c7:
98:41:3c:74:18:d3:44:1b:e6:66:42:aa:d0:56:26:
68:05:3c:8d:49:89:6b:4b:cd:e0:07:3b:c8:bb:63:
44:a7:3c:9f:8f:41:7d:8a:ce:96:85:ce:c6:2a:54:
53:c4:23:84:4a:21:95:0b:91:64:51:e2:31:36:b4:
8b:ba:e1:2d:7a:14:31:50:b7:f5:19:f5:90:46:2e:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:31:4D:17:11:32:E8:4E:D1:B7:4B:0B:1B:80:2D:61:33:5F:6F
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:39:54:5e:a9:cf:e7:c8:dc:74:72:06:49:d5:93:61:69:
9c:96:f8:e9:bc:8e:e1:74:6e:65:d4:40:e3:40:05:82:45:9b:
fa:5b:bf:d8:ab:e5:1e:8d:03:92:60:f8:12:1c:fa:93:4b:f5:
86:c7:c2:d3:35:3d:cf:33:92:a2:23:e2:26:c5:84:ed:12:a7:
83:d5:6a:ea:0c:60:1c:2e:f6:6d:b7:8b:e1:0d:d7:8b:52:21:
b0:75:ee:cd:5b:38:2d:b8:86:a3:e7:5b:f8:ec:ef:2b:68:ca:
36:0c:16:60:97:92:9b:85:06:82:22:f6:01:1e:29:85:3d:f6:
93:51:20:df:b8:dd:99:7f:4f:5d:57:e1:af:e3:6a:9d:93:a7:
fb:9c:2f:1e:e4:9d:31:8a:86:8d:56:ae:00:90:76:ac:ca:d2:
a5:ff:61:4d:a0:81:47:d9:c1:74:86:7b:88:52:3f:a4:2d:b7:
4f:96:80:38:0b:fb:79:37:54:55:f8:6e:1e:1e:0b:7e:bf:fc:
4e:c4:cd:79:57:c8:ee:56:25:1c:ac:a3:1f:6a:b6:72:fe:1d:
3f:6f:38:03:8d:ef:78:75:6c:51:0e:eb:de:70:1c:0e:ef:57:
57:01:34:1e:e4:28:c3:dd:ce:b5:17:95:cc:dc:77:fd:80:0b:
a6:0b:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:33:42 2026 by rpki-client