
$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json)
Hash identifier: +YT3mljND2mj291ccsivhMaO+lW6g9jKVoyFxkF7oSo=
Subject key identifier: AC:33:0B:E4:15:DD:EA:FF:C3:E8:45:B0:96:24:89:5C:99:1B:B7:95
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial: 05E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
Manifest number: 05D4
Signing time: Sun 26 Jul 2026 23:57:14 +0000
Manifest this update: Sun 26 Jul 2026 23:57:14 +0000
Manifest next update: Sun 02 Aug 2026 23:57:14 +0000
Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: dq7FSO5A4GhyVGr0uCjNqgICU3NBeI6pJckbOrPYyJ4=)
2: Zv6-Gs71k5T3vqSTf-GFXFsjHso.asa (hash: qdUdfVKFKCwpSZEMGOdInFNY6oPsIKiGwNC/nSnObLI=)
3: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: Cr23RBREtuT54zLAvnFw/R9xfkhI60wXk3xodOfPdEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Validity
Not Before: Jul 26 23:57:14 2026 GMT
Not After : Aug 2 23:57:14 2026 GMT
Subject: CN=6a669eda-d67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:50:f6:52:52:06:4f:94:ca:d5:d3:f2:98:
2e:69:da:e2:ed:22:b3:a2:7f:0b:3e:39:85:e8:aa:
1a:08:e5:68:9f:ce:65:d4:e1:34:3a:2c:fd:8c:e6:
5f:ff:9b:e6:cb:2b:73:73:9a:94:6e:21:b7:27:58:
c8:17:6a:13:6d:35:d3:8f:31:9c:ee:aa:67:e5:14:
e2:c4:c3:39:ad:b8:09:6c:12:bd:80:d9:29:ef:8a:
5d:3e:23:0c:fa:96:c6:37:ea:8c:43:75:e0:ea:f4:
79:b7:ed:61:2e:a8:13:a3:98:1d:08:dd:a8:34:b3:
7e:3f:b8:67:4f:08:cc:8d:eb:8d:dd:3e:ee:2f:27:
69:94:cc:22:d7:86:8e:86:2b:82:9c:68:1f:24:10:
b7:df:8c:0a:95:d2:1d:a9:a8:79:da:4f:b6:b4:ff:
fc:72:92:a4:ec:f5:2a:af:9f:d7:cf:d7:b3:75:97:
81:8c:8d:55:4a:1b:f5:d7:8b:83:ba:b6:23:2b:02:
c8:1e:fa:20:c3:4c:7d:d2:ab:5e:06:54:5e:7c:d8:
0c:36:51:d3:e9:ca:2f:76:02:44:e8:6b:7f:ce:f9:
a8:51:a8:2c:33:45:93:37:52:29:8e:ec:b2:36:b5:
03:88:cb:96:41:b2:a3:54:57:2b:3b:64:62:5c:9c:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:0B:E4:15:DD:EA:FF:C3:E8:45:B0:96:24:89:5C:99:1B:B7:95
X509v3 Authority Key Identifier:
keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ec:83:aa:aa:81:32:57:be:0e:d5:bd:7b:e8:7d:2d:e1:dd:
a1:33:26:48:d6:67:ea:a9:af:aa:74:f2:50:97:88:8d:dc:c3:
6c:a1:52:89:24:9b:ce:48:3e:c5:91:47:15:a4:85:03:03:66:
01:a2:21:4d:6e:d5:7e:d9:c7:fb:07:fd:ad:15:ce:73:1c:fa:
d4:39:e8:c5:d7:0b:a8:40:46:1a:2a:8a:3f:98:37:47:ee:63:
89:75:97:70:89:92:c4:7b:cb:bf:83:fb:88:33:46:86:1a:d5:
8a:df:79:72:8d:3d:f0:c4:24:76:b9:88:77:cc:c2:5f:17:b9:
9d:e0:be:ad:3f:a8:ea:d1:6d:e1:9b:58:5f:ba:da:40:ff:22:
59:bb:08:c1:dc:dd:26:ff:bb:53:a5:bb:42:c8:f6:cd:df:d1:
6c:d4:2e:5d:c5:6c:59:7b:5e:a3:9c:30:b5:19:33:01:00:7d:
7b:e8:78:09:a1:6b:1b:8d:40:f3:9d:1b:4c:08:a8:c5:f6:b2:
80:05:8b:81:e7:cd:a9:83:ee:f8:fa:fc:ad:f2:c9:d4:df:0d:
b5:08:10:87:49:df:67:a6:8f:e8:65:ba:72:8a:fb:8b:5c:1e:
1b:e1:2c:c1:d4:67:c8:ad:d7:c8:68:a5:b4:c8:73:a3:a7:fa:
82:e5:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:17:34 2026 by rpki-client