
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json)
Hash identifier: lTs01uqKvk2Qp3guqB2bxf3xs2fiBkhsSfDMvZ7YmrI=
Subject key identifier: AB:A8:A6:6C:00:6D:0C:80:14:D9:01:95:69:7F:11:93:66:9E:55:15
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial: 0612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
Manifest number: 0604
Signing time: Mon 26 Oct 2026 22:48:56 +0000
Manifest this update: Mon 26 Oct 2026 22:48:56 +0000
Manifest next update: Mon 02 Nov 2026 22:48:56 +0000
Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: 9pD/Sadj3OFsHUGilfGPNiCE520lIv00OPttKPWtSzU=)
2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: Cr23RBREtuT54zLAvnFw/R9xfkhI60wXk3xodOfPdEg=)
3: Zv6-Gs71k5T3vqSTf-GFXFsjHso.asa (hash: qdUdfVKFKCwpSZEMGOdInFNY6oPsIKiGwNC/nSnObLI=)
4: brcutBd151Md9bJI-OoTJ0GMfZ4.asa (hash: pdWp/ixnt1ciewmmJ7C7IFTTl7y91OCpYUc21rtYAjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Validity
Not Before: Oct 26 22:48:56 2026 GMT
Not After : Nov 2 22:48:56 2026 GMT
Subject: CN=6adfd8d8-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:24:58:c3:8a:08:dd:7d:6a:f8:ff:ec:1a:
49:85:0f:aa:25:4e:d8:da:a2:83:9b:ab:8a:0e:4e:
aa:df:be:ca:6f:55:6c:ed:98:93:8f:54:99:d7:af:
bd:bf:22:a3:e3:08:a8:74:44:39:2e:92:e6:a8:59:
63:fa:62:f1:71:18:55:8d:65:7f:14:71:d2:c4:43:
58:09:8d:75:2b:39:cc:82:62:be:69:83:9f:3a:2e:
08:34:b3:c0:b4:eb:0c:96:80:b4:be:0b:6f:86:d1:
43:7e:b7:51:e6:ab:2e:28:8e:07:f2:a0:42:c0:e8:
dd:fe:94:63:1e:8d:83:3b:d4:fa:90:c3:61:48:02:
cd:4a:2e:e8:c7:de:bc:da:07:62:70:d6:b7:79:dd:
52:8a:99:4c:2f:3e:57:36:50:9e:fd:f4:70:ae:5e:
4c:35:13:38:ec:1e:04:23:7e:88:4b:a6:55:77:3e:
89:f0:60:21:63:2c:7b:2d:ee:7f:3a:78:a3:79:c5:
15:b2:8d:92:f1:1d:28:2c:b1:a0:26:9a:f8:f3:2a:
dd:1c:26:a0:96:21:5d:49:b0:18:05:3b:ed:1f:8d:
6d:89:33:1d:85:de:0b:35:32:71:c0:4c:80:60:91:
7b:d9:fc:c6:50:0b:dc:22:38:14:bc:60:1c:ef:e2:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:A6:6C:00:6D:0C:80:14:D9:01:95:69:7F:11:93:66:9E:55:15
X509v3 Authority Key Identifier:
keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:81:22:50:17:7a:03:5b:1f:83:22:fd:64:cc:71:3d:cc:
20:22:c7:09:25:56:8a:25:b9:4e:fe:4e:d6:88:fb:93:a5:80:
44:aa:8f:6a:39:59:cc:b5:8f:5e:30:9d:7f:fa:77:01:43:9b:
63:2e:35:e9:36:f1:6a:c2:de:6c:eb:da:e4:ea:56:97:f8:b2:
b9:63:02:d1:5b:59:14:ca:07:a1:0c:05:d4:34:87:92:b0:48:
74:91:d7:b7:75:2a:07:01:26:94:dd:42:56:dc:bb:16:61:bd:
d3:b2:5e:21:d5:d5:87:e6:24:c0:63:05:27:9e:36:2b:36:57:
06:e5:bf:9f:96:f1:ca:9b:6c:e5:53:85:37:a3:e2:d9:20:a1:
21:d5:a6:c1:e9:15:48:26:3e:24:ea:f2:4d:b0:b4:94:29:07:
b1:01:9b:78:ee:3c:94:81:62:ff:fd:22:79:97:08:26:4c:7b:
43:f0:aa:9d:ec:e8:9b:d4:cb:89:1c:96:60:90:28:eb:db:ec:
ff:3e:59:c4:da:88:9e:8e:21:bf:96:ab:48:50:71:72:a6:ce:
4f:3d:7d:b6:a6:c4:a8:08:3d:bd:a0:0e:33:5d:96:07:c7:49:
ca:06:14:74:4c:ee:c7:60:ce:0e:a7:92:cc:5e:50:7b:23:94:
85:d2:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:39 2026 by rpki-client