
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier: nLF5V2PJWMACZ/uD1QCnD5/7QL7mLOj4V8f/g33MSC8=
Subject key identifier: 7C:DB:66:23:41:5C:A4:84:15:E5:A7:81:EE:CD:C8:E8:6C:B7:09:70
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number: 0267
Signing time: Tue 21 Jul 2026 03:23:58 +0000
Manifest this update: Tue 21 Jul 2026 03:23:57 +0000
Manifest next update: Tue 28 Jul 2026 03:23:57 +0000
Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: sstHKM8/pgCDhItTXIGK8R/YFF2R0sMw9IP03zjLBPs=)
2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4GMNfCTUHQ1rV2C9XWos7Hdj0ySssxUEkLEdwlySSs0=)
3: FD678F40214E11F095B05918C4F9AE02.roa (hash: Vm3x4XjI71ZGXzqh/k1zDRwiOP341qe7iTCno94apNg=)
4: 4798C37060C511F1938892A38247A888.roa (hash: NqECYph2+dX2EILPMOrULQRj9cohk7FoO97wfRrmrZA=)
5: D84BF6B860C411F18C6019A18247A888.roa (hash: QIlUH1QNdLALbUbhElUoD+izhiqfEVazksdCsrI3VgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: Jul 21 03:23:57 2026 GMT
Not After : Jul 28 03:23:57 2026 GMT
Subject: CN=6a5ee64e-f21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:71:e6:97:9d:91:ea:e2:60:a1:93:ad:3c:
9f:e5:f4:3f:af:7f:97:a7:86:9d:7d:a3:0c:69:47:
5f:92:3a:f3:71:85:31:0a:c8:7e:cd:de:66:89:20:
b7:99:dd:e8:1c:c7:08:33:d6:76:17:09:86:a6:78:
e4:12:0d:3f:1a:bd:2a:74:08:d0:db:c2:3c:79:1b:
cc:d0:0f:12:04:5e:ca:9b:b6:d5:27:0b:ec:fe:4d:
db:94:eb:50:bf:cb:23:fe:5e:f7:e6:04:9a:b6:e8:
e2:db:85:b8:32:76:07:7a:cf:71:66:ed:a1:a1:93:
0d:b2:19:0b:7d:bd:07:6c:63:35:8f:d7:7e:3c:d2:
20:ac:c9:bc:7d:94:7f:a8:90:b8:0d:f1:a7:be:29:
03:18:24:30:39:ba:94:ad:7d:09:fd:a9:4d:29:6e:
1c:41:c8:fc:bb:fe:45:16:33:54:eb:74:ac:d9:b1:
32:ca:f0:e1:87:e2:74:fb:28:12:e7:71:1e:20:0b:
30:5e:29:0e:72:4a:f1:39:ad:4b:31:85:9a:c5:39:
6a:47:35:7d:d0:32:d4:46:eb:c2:5d:40:3a:8d:02:
df:70:6b:61:36:10:bf:33:c8:71:32:88:cf:5c:c1:
9a:24:fd:5a:8e:41:3a:e1:1f:c8:5c:7f:86:16:93:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:66:23:41:5C:A4:84:15:E5:A7:81:EE:CD:C8:E8:6C:B7:09:70
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:ee:23:48:32:6b:7d:23:4b:e7:af:b4:be:7f:82:ba:5b:
38:85:62:98:ff:57:79:cd:43:c6:76:57:dd:fc:11:6c:23:ed:
40:05:6b:40:5c:c1:00:6e:34:07:7f:9e:27:76:d6:ca:1b:2d:
b1:12:38:6f:b5:33:e7:2b:6e:85:a9:95:78:3c:ab:81:a6:1b:
48:0a:36:08:6c:54:60:ce:0b:b0:0a:68:3e:3c:e0:51:27:ee:
00:fe:6f:f4:d5:ae:1e:a0:14:42:94:c6:4d:f0:4a:52:02:bd:
aa:2a:1a:64:76:ca:12:a9:77:82:92:80:10:e4:62:f0:fc:fe:
4b:d0:e8:67:d4:6f:b1:1a:09:dd:9f:2d:76:bd:c8:96:5d:f3:
5d:41:22:a0:df:29:c4:ad:dc:a8:4a:37:d2:7c:5f:7c:eb:fd:
48:66:19:da:81:a9:f8:d9:72:b4:5d:33:d7:e6:e5:a8:e5:25:
ee:4d:05:a2:04:91:48:8b:78:1d:83:e1:fa:15:6d:eb:c0:f5:
9e:9d:e8:68:55:79:61:b9:70:91:0b:fc:fd:32:0d:99:34:a1:
ff:f1:65:e7:9f:2d:68:db:d8:a3:3d:0c:2a:30:b6:82:05:92:
af:af:e7:2f:eb:bb:49:fa:76:66:7b:49:20:ca:55:99:ce:cf:
d1:b5:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:56 2026 by rpki-client