
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier: 99vpzHupWludXcv0UN8Ynaa3sLGof75v9aTaaiHKYkU=
Subject key identifier: 0B:ED:31:9A:6B:9F:53:58:88:A2:0A:0E:17:20:15:E7:07:35:E3:7A
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number: 0144
Signing time: Mon 01 Jun 2026 06:06:21 +0000
Manifest this update: Mon 01 Jun 2026 06:06:21 +0000
Manifest next update: Mon 08 Jun 2026 06:06:21 +0000
Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: BNSf12uz8lrb4aCInU14Woy0WhG8ZU43K4jyzbVzlrI=)
2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Validity
Not Before: Jun 1 06:06:21 2026 GMT
Not After : Jun 8 06:06:21 2026 GMT
Subject: CN=6a1d215d-370f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:bc:bf:91:77:41:aa:76:f8:15:8b:84:03:
fd:73:98:31:34:97:7d:46:59:b6:55:ee:56:8f:a1:
38:7c:9a:3f:00:a3:4f:15:0f:9f:40:1c:94:41:8a:
48:4c:be:c2:f7:60:23:51:e4:0a:1a:1b:61:c1:25:
4d:6d:9f:29:bf:5b:0e:d9:cd:39:b2:6b:d1:1c:38:
58:df:e4:f1:ba:fb:9b:4d:d6:37:c6:f8:54:f0:d9:
dd:8e:e2:7e:67:33:c8:81:1b:39:11:9a:17:62:53:
d6:00:8d:b7:c9:17:f6:40:5e:76:c5:0c:bd:9e:32:
77:e8:a4:ac:88:94:7e:4e:9d:e5:80:2b:a1:75:bb:
59:f0:00:68:01:15:56:cd:ef:44:39:b4:7e:42:51:
d4:ef:ce:be:55:80:3d:6b:54:c6:bb:bc:5f:54:3b:
79:7c:50:b1:dd:11:69:90:17:6f:d4:7e:7d:46:8f:
89:84:75:64:1d:2f:37:82:12:88:dd:21:fe:33:06:
f7:77:e6:17:f5:e5:98:94:60:de:f6:bd:c3:e8:cc:
14:f5:eb:2d:d9:b4:8c:ed:11:75:84:47:96:c1:af:
72:c5:93:ba:82:79:9f:7d:96:eb:c7:72:9f:7e:8c:
cc:7e:2d:b3:f8:17:e1:08:f7:b0:ff:6a:06:90:ae:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:31:9A:6B:9F:53:58:88:A2:0A:0E:17:20:15:E7:07:35:E3:7A
X509v3 Authority Key Identifier:
keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:00:73:6d:00:7f:1d:e7:da:f6:24:78:70:a7:f6:bb:32:
34:82:b1:81:db:e2:cd:eb:9b:06:1b:5f:b2:3a:f3:a8:15:a7:
59:0b:77:a1:78:e7:b4:a5:a4:ab:7f:88:58:d6:6f:c6:50:b5:
8a:36:a2:fa:15:93:98:2e:5c:ca:8d:5a:dd:54:1a:8c:45:bf:
b7:84:b3:b2:e7:19:a0:95:c8:98:1e:62:a5:1a:eb:26:bb:18:
05:fa:d8:72:65:b4:a5:b7:58:30:2e:45:61:2f:87:0b:95:45:
cd:c2:72:c9:0e:ee:c2:bd:c0:61:14:22:48:7b:98:b3:e6:a8:
8c:45:70:26:5c:70:32:7b:82:3a:35:b7:b5:e6:b5:01:56:c8:
01:13:da:02:24:1d:bf:12:2c:ef:bc:16:47:80:c1:98:63:c4:
c9:f7:2f:3f:e0:68:ba:8b:92:96:4d:29:d8:e5:6a:51:c2:77:
3a:92:f5:c6:6b:27:01:13:db:fb:e8:c4:b0:65:b9:4a:c2:ae:
5d:4d:bf:f7:41:a6:72:5e:c4:42:9c:b0:78:bc:78:e8:a3:5a:
36:5c:61:cc:5f:f2:62:7a:76:8e:0c:53:7f:f8:18:73:7c:65:
b0:01:83:ac:5d:d5:33:57:fa:0e:53:5b:4b:de:cf:47:64:55:
ec:73:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:41 2026 by rpki-client