
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: rIFQCD01jMLyxdBWeWUQltlmUDWgYetP75PHFVGNRkE=
Subject key identifier: DB:27:3E:03:94:59:B5:83:3F:8D:E6:C8:05:FA:2D:AC:F4:8F:41:99
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 0105
Signing time: Mon 01 Jun 2026 06:53:36 +0000
Manifest this update: Mon 01 Jun 2026 06:53:35 +0000
Manifest next update: Mon 08 Jun 2026 06:53:35 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: MOL2JPGnWaC+IT8T3JoXlltW6yaS9eVVXSIiDtEZwv4=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jun 1 06:53:35 2026 GMT
Not After : Jun 8 06:53:35 2026 GMT
Subject: CN=6a1d2c70-b064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:0f:77:ff:23:06:28:66:e1:a1:11:0b:45:
14:8e:da:14:f8:f4:5c:a1:eb:d9:06:26:fb:a2:c6:
2f:49:7d:2e:f6:5f:68:39:0c:ea:46:e5:57:eb:c8:
e3:cc:86:e8:39:b1:4c:e3:36:aa:4a:b2:24:48:05:
75:f0:76:cf:ef:db:06:7a:ec:83:b7:76:4d:10:42:
3f:6f:e8:43:2f:49:bd:6b:cc:73:98:90:95:12:43:
43:26:8c:54:da:b7:03:01:dd:b3:9f:f5:b2:d9:d9:
90:fd:1a:d9:7f:ed:a0:52:c1:4a:c0:0c:be:c0:54:
17:7e:18:a1:9d:e4:25:4b:5b:51:87:b0:b7:c1:66:
04:86:26:8a:1a:04:c6:95:33:b2:f8:9a:48:19:c7:
e4:96:e2:62:90:4b:44:35:c2:09:90:df:1b:b1:f1:
24:d7:e0:c3:d0:e6:55:e5:60:b3:5a:06:01:8d:af:
85:80:81:00:61:df:52:ab:d3:7f:c9:bc:c4:9f:07:
94:4a:44:e7:03:e9:ac:9f:54:97:b5:25:24:00:1a:
5b:2b:15:f8:4e:16:f8:8f:fa:d4:2f:7d:bc:59:2b:
bd:5b:91:3a:52:7b:3f:85:be:1e:89:26:8b:7f:46:
2d:f2:44:89:75:af:ed:b5:d2:ec:a7:51:dd:24:a6:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:3E:03:94:59:B5:83:3F:8D:E6:C8:05:FA:2D:AC:F4:8F:41:99
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:2f:57:d6:73:76:dc:6f:43:d5:4a:a4:e2:4e:53:48:ce:78:
f1:c2:df:18:c1:ac:d2:78:f9:78:90:88:fa:35:64:89:d4:8d:
27:c6:c3:71:1b:f8:0d:59:f9:60:28:dc:ce:96:cb:af:16:35:
88:f1:db:36:6e:37:fb:d4:d0:22:c1:b0:bd:d0:1d:73:c9:39:
45:18:a3:74:14:79:06:a2:48:23:17:dc:e6:79:c7:5c:85:25:
18:8e:17:9c:03:5e:1c:d6:dd:01:69:3b:18:a8:11:c8:92:a1:
ee:d5:7e:d2:43:68:ed:dd:f5:30:13:50:1d:6e:22:af:0b:23:
16:5a:cc:c2:74:bb:39:28:e2:be:a0:b6:d9:e2:ef:53:5d:3f:
85:58:ea:7b:20:52:08:6f:ce:b6:62:eb:5f:ab:c8:e5:b2:f4:
a8:1b:36:db:ee:91:cb:32:66:f8:b8:22:e3:56:10:1b:91:ce:
be:ce:a4:07:65:f3:3c:75:1e:f9:40:4e:53:11:6f:9e:03:5f:
21:91:d0:33:f0:39:7a:ec:5c:86:a2:20:89:a5:28:cf:9e:54:
98:b0:cd:f4:43:0c:d5:e0:d5:7d:4a:2a:70:76:e4:99:6c:e3:
14:d6:8a:f7:c9:0c:7c:ea:f0:e6:44:00:25:f8:b7:57:4b:2e:
4e:fc:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:16 2026 by rpki-client