
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: 9sOqeeB+3I08yJ2Ye2aE5QnvkuaW2F5W2MzV7WXcAYM=
Subject key identifier: DF:FA:8F:D0:E5:39:05:AF:97:88:5F:25:B7:E8:D1:CD:CB:D5:59:90
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 011B
Signing time: Fri 17 Jul 2026 07:01:03 +0000
Manifest this update: Fri 17 Jul 2026 07:01:02 +0000
Manifest next update: Fri 24 Jul 2026 07:01:02 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: 2hi3XUA0TUaA7qAydbdK8b3yE/gi0A3GAt6zVstt4y8=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jul 17 07:01:02 2026 GMT
Not After : Jul 24 07:01:02 2026 GMT
Subject: CN=6a59d32f-35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:d4:7e:d5:a6:ec:22:cf:01:74:a7:f7:62:
73:b2:62:9f:ff:20:3f:f1:bd:f1:d0:f5:56:5b:95:
3f:d6:83:83:63:08:32:b0:7e:7a:72:7b:9e:22:d8:
f3:04:70:a9:e5:8c:c9:e2:56:6c:84:2a:0e:0b:29:
12:a9:76:24:28:09:73:60:ba:22:ff:5d:8f:79:49:
1a:76:70:d1:1b:ad:b9:dc:07:71:f8:07:b2:fb:a5:
c4:fd:81:b4:7c:6a:f5:f1:fa:50:e0:00:8c:62:fa:
86:75:d4:d1:17:5d:6c:2e:6e:bb:50:14:4f:a5:5f:
f4:10:e8:62:2c:43:bb:9d:44:f0:a1:ca:dc:fd:3d:
6d:7d:f3:14:6f:8b:cf:5e:6b:fb:95:83:4f:88:f8:
60:7f:cb:b5:51:0a:e6:24:85:aa:17:fe:51:60:27:
fe:34:4a:2b:c3:1b:1b:69:99:43:26:37:96:6b:37:
91:ed:95:45:b2:35:0b:50:99:e8:00:16:2e:1d:0b:
3f:bb:88:0b:14:94:fd:34:8c:db:15:83:08:a7:46:
57:18:0d:aa:0d:ee:27:32:08:e5:1b:63:e5:21:90:
ea:3a:45:c0:f0:f8:7e:60:19:6d:6a:2e:3d:24:02:
39:cd:9f:56:00:b2:57:c0:51:74:d8:a0:c4:19:92:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:8F:D0:E5:39:05:AF:97:88:5F:25:B7:E8:D1:CD:CB:D5:59:90
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:6e:48:b5:94:2e:c6:9a:15:70:09:96:0c:86:78:ca:68:
13:b7:43:6c:07:bf:96:65:e5:01:b8:71:09:ad:0b:6d:a8:00:
67:39:a4:bd:43:78:96:aa:5d:c2:e0:3d:f8:5a:85:70:b8:ec:
30:41:64:58:91:39:b5:2e:06:8a:1d:37:f6:c6:8a:e3:81:c3:
09:af:46:38:a4:fb:9c:bb:3d:55:62:af:e3:99:41:ec:da:1c:
f6:8c:65:15:5c:c1:90:f7:7d:c2:3b:3e:c1:6d:d2:5b:37:ff:
df:7a:0c:fd:73:c1:a2:41:84:27:a9:e2:2d:44:f2:95:07:2c:
08:f9:8d:20:d9:f0:42:91:95:42:69:23:49:d4:03:07:4e:49:
3c:9b:fd:54:85:e1:7d:96:ec:1e:69:a2:fc:ba:b8:26:41:20:
45:f5:08:2d:1a:e9:50:79:de:62:62:60:92:0b:9d:0d:2b:f0:
34:4d:7c:9b:7a:2e:5c:eb:0c:42:2a:5f:b5:7c:9a:26:78:fb:
7d:e0:76:29:ac:05:21:d6:3e:33:53:20:ff:ca:a6:fc:4f:12:
4b:92:63:d0:f4:9e:0a:59:ab:ed:4c:36:77:ae:48:50:ee:82:
57:15:8f:77:05:5b:d5:6f:3a:8f:d6:a9:5e:04:ed:cb:c4:96:
9c:54:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:39 2026 by rpki-client