
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier: TZehms84TvTXFdKKkwTxGqDEkJ6YFb2ces5Iw+3F7es=
Subject key identifier: 82:A4:FA:3C:4B:68:84:DC:8C:8B:F1:17:95:FC:16:59:CA:C9:C8:4D
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial: 1DDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number: 1DAE
Signing time: Sat 24 Oct 2026 16:04:24 +0000
Manifest this update: Sat 24 Oct 2026 16:04:23 +0000
Manifest next update: Sat 31 Oct 2026 16:04:23 +0000
Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: hRQcVeydAtwDJQW4CgKsSH+5EwtqcDGYG2MCL/IZeBM=)
2: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=)
3: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: 5BzxW+L4vSDnf3Mt8f4xne60eMyftYTFgf6t3n4xIJQ=)
4: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: HaArSzXQPWVclTurOjmYRFehXALwDSZqwgKX4Y1qn/o=)
5: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7642 (0x1dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Validity
Not Before: Oct 24 16:04:23 2026 GMT
Not After : Oct 31 16:04:23 2026 GMT
Subject: CN=6adcd708-f4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:8d:8d:92:db:e4:25:c5:5f:b4:af:fb:4c:
36:dc:1f:a7:54:dd:f9:0d:51:b1:c7:52:c8:92:e2:
2d:5c:c6:e5:7c:f7:80:20:e0:84:4e:a3:a7:64:cc:
2e:05:7e:3c:5d:f5:a7:da:38:30:44:22:d6:6d:5b:
a1:d6:88:79:e2:24:ab:be:7b:df:81:62:a7:02:ec:
63:ad:ad:2b:aa:3b:4b:ea:0b:61:14:2c:1a:db:f3:
85:79:7e:cc:89:3f:b3:3a:41:1f:fc:02:e2:51:42:
65:12:1e:8a:80:c7:e9:59:df:ff:57:45:ec:dc:c7:
aa:69:3e:43:0d:9f:95:a1:40:24:f4:6e:c9:2e:e7:
bf:96:c6:8e:d0:f7:6f:77:4f:81:6b:c1:4b:95:e5:
19:f4:11:94:a6:f1:11:f4:29:4f:3a:3e:98:e5:a8:
33:d6:93:24:48:0a:75:a1:04:4a:e6:7b:4d:aa:c6:
f8:d5:35:a7:09:4b:db:cc:3d:dd:37:bd:b5:96:e3:
b3:ec:9a:43:a1:cd:db:75:29:fd:8b:ee:46:00:56:
aa:5a:90:bc:d1:be:b0:35:0b:ee:37:99:43:47:db:
cb:f5:c0:95:c2:95:bc:78:ab:da:2f:a3:90:64:d2:
95:44:10:a8:ce:66:7d:04:de:0b:1e:28:9f:c2:47:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:FA:3C:4B:68:84:DC:8C:8B:F1:17:95:FC:16:59:CA:C9:C8:4D
X509v3 Authority Key Identifier:
keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:dd:0f:88:20:a4:1c:d6:98:e1:05:bc:72:ea:c8:e7:58:da:
cd:aa:1c:b5:3c:60:58:32:e0:0b:6f:df:e0:6a:26:e5:c5:c6:
6c:d2:63:79:43:5f:c6:5f:bf:c3:79:bf:0c:e2:a3:7d:3e:bd:
db:ef:8d:8a:ee:5f:c4:02:2f:56:b8:fb:17:32:3b:ca:28:ac:
21:30:1d:15:08:6c:18:73:b9:03:75:40:b3:95:81:51:29:5b:
99:97:96:1d:f0:34:8f:dd:71:8c:71:2e:e2:c5:74:4d:f1:f1:
63:2c:c0:24:d8:cd:b9:3b:68:49:9f:e4:75:a9:88:17:d2:98:
ee:41:8c:dc:9a:e3:97:11:71:4b:e8:9c:ec:db:8b:bc:71:e6:
62:d4:cf:9d:68:df:73:b0:03:d6:6e:f2:61:97:3c:5b:1f:e9:
56:63:a7:69:d6:a0:6e:ad:c9:57:a7:ab:6f:18:ad:15:1c:d8:
69:c2:e2:e6:98:ef:9f:3d:d3:34:95:a0:03:5b:5e:fc:da:f8:
80:72:25:02:16:ce:1b:5e:e1:b8:05:6e:e1:c2:27:e7:0a:85:
53:45:67:5c:f7:d7:01:05:35:0b:e1:54:5c:07:76:a5:1e:43:
b1:a6:fe:0c:64:06:a1:57:f8:8d:e6:4f:97:18:13:db:b5:66:
f1:9d:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:19:33 2026 by rpki-client