
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier: 0Sr5Zn8t7JAL6gV1SXE/Mm2xO6wnruwG+Ssi/iPS7xs=
Subject key identifier: D2:37:E2:17:E3:CC:3C:43:48:DD:43:A0:B8:39:31:4C:C6:35:0C:25
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number: 3F
Signing time: Fri 05 Jun 2026 09:00:35 +0000
Manifest this update: Fri 05 Jun 2026 09:00:34 +0000
Manifest next update: Fri 12 Jun 2026 09:00:34 +0000
Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: KcCZAAMzW0cfDQnwzo3ak6w1rS81goiB8YoduSYAA3Y=)
2: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
3: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Validity
Not Before: Jun 5 09:00:34 2026 GMT
Not After : Jun 12 09:00:34 2026 GMT
Subject: CN=6a229032-50cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:f2:f2:53:eb:8e:af:d6:99:2c:d0:ce:91:
6f:23:20:e9:72:e4:37:07:63:c7:5c:52:9c:67:e9:
3b:05:cc:f8:ed:dd:88:4a:04:b9:12:c0:4d:28:4a:
9f:02:df:30:37:e7:27:1f:ba:dd:31:11:9e:f9:31:
eb:a4:eb:46:6f:87:ee:5d:21:ec:93:1e:7e:3c:6e:
51:9f:ab:4e:94:53:48:73:7c:69:08:b2:e3:6e:74:
db:0d:8f:cc:24:5a:59:43:37:67:f7:99:21:ab:ab:
29:82:1a:7d:0a:c0:d7:83:d7:38:34:38:d7:77:83:
0a:9b:82:fd:93:bd:79:bd:6c:b0:8c:01:36:c1:29:
e2:1c:2f:ea:83:a2:51:41:6e:9f:b5:f1:f3:e0:f1:
40:65:c9:11:68:6b:ea:ac:d9:86:c7:a5:69:65:24:
63:9d:76:69:73:b9:a6:09:79:0e:56:a0:25:52:fd:
bc:fa:9b:42:d1:70:04:0d:5e:64:7f:3c:e2:ba:69:
e9:9d:98:cd:8b:9b:7d:50:93:8c:f3:3f:f8:3a:f4:
18:3b:06:06:97:1a:43:9e:a4:d3:9b:54:8d:01:0a:
04:52:df:2d:39:0e:62:f3:31:d7:28:9b:47:c9:6c:
31:5f:04:37:20:10:04:f2:d6:9f:70:a5:76:f0:44:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:E2:17:E3:CC:3C:43:48:DD:43:A0:B8:39:31:4C:C6:35:0C:25
X509v3 Authority Key Identifier:
keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:b9:3c:01:34:49:3a:56:0f:91:b2:70:aa:55:51:67:e2:
9e:41:57:fc:85:9b:c1:b8:3b:e9:de:d7:08:99:99:3f:80:c9:
96:47:04:b4:f8:a3:1e:c3:60:d8:bd:06:fa:27:8f:16:47:ad:
f2:44:f3:c4:1e:e4:a1:b3:e3:6d:3a:c1:50:26:dc:a7:7d:f6:
19:ba:5b:aa:bb:da:82:00:01:63:92:04:2c:bb:81:a6:66:b4:
65:c2:5a:09:c8:65:42:23:56:71:0c:58:5c:30:00:f1:c4:ed:
94:26:64:f7:60:27:95:81:d3:fc:d0:92:e5:df:8d:55:10:ae:
a2:01:3f:95:86:44:a5:34:11:b2:cf:da:92:c8:11:fb:9f:21:
f0:f9:06:06:5e:2e:0b:b1:de:df:9c:37:7e:df:18:75:f1:e3:
fe:9d:9b:8d:28:6b:78:c9:ad:fc:dc:63:5a:10:fc:6f:e4:8c:
dd:12:73:b5:aa:4d:c2:70:3a:bb:f8:d7:5c:8f:02:d3:80:9d:
3b:a8:ad:1f:fe:ec:b1:4f:3f:1c:31:b2:9d:b5:7b:4f:d4:6c:
3b:c8:5c:8d:31:05:0e:14:1c:8d:4d:92:b7:ca:dc:58:a1:4d:
92:22:71:01:13:d4:37:fc:6a:36:ad:12:f4:9e:a3:a3:b2:4b:
aa:1c:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:29 2026 by rpki-client