
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: Vh86S1MxJJ2+BHEbsdePfIPYkEnwJKf2bIvSTX7Cx0c=
Subject key identifier: 7B:12:95:C7:0A:71:88:0F:79:69:F9:AF:14:0A:3A:7D:33:C9:07:04
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 01FC
Signing time: Thu 21 May 2026 03:12:50 +0000
Manifest this update: Thu 21 May 2026 03:12:49 +0000
Manifest next update: Thu 28 May 2026 03:12:49 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: 9yyTi2xYz8u1QZ6k5V8uaWV5im8DHf1mwvpAHEIWXSo=)
2: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: PoM2r//Vc5483ybqcOELC8XLItw50pda51BtS9kgSIk=)
3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: O33e2x2bsJnVnZYzmgRVq6OSe4Uls0Q88mgSA9qXJfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: May 21 03:12:49 2026 GMT
Not After : May 28 03:12:49 2026 GMT
Subject: CN=6a0e7832-566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:05:2d:6d:d7:2f:1f:be:9b:ac:c5:3c:aa:
34:cc:61:38:3b:4a:e6:db:1e:d6:38:4a:04:21:f3:
49:17:38:2c:f7:e2:14:23:b1:50:c1:ed:eb:b1:42:
0b:34:56:66:a7:d2:29:5e:4c:68:1c:89:b8:c1:62:
c3:07:cf:bf:cb:53:a3:75:8e:88:71:80:f3:97:c4:
a2:b4:33:9b:aa:f2:62:b8:37:db:3e:79:f7:fa:a2:
97:84:49:29:71:f7:1e:5c:27:0b:15:8b:05:4b:cb:
f7:04:3d:35:b9:fe:79:eb:18:f4:9b:2e:28:ca:a9:
66:50:1a:46:c1:2a:eb:62:1b:ff:7c:d9:1f:32:14:
99:df:6e:6c:a8:8e:7e:2e:1f:a3:26:ab:7b:5a:01:
6c:2a:6f:a5:a2:59:e1:21:81:5b:77:d2:30:26:63:
a7:78:cd:a0:0a:f9:0b:86:d7:96:8d:40:28:5e:bc:
82:11:f4:69:69:39:9f:bf:4a:fe:5a:8f:cc:9a:64:
57:b1:66:28:07:59:d1:fb:c7:33:e0:1f:22:dc:df:
a2:0e:3b:6a:0b:9a:be:a8:1a:43:62:20:0b:3c:90:
fc:c8:83:f4:51:73:35:ba:99:a5:5f:7f:90:65:ec:
01:84:07:23:4a:a4:c8:81:9f:71:7f:0f:45:7b:08:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:95:C7:0A:71:88:0F:79:69:F9:AF:14:0A:3A:7D:33:C9:07:04
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8c:31:a1:f4:06:5a:49:db:87:8f:fe:a0:7d:25:2d:8b:3d:
e4:c1:28:68:26:e0:60:30:09:56:d7:d8:2e:dc:10:cf:65:e6:
47:f2:d6:79:37:d7:d8:d3:28:38:03:d3:fd:f3:42:95:a9:2c:
65:ce:a7:bd:16:04:73:7e:db:cf:e7:31:d9:b9:0d:68:69:d3:
9b:d3:d8:f6:bc:2d:2e:5c:f9:46:21:6d:f7:d9:e3:b1:25:ee:
a1:66:b5:44:20:96:d5:4c:a3:9d:ba:34:ab:94:43:7b:e2:19:
e7:41:b2:c1:37:9e:a1:3e:92:a0:01:79:97:28:96:04:94:7a:
89:6e:6f:95:12:23:76:b0:b7:36:fd:65:3b:a3:8d:2e:00:de:
05:20:24:c3:6f:e1:c1:18:88:ef:3f:0e:eb:39:d2:e6:c0:4b:
e0:ce:62:5f:a3:d0:c1:d3:7c:69:65:96:e1:96:c8:27:d0:df:
8c:9d:36:d8:88:74:70:ef:1b:32:a1:64:13:d5:76:af:4e:10:
47:21:ba:c1:0d:ee:27:d2:31:91:b6:77:5c:1f:f9:da:32:02:
4e:eb:aa:1d:24:ae:70:55:1b:3e:a6:7e:28:74:55:d6:8e:c3:
f7:a4:38:9d:7c:75:fb:c6:33:0d:1e:b5:9d:fc:3e:4c:90:8b:
9c:96:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:31 2026 by rpki-client