
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier: 2y3XdxZTR3HA8mNPMfwCFRYeacjrbXl78u01sfF0uXA=
Subject key identifier: C1:27:2F:F9:3D:45:5E:4E:DD:DB:58:16:01:1C:03:87:58:30:C6:6F
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number: FA
Signing time: Wed 19 Aug 2026 06:56:54 +0000
Manifest this update: Wed 19 Aug 2026 06:56:53 +0000
Manifest next update: Wed 26 Aug 2026 06:56:53 +0000
Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: J5bw2lVr86bQ6C5AMgD8h65lkeHWe/kMCB5aB+rn14Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Validity
Not Before: Aug 19 06:56:53 2026 GMT
Not After : Aug 26 06:56:53 2026 GMT
Subject: CN=6a8553b5-78dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:7f:03:da:da:45:2a:df:60:dd:5a:e6:b4:
43:e1:19:47:10:66:16:67:43:f1:cf:0d:b8:f4:2f:
be:fc:0c:f6:72:b4:67:a3:57:6b:a8:65:7d:ad:78:
1c:f5:cc:31:3b:64:28:f6:28:43:d1:67:db:eb:4d:
6b:3e:8f:23:2f:e3:f3:8f:b9:58:f6:21:02:5a:16:
fc:47:95:da:ee:9c:b7:6c:be:f6:37:59:a5:36:e1:
5f:8e:fd:ac:3b:fc:b8:64:85:42:27:ff:32:00:d5:
77:60:4e:c3:46:cd:27:ae:04:ae:a2:7e:53:a0:84:
2b:ba:ce:4c:ec:ac:44:73:5e:16:4a:fa:60:92:b7:
60:03:be:d5:e0:31:8b:f3:f3:ec:2d:c2:d7:12:00:
ed:e6:8a:d9:c6:c4:c0:62:aa:94:a2:4e:75:4a:1d:
10:16:06:d4:33:32:59:2f:3b:05:c8:2d:cf:80:06:
d1:50:8c:68:16:b5:8e:4f:54:45:12:d7:98:98:a1:
43:af:0a:a6:e8:1f:9b:56:f7:16:5a:52:7f:a3:ac:
80:b4:e5:ba:69:c9:5c:80:2b:86:d7:d7:24:61:85:
6a:85:02:d9:a1:86:c8:cc:de:38:52:bf:b4:96:9f:
56:87:01:00:31:03:78:2e:66:20:8d:e8:1c:95:2d:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:2F:F9:3D:45:5E:4E:DD:DB:58:16:01:1C:03:87:58:30:C6:6F
X509v3 Authority Key Identifier:
keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:96:b7:b3:56:01:bc:b9:e0:41:31:f9:70:e8:27:8d:8c:
45:e8:08:3e:72:48:b9:49:ae:dd:a5:42:d9:35:9c:d6:c2:eb:
6f:32:9f:f1:64:55:77:3b:78:fe:84:f4:f7:35:4b:8b:2f:af:
2b:0c:76:50:af:5c:70:91:4b:34:4b:c3:9b:81:b7:0d:da:be:
ae:90:11:bd:4d:73:42:5f:4c:30:db:9a:99:66:74:81:5e:76:
8a:e5:4e:fa:de:af:7c:af:7f:65:30:c9:2f:0d:f8:5b:76:c1:
82:ed:a4:86:13:24:17:6b:42:7e:17:30:3f:ea:30:28:bb:a1:
de:5d:8a:47:a3:65:bf:32:35:d8:7f:3a:c5:89:34:7d:97:f0:
7c:6d:5e:bc:5e:9e:e3:80:85:73:5b:86:d6:77:dc:c4:37:5e:
8a:40:32:58:c8:13:b2:af:b8:ad:3d:cc:65:37:e1:aa:9d:88:
1f:60:cf:f5:ec:51:f0:e7:71:19:dd:2f:03:cc:b8:35:ff:65:
80:f5:60:71:ad:58:cd:c7:0c:de:9b:66:33:23:f0:74:95:e7:
14:4f:e9:11:17:62:98:72:48:95:c9:71:3d:59:1e:96:d6:6e:
f1:4f:4f:a9:3e:ec:c2:53:54:76:fe:07:bd:8f:f5:bb:e5:ed:
2e:5c:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:12 2026 by rpki-client