
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier: 8X0Ee96lcICfHdRuoDwfWgh08JHzj4165Uc9ibjTv6A=
Subject key identifier: 6C:D9:69:A8:99:FC:2E:58:06:BE:89:DE:36:2C:F9:47:F5:97:2D:3B
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number: CC
Signing time: Thu 21 May 2026 06:54:47 +0000
Manifest this update: Thu 21 May 2026 06:54:46 +0000
Manifest next update: Thu 28 May 2026 06:54:46 +0000
Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: J0+wcOvS2k18njrnQsSSx3P8nqkB8pKMzqrkUoXYVCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Validity
Not Before: May 21 06:54:46 2026 GMT
Not After : May 28 06:54:46 2026 GMT
Subject: CN=6a0eac37-465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:d6:4c:58:83:e4:47:3c:d0:8b:8f:e6:ac:
4d:ac:38:2a:b4:d6:71:c0:27:e9:f4:6c:55:d5:0a:
0e:40:b2:79:9f:37:59:90:af:6d:ac:2a:6f:6f:10:
ac:cd:36:c3:f0:f8:09:57:d5:4e:11:ca:d5:65:f1:
c2:9f:c5:d9:27:2c:a8:2d:d3:4e:40:87:07:65:ef:
2b:53:8a:1d:1c:f2:2f:e1:55:2b:c9:1a:7e:41:9e:
83:24:82:5a:fb:03:ab:15:c5:3e:c5:55:d4:08:f0:
41:9c:84:60:a2:47:01:32:b1:25:08:4f:07:b3:50:
13:92:47:17:76:38:b3:66:3f:97:8a:ef:bf:02:b0:
9f:50:58:80:e4:1c:f1:49:b6:5d:dd:ed:83:15:20:
08:74:7a:c8:7d:a6:2d:02:f0:b8:15:4a:94:30:5e:
f9:d0:b4:b4:3c:c1:cb:cd:74:8f:7c:de:bf:bf:28:
a2:cd:78:c1:35:86:fb:22:bc:fe:1b:91:98:4d:3c:
05:f2:8a:0d:80:71:04:c0:7f:9a:05:26:31:41:c2:
37:e1:ea:7f:68:7d:6f:ee:60:bf:48:88:53:21:3e:
8a:56:d7:45:74:20:d6:76:b2:7a:d7:da:5c:68:3e:
72:1a:3a:e5:0f:a7:85:7a:29:ba:ce:1f:19:a0:e6:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:69:A8:99:FC:2E:58:06:BE:89:DE:36:2C:F9:47:F5:97:2D:3B
X509v3 Authority Key Identifier:
keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6d:7c:99:ba:dc:e7:a8:df:b5:40:29:78:b0:6f:eb:ff:6a:
fe:5c:13:24:27:10:76:2c:15:96:01:18:fe:a6:a0:f0:66:2b:
d9:e0:66:3d:8b:87:a3:f3:17:16:66:9c:bc:2e:b5:9f:0f:2d:
38:15:9f:28:b9:3f:94:8b:ee:22:54:f0:db:ac:e5:71:95:ad:
a2:d1:70:53:37:22:0e:90:f3:a6:07:d7:11:de:82:27:4b:8d:
5a:32:84:9d:5d:82:f3:7c:84:80:82:a4:9d:9d:bf:16:f2:1a:
7b:c4:cb:fb:62:12:10:98:da:69:ab:bd:5a:2d:a9:f2:31:da:
13:e1:28:79:e9:f7:3a:46:e1:3b:83:ea:82:95:d0:5b:d4:6b:
00:39:47:fb:b0:1f:01:81:3b:c6:c3:9e:47:ef:78:56:92:8b:
2e:7e:ae:b9:65:a8:cc:71:e1:96:17:93:af:66:5a:36:b6:7f:
a8:a3:b1:af:44:07:47:5e:0b:c8:d5:3d:6c:fc:e0:cd:ab:f2:
72:be:c7:4c:17:24:19:26:9e:a6:e9:01:93:35:4c:9f:d5:ce:
c6:91:57:1c:79:65:5d:00:3f:f9:70:a9:53:5a:aa:1a:46:6e:
7d:57:f5:83:1a:ae:69:9f:4d:09:a1:6c:23:45:3f:46:9a:ce:
39:4f:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:50 2026 by rpki-client