
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier: Me/Ryow+3M7DREPOxlJBj7gPlV35zRn9phNiMfTe5TA=
Subject key identifier: 13:BA:82:30:83:B0:1A:2A:D4:26:30:6E:16:6B:2A:6F:BA:4E:B1:08
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial: 0D75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number: 0D6A
Signing time: Wed 28 Oct 2026 18:08:20 +0000
Manifest this update: Wed 28 Oct 2026 18:08:20 +0000
Manifest next update: Wed 04 Nov 2026 18:08:20 +0000
Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: 0WMyEgeiFOPdIngRW+WSDoDmH7XUbgMX1qYhRELCdvg=)
2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: RiwHeRk8VWcBAazIYgTzPI1hQB18IPCOX+XKmTtPU4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 18:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3445 (0xd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Validity
Not Before: Oct 28 18:08:20 2026 GMT
Not After : Nov 4 18:08:20 2026 GMT
Subject: CN=6ae23a14-8131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:36:d2:75:4a:90:77:0b:02:0b:28:0c:6f:
39:45:c9:ef:6f:c3:21:85:af:df:52:4e:3f:46:a1:
94:b2:da:f7:73:12:eb:91:b5:68:4b:2c:85:09:21:
c1:56:ec:78:9b:ef:97:e8:b5:27:d0:d2:2c:4e:2e:
b7:b0:0f:ef:f0:4e:3a:5d:01:e3:f8:67:bf:7c:dd:
2a:d6:dc:2d:92:c4:c4:3d:83:04:0d:6d:af:ac:9e:
5b:9a:f7:d3:6a:6e:60:b9:21:89:0a:98:3b:f4:0b:
35:3f:f8:e7:bf:38:9b:2b:6f:03:02:10:ad:13:fa:
d4:e0:52:85:cd:b4:7b:bf:26:de:cc:37:81:6d:32:
e0:8c:57:20:64:f3:82:2d:b2:aa:17:ae:bf:4f:db:
8d:7e:f1:79:fa:10:a7:53:dd:31:ba:b9:53:39:6d:
50:ad:57:8d:e9:6d:5c:6a:08:4b:14:77:43:0d:b1:
9e:b6:c3:08:67:52:d4:08:1d:4d:a3:d6:3d:a8:a8:
80:52:49:a0:20:d6:0e:2e:5c:53:97:11:97:65:61:
ce:e4:d4:1d:d2:22:32:62:6c:48:88:eb:1b:47:31:
59:95:d9:0c:5b:fc:7b:21:cc:82:d9:6e:8c:5b:f4:
11:b0:97:6f:c6:c3:cd:70:e6:d3:6c:34:5b:59:35:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:82:30:83:B0:1A:2A:D4:26:30:6E:16:6B:2A:6F:BA:4E:B1:08
X509v3 Authority Key Identifier:
keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a6:99:bc:1f:9c:bc:e2:15:19:e3:ce:24:6b:28:d9:c7:2f:
0e:51:53:40:db:01:1e:56:76:94:65:15:0b:b0:9c:78:3f:1e:
9d:f6:e2:05:58:81:f2:c1:88:57:a6:24:2d:7e:83:26:e2:7b:
58:fc:ea:28:79:71:07:70:ae:1d:e4:1d:da:73:7d:13:83:82:
44:c7:b7:cc:fa:52:07:d7:6f:42:4e:e9:19:55:16:2b:76:c9:
bb:6b:0c:1f:7b:08:b1:3d:8e:2e:39:1f:81:01:4a:7b:71:27:
17:1f:a6:81:51:a5:9d:d1:4d:17:63:0f:83:2d:4c:af:54:fb:
fa:8f:0b:1b:55:24:b8:52:4a:82:ac:38:f7:f6:6a:fe:c6:03:
d3:78:3b:92:48:8e:fd:b5:d3:06:4c:74:43:84:9d:95:88:77:
bc:61:1c:81:41:6d:73:e9:5d:4e:c3:91:52:05:c0:61:87:6c:
6b:f6:95:e4:62:7f:d4:98:e0:e9:14:2f:66:48:e4:8e:4f:71:
19:9c:99:7f:01:12:5a:6e:8f:c1:e2:dc:7d:8d:4f:04:02:16:
e5:e6:2b:cf:e5:1c:84:49:02:38:45:68:ab:fe:31:31:b0:a2:
d2:48:42:a9:8a:91:09:ae:8c:21:6c:00:b3:64:5c:c7:78:d4:
ca:91:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:20:39 2026 by rpki-client