
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: RuwnaX+ChHUGdzNL8EpYBGiJ7YL5sYRoNcb+2SRSi7g=
Subject key identifier: 4F:A3:9F:23:FE:E9:3B:7A:53:76:BF:CB:22:21:32:6F:33:98:FB:C9
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: 014A
Signing time: Wed 19 Aug 2026 06:09:33 +0000
Manifest this update: Wed 19 Aug 2026 06:09:32 +0000
Manifest next update: Wed 26 Aug 2026 06:09:32 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: pozaIhr73R1h8UQl7ouBwBAIqPUY26PEl5O2G+3L0U4=)
2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Aug 19 06:09:32 2026 GMT
Not After : Aug 26 06:09:32 2026 GMT
Subject: CN=6a85489d-76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:15:ec:b6:0d:58:2d:ef:fd:29:fa:b3:80:
60:86:9a:50:e7:97:5d:39:3e:fd:cb:78:a8:c4:1d:
bd:33:51:c0:56:73:42:a1:10:57:c9:ba:60:e4:12:
80:e3:a5:69:7d:29:61:8d:5c:47:83:84:d1:79:2f:
65:81:bb:a4:47:59:9d:2e:e4:a3:80:44:d7:ed:94:
a7:31:7c:5f:6f:c8:d9:ce:d6:25:6d:48:c7:89:7f:
70:bd:1d:4f:49:56:ae:ff:85:cd:49:49:cf:14:30:
4f:78:bc:c5:7e:16:9e:0e:94:08:c2:47:92:a3:40:
8e:e3:60:c3:8f:ab:a4:05:11:2d:42:f2:24:92:f8:
3c:7c:8d:c3:83:95:2c:3e:3f:3e:a4:40:32:37:19:
60:83:ff:1b:82:d0:d2:51:5f:41:96:e0:bd:e7:de:
e1:e3:5e:e5:33:20:30:85:f6:5e:c6:aa:71:c2:c2:
af:fa:01:7f:68:d8:6d:d2:0c:95:d6:c9:bf:d7:5f:
7d:1e:b4:4b:cc:19:87:51:dd:83:59:87:03:81:44:
85:b7:3f:c3:e0:80:cc:06:4c:06:6c:f1:54:1f:9f:
a1:fa:36:7e:ad:e2:01:e3:ef:21:6c:33:71:bf:a5:
62:da:ab:aa:12:84:fe:a2:3f:d9:e3:b5:a8:50:9c:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:9F:23:FE:E9:3B:7A:53:76:BF:CB:22:21:32:6F:33:98:FB:C9
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:89:13:82:92:c0:56:23:cb:9b:58:75:0f:5f:1f:d4:80:d6:
9a:7d:c3:7d:53:22:44:1b:8c:f7:80:dd:b1:97:dc:84:24:6f:
cb:93:d3:13:6b:c6:06:ce:54:b0:3f:fd:c0:dc:f3:a7:d3:36:
87:9c:19:6a:7b:83:3b:d6:92:42:53:4a:d7:9b:06:fc:d9:f0:
8d:a7:aa:7c:45:db:6e:83:85:69:b2:ff:3e:c6:56:80:40:3f:
87:9a:b0:c0:a7:4b:a4:15:ac:6b:a9:90:b9:30:bf:89:46:98:
64:cf:c2:9b:e9:42:37:3d:b6:b3:cb:90:cb:84:0f:e4:af:f6:
f7:d7:93:c5:3e:da:33:54:84:d7:9f:1b:65:70:52:ac:ed:a9:
50:7e:60:e7:00:1a:23:92:0f:4b:9f:78:e1:da:e2:17:0a:38:
21:17:e5:aa:61:c3:43:6c:fe:61:dd:ab:7b:8d:2e:c4:64:2e:
f7:bc:ba:14:68:6d:7f:b7:e3:f5:35:86:79:d7:cd:e7:45:01:
5e:88:d6:95:e1:bd:43:ec:9a:6f:0c:37:1c:a8:89:1d:ae:21:
35:63:0d:6e:80:86:7f:71:a1:36:1a:19:13:18:b6:4b:ac:49:
14:25:a1:9a:6a:f4:5c:f2:d8:60:93:6a:56:67:15:00:cc:2a:
66:e4:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:48 2026 by rpki-client