
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: zH4mjOeJPNu+IYzB2AxYro/3s3mLWwosh00LZWTpz9E=
Subject key identifier: 8F:4C:C5:61:41:8B:4E:5D:20:64:BB:73:A5:7D:E6:DF:DA:09:B8:14
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: E1
Signing time: Thu 27 Aug 2026 05:59:10 +0000
Manifest this update: Thu 27 Aug 2026 05:59:10 +0000
Manifest next update: Thu 03 Sep 2026 05:59:10 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: chLo8xmqoyaYVeqYUcAzhdnIcDuPOq+ThD9GUpnWu1o=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: Cd2qwheOZx/HlbYVbXM4iYSdKyaPgmnCfgXwff08PA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 05:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Aug 27 05:59:10 2026 GMT
Not After : Sep 3 05:59:10 2026 GMT
Subject: CN=6a8fd22e-97b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:f5:ba:88:3a:35:d1:64:af:dc:52:7b:4d:
f4:1a:21:5c:66:97:62:71:60:fe:a3:c2:a2:cd:c4:
bb:98:aa:51:01:ec:5b:99:29:84:bf:0c:e4:56:73:
a4:3f:16:88:3a:3c:8f:7e:3a:02:53:af:9e:16:f1:
31:f1:cd:1d:03:78:c8:a9:7a:a4:e1:3d:78:9e:08:
0d:ca:ca:17:63:46:66:b8:26:20:16:06:ce:af:ac:
fc:81:dc:3f:1f:5e:96:51:e4:b8:ef:99:4f:02:56:
c8:b8:c2:ce:23:b9:c3:e7:91:bf:be:75:b1:0b:ce:
b7:4b:93:53:c4:f3:33:b6:34:ad:95:e3:b2:25:a0:
50:85:b4:4e:fa:d1:95:db:56:71:41:91:5d:c5:ba:
4b:41:3a:ec:1b:fb:30:68:67:35:fd:d0:9a:02:94:
68:1b:50:69:67:d3:9d:36:e9:16:b8:5d:23:23:a5:
48:11:6d:01:90:5c:93:62:31:57:00:85:ef:4e:76:
d8:f8:cf:ad:09:f9:35:28:49:9e:aa:87:4b:2a:91:
21:a5:cd:ff:a1:d9:8b:b9:ec:b1:61:7e:2d:a1:74:
95:13:3f:4c:7a:6d:44:46:ae:9e:ae:d0:05:74:04:
91:10:16:40:34:10:5f:fc:9b:57:43:f2:c7:74:28:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:C5:61:41:8B:4E:5D:20:64:BB:73:A5:7D:E6:DF:DA:09:B8:14
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:95:f1:95:3e:47:f0:92:4a:52:ec:2f:49:a9:89:b1:91:
60:b5:d8:aa:da:6c:bb:76:82:12:07:5b:72:73:6c:48:fa:fb:
43:1d:e2:fc:c3:96:0d:3d:64:5e:bc:fc:8d:58:f3:35:af:d9:
85:04:30:e1:10:6c:31:20:0f:ae:66:28:f3:9e:1b:6c:a5:8b:
39:55:19:57:f3:a8:b2:9d:59:90:c9:eb:72:8c:8a:b8:7f:16:
8b:4b:3c:8d:c5:7f:8f:70:07:51:dd:02:ba:6f:ed:2e:7a:3c:
7e:a6:69:0d:f8:00:94:d2:45:84:50:2a:fb:7c:29:37:e2:cc:
d9:5b:97:83:11:b5:03:20:c9:d4:63:4a:6a:f0:2a:00:2d:ee:
a0:3e:d5:9c:c8:e1:e1:88:79:ac:8a:82:18:2e:41:81:06:e6:
90:85:31:cc:e5:b5:20:16:7b:ef:43:08:62:79:d8:c5:0c:24:
39:63:09:01:f6:0c:85:f8:72:a0:4f:50:ae:33:28:9c:66:6d:
0e:f9:e2:0d:f8:9d:a4:7c:b9:d2:1a:1d:42:f6:c6:80:84:c8:
69:7f:0b:80:8d:13:41:58:33:59:1e:5b:69:68:64:cc:dd:63:
e0:c2:e6:40:41:fe:fb:10:35:54:41:8f:ca:37:a2:f1:87:39:
21:b6:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:46:39 2026 by rpki-client