
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier: F1AYJwAtV25EmUuELHBx32+OM4xgiWRRJjkxXvkjHVA=
Subject key identifier: DD:69:0E:93:5B:DA:A9:25:16:22:3D:2D:AD:B8:5F:FF:78:88:C4:8D
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0EFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number: 0ECC
Signing time: Thu 22 Oct 2026 17:17:30 +0000
Manifest this update: Thu 22 Oct 2026 17:17:29 +0000
Manifest next update: Thu 29 Oct 2026 17:17:29 +0000
Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: MzQXnFssgq6jwKv7kdCJVXt1Ws3dDlYlJBpw6Wmbt3Q=)
2: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=)
3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: yXwdOd72bbovK/lF6Uti3upvDyZiu0XdcxdU6SGbEWE=)
4: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: FZBTRmN4jNtPYjIkOHiUIokPiCQDNfx5hxg3M5I9k0s=)
5: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: JaUMO42d058IElCDiIbG4Rs0tOfpVC1kruVkh0dRo+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 17:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Oct 22 17:17:29 2026 GMT
Not After : Oct 29 17:17:29 2026 GMT
Subject: CN=6ada4529-9b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:5a:38:cf:a2:f8:c2:a8:f4:e7:cb:fd:53:
f6:1c:57:70:39:b9:66:d7:31:8b:cc:44:63:0d:f3:
88:82:44:d3:0c:5b:bb:4f:d4:1b:21:cf:75:63:3d:
23:23:9f:05:59:55:e0:47:75:6f:33:97:96:fc:a3:
a6:d7:97:01:87:16:00:00:a4:6e:e9:6f:05:80:da:
fb:a2:49:9f:5b:17:c9:a7:43:01:49:7e:69:a5:56:
2d:73:cc:60:45:eb:d6:e1:fd:b6:2b:d9:bd:6b:72:
e2:c7:bd:a9:57:de:3b:14:8f:c8:c9:27:7e:2a:d1:
c1:64:38:58:20:5a:1f:cc:54:e4:9b:54:6e:88:12:
ab:94:06:c5:90:8a:a4:49:09:99:9e:a1:e0:af:32:
9a:dc:46:59:94:fe:37:61:bd:3a:f7:55:b6:cf:08:
34:0f:55:ea:ea:72:88:49:18:b5:77:a3:52:52:1c:
2d:b7:2d:f6:2a:11:72:97:03:b7:77:e3:9d:4c:46:
60:3b:f0:54:98:aa:93:e1:65:be:f8:ec:54:64:d9:
3e:e6:03:65:2a:7f:8f:a6:a4:24:a6:85:12:66:3d:
cb:7b:10:ab:3c:4c:f6:bd:8b:61:e9:56:d0:e9:73:
ad:a9:9c:c3:7d:e6:c4:8e:7e:23:c5:32:0b:51:39:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:0E:93:5B:DA:A9:25:16:22:3D:2D:AD:B8:5F:FF:78:88:C4:8D
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:98:6e:51:60:6d:4c:eb:06:5a:e4:1c:78:23:78:d2:dc:ad:
fa:a5:71:44:5a:46:60:55:56:b3:a0:d2:e0:7a:70:da:ae:ae:
3d:ec:7e:65:b5:7c:71:dd:f7:c1:1b:5f:c9:50:61:40:01:46:
3a:1b:17:fc:26:36:4b:41:80:0d:04:02:0e:dd:f8:90:9f:8e:
51:9d:4d:7f:59:cd:9e:80:87:4e:9d:7f:b2:e2:4c:3e:78:35:
39:a6:52:62:35:79:39:80:85:17:87:16:8c:9f:95:05:44:05:
e3:8e:f6:13:89:05:bc:19:ea:17:fe:79:50:3a:84:87:6f:36:
e3:0b:57:b3:a0:47:ba:77:4c:8d:e4:05:17:cf:9e:64:ea:40:
5d:f0:1c:f6:f6:3b:6f:1c:67:cc:fc:80:38:f1:df:11:4c:2d:
b0:a4:e7:cd:c8:b7:97:be:eb:61:7b:22:79:20:60:7c:c0:7e:
1c:02:08:8d:fe:ac:6d:31:16:41:7a:89:49:54:6a:9b:c5:8a:
8a:07:1c:52:79:fe:49:75:29:f9:e1:a5:ac:12:6c:80:24:d8:
f6:a3:c0:f4:22:b3:6f:f4:81:d1:75:0f:5e:25:cf:05:59:e0:
d9:1a:8a:82:64:be:28:d6:8c:04:c7:ad:e0:7d:1b:c3:03:53:
78:8f:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:44:52 2026 by rpki-client