
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: 376/jIJGF+JGhz+WMXACti0H5BHOn5ksQdRrk5Zs20E=
Subject key identifier: 11:DE:DA:8D:10:F6:2F:A8:13:06:CC:CC:BA:2C:DB:B3:EE:65:47:AE
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1DED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1DDC
Signing time: Wed 20 May 2026 16:05:48 +0000
Manifest this update: Wed 20 May 2026 16:05:48 +0000
Manifest next update: Wed 27 May 2026 16:05:48 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: x9/dSZCZLxOiB3RapmKBI7AJ+uoTTfoYq70MGfdUnjM=)
2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7661 (0x1ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: May 20 16:05:48 2026 GMT
Not After : May 27 16:05:48 2026 GMT
Subject: CN=6a0ddbdc-82c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:23:8d:ba:05:15:d3:40:ca:99:47:f5:8b:
8a:fa:71:92:76:c0:ad:e7:44:9c:e1:81:0e:79:58:
d8:9c:6a:ef:11:bf:35:ca:8c:c0:4d:91:a8:88:c2:
77:c9:9f:1c:63:f2:5d:f9:79:86:9d:d9:96:6d:d8:
3b:4a:7f:e4:74:bf:86:c2:be:ea:3f:57:a6:b8:2b:
cb:09:9d:2f:e8:2b:f6:cb:d1:cd:fe:74:05:86:2c:
60:04:55:26:aa:d2:e9:71:5b:5e:20:14:42:bc:36:
a6:f8:5b:b9:c2:2e:b9:8e:53:c6:93:68:f5:27:ab:
bc:a9:8e:57:fb:36:78:4d:c6:d8:5b:95:09:4b:16:
9a:d5:5a:f2:dd:80:76:57:00:46:ae:fc:36:c3:54:
9f:cf:7f:0d:ce:85:c4:04:1b:db:af:80:de:b7:5c:
72:2c:3e:7e:66:c1:8d:fc:03:14:34:58:59:f8:91:
cb:1f:bb:68:17:34:5e:f2:b4:76:f8:b3:41:ef:dc:
84:e4:54:34:01:c9:97:0c:74:34:9a:0a:dd:e3:ec:
81:0e:b8:35:ea:da:e1:36:7b:cc:d8:3d:d5:6d:2e:
f4:00:c2:4e:8b:91:07:03:00:d6:62:ee:aa:ff:9c:
98:a8:ad:85:47:04:f5:95:e0:50:c6:0d:ac:02:9b:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:DA:8D:10:F6:2F:A8:13:06:CC:CC:BA:2C:DB:B3:EE:65:47:AE
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:79:af:2c:65:ec:1a:40:50:19:81:e5:50:dd:91:48:94:e6:
6e:60:a2:0e:da:b8:40:0b:d3:7e:72:29:8a:37:f2:0f:dd:1f:
d2:b2:cf:4a:36:b7:f8:d2:62:4b:2c:bc:90:ba:1c:9b:14:25:
e5:6e:49:00:8f:78:41:ac:c8:9b:a1:5d:fe:6e:dd:ff:d7:16:
80:d6:16:2e:f9:79:d0:9a:57:eb:59:cc:1f:6f:d5:f1:ef:b5:
82:86:95:bb:b9:39:ec:10:27:0f:a9:e0:87:e9:36:3d:90:2c:
6d:d0:75:d0:80:e6:bb:fd:54:bf:36:1f:03:12:28:78:93:d3:
61:84:25:59:00:0a:90:c7:f0:6e:54:d2:b9:2b:8c:08:8a:a0:
02:75:f8:f1:97:45:36:81:92:61:05:b4:89:17:61:2d:81:30:
c2:d9:7c:5f:cc:e9:dd:60:19:80:de:4f:5f:1e:dc:53:a8:1e:
7b:e6:3a:41:4c:a5:c9:b1:d4:5c:06:af:98:2d:0b:a4:39:cf:
d9:02:38:d0:a0:39:80:09:58:c5:df:63:e0:c2:54:8b:fb:60:
3d:cc:19:c7:33:5d:2d:8d:86:8a:d7:e9:88:80:fe:a2:af:16:
fa:4c:09:d9:6c:fb:3e:3a:d5:29:5b:61:75:d0:13:8e:73:64:
b5:85:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:08 2026 by rpki-client