
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json)
Hash identifier: oiVQ0aYtEG/vM7G7uxe7l7lV6lMJz4dAWXV3TBZvPRA=
Subject key identifier: CD:D6:84:2E:86:D3:65:61:4D:3E:EF:F7:2C:62:1C:C3:E0:56:EB:4C
Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Certificate serial: 0938
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
Manifest number: 0931
Signing time: Wed 20 May 2026 20:14:10 +0000
Manifest this update: Wed 20 May 2026 20:14:10 +0000
Manifest next update: Wed 27 May 2026 20:14:10 +0000
Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: AJ0V/fMuTUNi1+awE53PQq6UzsBpViE2F8YNbdFeWPs=)
2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: XsfyCgy8g5kHLYmZ6IEzpkYjqKuCoWEp9cV6g7rlqWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Validity
Not Before: May 20 20:14:10 2026 GMT
Not After : May 27 20:14:10 2026 GMT
Subject: CN=6a0e1612-aeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:cf:0f:8d:11:94:ca:31:1e:2c:88:3a:21:
85:7e:81:e4:62:a1:f6:dd:ae:f5:67:c6:55:40:80:
14:36:84:7c:f8:32:3d:67:9f:f3:9b:03:05:40:75:
3e:13:a9:c2:12:3f:99:b6:5f:c5:98:3f:69:09:f7:
de:b1:51:01:bf:ff:d9:ec:d4:e4:73:73:50:54:40:
1b:90:2c:f5:b4:86:4b:97:bb:c3:71:0d:95:be:c5:
3e:3a:1a:d1:47:04:ff:dc:28:c1:e1:13:53:fa:60:
0e:c2:37:b8:87:c0:15:20:12:c2:c3:79:49:32:5e:
86:db:95:b9:5d:00:ce:4f:63:a1:16:72:13:1f:16:
83:e2:ed:4d:71:81:73:39:a8:3f:20:a8:8f:3a:7f:
fa:86:61:2e:a3:c0:c9:36:e1:65:18:33:5d:c0:a0:
be:a2:ff:cc:64:cf:97:f7:81:67:8b:8e:69:82:8e:
71:4d:ea:af:88:8e:4d:61:68:f7:d0:12:60:cb:7d:
18:3d:ea:50:5d:eb:2d:58:c9:7c:cf:37:44:ff:f5:
f9:18:14:4a:df:ee:d5:ef:18:ea:6a:27:cf:76:1d:
3a:8d:c4:20:32:05:d3:e4:19:5d:bb:c1:c3:f3:5e:
14:e0:cc:bc:9f:7d:cd:83:7f:bf:0b:c9:e6:21:ce:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:84:2E:86:D3:65:61:4D:3E:EF:F7:2C:62:1C:C3:E0:56:EB:4C
X509v3 Authority Key Identifier:
keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ab:94:ad:f2:e6:1d:57:ff:ca:74:68:2a:52:7d:47:18:3a:
b9:a1:51:0b:db:40:58:f7:4c:7d:eb:a8:5a:ef:fd:b3:80:ea:
d3:37:b0:ad:f0:29:a3:45:64:06:6b:99:c8:4d:b6:fb:de:36:
cd:51:b5:70:a2:78:96:03:dd:52:f7:4b:96:c1:c3:9c:fd:f8:
b4:c1:aa:d5:1d:13:10:03:f1:67:90:8a:47:81:27:6f:66:65:
2a:82:22:02:3b:b1:ea:67:dc:c0:ca:ba:d5:b0:5f:2d:b1:81:
22:d9:8f:53:51:8c:42:af:dd:f6:9f:dd:3e:ae:55:2a:5b:49:
6e:f7:50:17:93:7c:b6:72:65:0c:41:93:ae:84:16:b5:d8:2f:
1a:cf:12:32:82:c7:22:c4:c5:61:47:8b:de:0c:27:de:5b:47:
74:24:92:10:e3:d1:60:a0:0d:40:7b:cd:7d:ab:ea:26:7e:12:
43:3f:75:33:d0:bf:80:ee:90:53:1e:39:08:8e:1e:a0:39:6e:
8c:fb:8e:94:69:2d:3d:be:06:1d:51:1a:00:3a:51:9c:df:9c:
09:03:78:70:d3:26:8b:e9:10:c7:90:27:e0:9c:61:44:fe:e0:
a6:bb:e7:bd:1f:73:bf:dc:79:7e:72:35:88:25:89:e4:6d:06:
89:24:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:54 2026 by rpki-client