
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: K8Q1818dwU+zMqJEFE685OvMyw5rV0teUdu7PJ7E9MM=
Subject key identifier: 48:9F:62:12:D6:20:EE:B7:75:AD:98:1B:19:BC:69:9F:EF:39:A0:75
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 0A12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 09FC
Signing time: Tue 04 Aug 2026 20:04:59 +0000
Manifest this update: Tue 04 Aug 2026 20:04:58 +0000
Manifest next update: Tue 11 Aug 2026 20:04:58 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: 8jbdbMOQVBaAVxoebbAeOAg+8aCaA4lzo4LuK89XnRw=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 20:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: Aug 4 20:04:58 2026 GMT
Not After : Aug 11 20:04:58 2026 GMT
Subject: CN=6a7245eb-fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:9a:a6:d2:9d:61:4c:99:5c:5a:d2:28:2d:
d2:1e:da:f6:99:2d:3a:c5:ae:92:9e:ae:15:b7:b5:
92:dd:2c:db:45:38:0a:2a:06:7e:50:19:ac:88:42:
68:e9:a0:7a:aa:f8:b8:ad:7b:32:72:6a:5c:02:42:
db:66:9a:49:3a:51:ff:ce:36:d6:77:71:38:dc:dc:
2f:82:2c:31:3d:51:39:5d:a7:c4:51:b8:67:9e:81:
d8:b1:7a:d8:8e:e0:12:28:77:1c:7b:2e:d5:2e:a0:
49:da:d8:0d:c5:d3:59:63:75:37:a6:ad:7b:c8:8c:
6c:31:9b:60:ac:aa:a2:2d:85:88:d1:14:b7:2c:7c:
d6:aa:5c:ef:38:ff:62:74:9e:73:f4:7b:45:bb:28:
a0:e8:fd:7f:8a:77:13:60:66:10:f6:92:fd:3c:85:
4b:fe:fc:71:ef:76:98:f1:2a:27:79:07:b9:29:e0:
0c:33:01:eb:9a:86:00:2d:51:5b:04:3f:dc:e6:ae:
78:ed:9d:96:59:5c:92:6d:52:d4:7e:00:a6:9e:2d:
7a:e9:ab:8f:1f:09:b1:8e:bf:a4:b9:04:fc:69:30:
5d:c2:29:00:f1:33:46:29:80:39:3c:22:86:03:8f:
3b:3f:f9:65:ee:b0:5d:d5:9c:e4:29:54:dd:bb:1d:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:62:12:D6:20:EE:B7:75:AD:98:1B:19:BC:69:9F:EF:39:A0:75
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:82:9a:b7:6c:2a:4b:53:4f:dd:31:89:3b:99:d2:6e:dc:
55:9d:95:66:b9:0e:1b:a4:c0:c1:35:95:8f:dc:8c:58:7b:5e:
db:7a:45:91:e0:70:db:35:5d:98:30:7c:7e:43:d4:c1:54:d9:
81:92:e5:1a:fc:52:0d:9e:61:9c:3e:0e:a4:57:95:54:11:22:
79:1c:c3:74:10:4d:42:17:0e:aa:b9:d6:01:a5:40:18:0b:c3:
44:d2:f1:14:6e:70:c2:02:02:59:22:41:3d:9e:fe:92:bf:6f:
e9:20:ab:c9:3b:8c:89:d6:2a:03:67:bd:5b:88:7c:ef:94:d3:
a3:f1:ca:74:ba:81:cb:86:55:b4:53:2e:e9:e9:ba:a4:5f:5c:
9b:8b:21:bd:7a:ac:ee:cf:ce:3c:2e:bc:9d:6a:11:37:ea:68:
1f:c5:9c:61:1c:b0:9a:37:d2:99:b6:c7:f2:5b:5a:74:c4:35:
01:ab:0f:06:a9:2f:0a:1a:47:95:62:f6:dd:23:29:c2:2e:93:
fe:a4:21:f1:97:2d:05:6c:68:25:43:de:b8:ff:8b:82:b6:4e:
58:5a:5d:c9:be:5a:0e:97:53:27:56:d1:e4:90:c7:3a:17:d6:
bf:2e:ef:34:fb:72:d1:8b:89:eb:c4:0b:29:21:14:ca:5c:3b:
39:fe:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:44:51 2026 by rpki-client