
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier: nJHPVRcrBhCvatg45GZo9sk+thdgd81T37cSf0ooq14=
Subject key identifier: AD:8C:96:1A:92:04:43:86:8C:90:74:5F:26:A3:2F:39:31:5D:65:FA
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number: 0847
Signing time: Mon 20 Jul 2026 21:38:20 +0000
Manifest this update: Mon 20 Jul 2026 21:38:19 +0000
Manifest next update: Mon 27 Jul 2026 21:38:19 +0000
Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: V95Twe9r/K5vTYhxKgUB+Bk6DPmojXHYgK7a0yWum5I=)
2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=)
3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=)
4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=)
5: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: Jul 20 21:38:19 2026 GMT
Not After : Jul 27 21:38:19 2026 GMT
Subject: CN=6a5e954b-47e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:ea:a3:c7:00:44:9e:2e:cf:da:19:0b:17:
f0:76:6a:e6:bd:94:5d:9d:f5:fc:26:33:a1:31:1c:
e9:fc:35:6d:22:81:46:28:fa:62:1e:64:09:33:0b:
27:1e:00:05:5f:a4:c5:ed:db:9e:2a:6e:f5:cf:e9:
66:49:13:9a:94:9f:2a:6c:47:07:7e:b2:65:a2:4b:
4f:56:6c:ba:d8:db:9e:50:9f:e0:c7:29:1b:be:90:
8f:36:f9:a3:ba:bd:76:b7:42:cb:62:61:88:bb:fb:
b7:e3:bb:c1:af:b2:d8:87:99:ab:99:d5:e4:01:95:
d4:06:be:23:f1:0c:a6:f3:af:db:ad:8c:1b:f9:3b:
22:86:e4:8c:60:58:71:7b:ac:e3:12:7c:39:91:0c:
2f:be:31:1a:d5:a3:c0:5f:0c:05:3d:63:b7:c4:f8:
7c:91:68:8d:e9:26:f1:74:a3:03:e9:5c:d3:cf:f3:
a7:20:ad:d5:0e:82:28:56:14:3a:67:b0:28:af:09:
ae:fe:f6:c6:f2:71:bf:8e:41:de:2f:c9:7a:73:0a:
90:97:4c:8d:4e:4f:83:3f:00:fb:9c:a5:40:45:4c:
58:3b:8f:97:ff:fc:8a:35:42:78:2e:62:08:b8:e6:
4c:46:a6:f6:58:df:11:f1:29:52:33:f1:82:93:a5:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:96:1A:92:04:43:86:8C:90:74:5F:26:A3:2F:39:31:5D:65:FA
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:f2:8d:06:91:e4:7a:62:3e:cb:f5:f1:3f:1d:74:87:02:
78:85:b5:7f:6f:3b:a4:bc:d9:a3:b4:ca:97:d9:b2:11:9c:fb:
e6:41:82:15:d4:a7:06:bd:cd:59:ba:7b:40:27:36:ae:39:92:
c4:a0:40:b1:67:84:f8:bc:55:52:22:1f:6f:d3:6b:6a:1e:c3:
66:98:aa:d5:60:a7:1c:0f:b7:24:25:ee:06:1d:f1:b6:67:49:
7f:21:68:ac:15:21:ff:86:d5:97:e3:35:93:06:5c:1c:fc:c3:
c0:a3:9d:54:e7:b6:53:e7:d9:43:8e:ab:7d:9f:72:46:0f:6e:
93:5e:5d:98:e9:eb:f0:07:2a:51:12:33:d7:40:25:6f:66:16:
38:25:7b:72:41:50:1b:d5:60:62:df:8f:f3:62:f0:25:2f:88:
ee:50:78:da:da:57:da:63:50:4d:23:10:83:8d:18:de:94:7d:
b9:ea:41:5e:f0:35:19:68:23:bb:18:37:73:29:09:6f:1d:40:
75:7f:13:53:aa:8e:64:83:f6:83:93:48:79:0d:d2:51:70:d1:
16:bc:4a:3f:28:3e:98:57:a5:54:b4:26:6e:d0:2b:fa:3e:f4:
42:14:7f:48:c3:99:f9:f2:4e:6d:db:5e:8b:40:ae:fc:e3:eb:
4d:b8:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:39 2026 by rpki-client