
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File: ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier: JNK+hEHx49wPQ4q4uZe1SeWIL3ranjNyxenLMjMpCp4=
Subject key identifier: 5C:06:FA:5D:1D:54:E1:AF:87:5F:40:13:92:67:B3:37:31:F8:90:4E
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer: /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number: 52
Signing time: Fri 03 Jul 2026 09:12:15 +0000
Manifest this update: Fri 03 Jul 2026 09:12:15 +0000
Manifest next update: Fri 10 Jul 2026 09:12:15 +0000
Files and hashes: 1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: HvSiNAjOBEilR/jwjTrJD+xFOJ+3H1Hi2WLLjJ07k94=)
2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 09:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Validity
Not Before: Jul 3 09:12:15 2026 GMT
Not After : Jul 10 09:12:15 2026 GMT
Subject: CN=6a477cef-96dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:77:e6:ec:94:c8:b1:70:14:9e:65:95:6d:
c3:d2:99:85:c0:24:85:f5:27:40:7b:46:78:50:25:
69:19:ab:34:e5:69:d0:db:d7:61:2e:e8:53:9e:b2:
09:d9:3e:a6:56:f4:5c:b8:d9:ec:4c:0d:83:1e:af:
25:28:ec:0b:95:e7:72:2e:37:0e:ee:ac:79:df:c2:
94:0a:14:46:55:02:8b:f8:3e:49:18:da:40:39:f8:
5b:0d:9a:99:c6:f2:d8:11:b7:92:00:9d:af:f0:cb:
6b:3f:3b:c5:09:8f:fa:fd:b6:9d:59:fc:c6:bf:a8:
08:9f:c2:bd:46:d1:89:f8:c4:15:c0:c6:f0:9d:f6:
e1:49:e9:e0:79:76:50:40:91:14:61:d2:d7:e7:ea:
9a:3b:ce:84:a2:28:e2:8c:38:40:a2:f3:1a:c4:11:
af:ab:c5:c5:97:33:4a:5f:70:a5:7a:80:a5:99:76:
8d:4f:08:06:d4:37:72:91:a8:0f:db:f6:59:0c:81:
98:5b:71:1b:b8:2e:41:f7:74:34:f0:68:2a:77:59:
c8:33:df:ba:14:78:f8:47:ac:11:d3:56:db:e5:57:
a2:be:70:59:e2:b1:7e:70:91:f2:d0:8b:80:53:3e:
ce:a3:20:8e:7e:21:b5:b6:be:7d:a4:7d:db:35:09:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:06:FA:5D:1D:54:E1:AF:87:5F:40:13:92:67:B3:37:31:F8:90:4E
X509v3 Authority Key Identifier:
keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:67:4f:a9:d0:ca:c8:bd:c3:66:66:dd:bb:b6:61:8c:84:
bf:cf:bf:c8:5a:85:e5:6f:a4:43:44:c9:4d:35:4a:a8:e3:64:
9f:bc:87:74:52:c9:20:9e:10:90:93:01:db:00:d8:ba:04:eb:
ce:18:13:f7:3d:fa:8e:76:08:6f:d9:43:54:30:17:7b:22:4f:
67:86:ee:56:e3:52:cf:ff:9f:43:ce:a1:d7:0d:df:c6:68:cd:
74:c9:84:7b:d8:50:69:08:fa:ec:41:2e:60:73:77:a3:75:80:
be:04:e6:e2:25:e9:c9:4d:8e:2b:61:79:43:46:98:ae:36:31:
e3:c3:3c:3a:dc:c8:0c:db:f9:24:91:3c:dc:5a:f0:db:7a:8a:
17:a0:97:fb:eb:c0:1b:60:37:d5:6d:8b:68:6b:3d:8f:b0:75:
0e:28:95:90:df:6f:7d:f3:ef:8b:88:44:25:d0:fa:e2:b5:d5:
ba:0c:b5:ce:09:eb:cc:68:c8:77:32:85:58:b8:2a:40:76:81:
55:9c:b1:20:af:5c:1e:ec:81:05:d9:bf:c8:cc:67:5b:1b:bc:
a7:dc:fb:00:9c:39:d2:cc:d9:15:f7:67:c8:ad:9d:14:5c:06:
15:b5:d1:c3:1b:c8:8f:56:35:b1:a6:6a:e0:32:3a:a6:6d:ff:
c7:b5:95:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MUJFNTExMC8GA1UEBRMoOEVFRDc2OTg0RjIzMUFBMkM3MEYyOTgyMzc4REM2OURE
ODNENTg1QzAeFw0yNjA3MDMwOTEyMTVaFw0yNjA3MTAwOTEyMTVaMBgxFjAUBgNV
BAMTDTZhNDc3Y2VmLTk2ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz2Xfm7JTIsXAUnmWVbcPSmYXAJIX1J0B7RnhQJWkZqzTladDb12Eu6FOesgnZ
PqZW9Fy42exMDYMeryUo7AuV53IuNw7urHnfwpQKFEZVAov4PkkY2kA5+FsNmpnG
8tgRt5IAna/wy2s/O8UJj/r9tp1Z/Ma/qAifwr1G0Yn4xBXAxvCd9uFJ6eB5dlBA
kRRh0tfn6po7zoSiKOKMOECi8xrEEa+rxcWXM0pfcKV6gKWZdo1PCAbUN3KRqA/b
9lkMgZhbcRu4LkH3dDTwaCp3Wcgz37oUePhHrBHTVtvlV6K+cFnisX5wkfLQi4BT
Ps6jII5+IbW2vn2kfds1CWAJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXAb6XR1U
4a+HX0ATkmezNzH4kE4wHwYDVR0jBBgwFoAUju12mE8jGqLHDymCN43Gndg9WFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxQkU1LzNFRTc3RTZFMDAx
ODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanUxMm1FOGpHcUxIRHltQ040M0duZGc5V0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
QkU1LzNFRTc3RTZFMDAxODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FM
SER5bUNONDNHbmRnOVdGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBufWdPqdDKyL3DZmbdu7ZhjIS/z7/IWoXlb6RDRMlNNUqo42SfvId0UskgnhCQ
kwHbANi6BOvOGBP3PfqOdghv2UNUMBd7Ik9nhu5W41LP/59DzqHXDd/GaM10yYR7
2FBpCPrsQS5gc3ejdYC+BObiJenJTY4rYXlDRpiuNjHjwzw63MgM2/kkkTzcWvDb
eooXoJf768AbYDfVbYtoaz2PsHUOKJWQ32998++LiEQl0PritdW6DLXOCevMaMh3
MoVYuCpAdoFVnLEgr1we7IEF2b/IzGdbG7yn3PsAnDnSzNkV92fIrZ0UXAYVtdHD
G8iPVjWxpmrgMjqmbf/HtZVv
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:33 2026 by rpki-client