
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier: z4dFDfwCXJUbMJoE2Gz38cCvMeo52mcAdyMvMPV3HA8=
Subject key identifier: 87:EC:A3:7E:CA:F6:48:2F:7B:AC:06:90:39:81:F9:DE:73:F7:B0:86
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number: C6
Signing time: Sun 05 Apr 2026 06:23:23 +0000
Manifest this update: Sun 05 Apr 2026 06:23:22 +0000
Manifest next update: Sun 12 Apr 2026 06:23:22 +0000
Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: im/H2mi/qFVBPkEM09K0bWCKmpsf30nA+2RQL42udCE=)
2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Apr 5 06:23:22 2026 GMT
Not After : Apr 12 06:23:22 2026 GMT
Subject: CN=69d1ffda-cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:ee:ed:50:9d:78:e7:b2:15:f0:93:11:50:
54:b5:b1:69:f5:4e:08:29:b8:92:dc:27:b5:4b:51:
e0:ac:7d:e0:0c:25:cb:7d:63:d5:53:87:35:0a:6b:
5c:61:a2:4e:72:b9:3c:98:e4:ec:51:9a:1d:6d:ac:
27:a2:bc:3a:b4:19:6f:0f:fe:77:e9:29:6e:33:85:
e0:12:61:ab:98:a3:f9:9a:27:61:41:1c:09:8b:f3:
80:53:26:9c:b9:f2:37:e6:05:db:f9:95:df:0d:a2:
72:a4:37:c5:04:28:4f:9a:05:97:aa:a9:38:08:aa:
ea:f2:a8:6d:dc:c1:c5:ee:59:f7:d3:af:9c:47:e9:
3b:5f:2f:a4:40:8c:18:51:7d:35:fa:e0:2f:5e:96:
4b:7c:fd:cf:5b:f1:e4:4e:8e:d0:e3:1d:db:1a:e5:
c4:51:cd:46:bf:d4:58:0a:9b:20:f7:7a:9c:eb:f1:
59:82:99:0c:ed:2d:6c:75:b9:16:8f:8e:9c:da:ac:
35:8e:a2:aa:18:98:d6:c9:6b:27:7c:6f:06:c2:1f:
c5:5d:be:0f:6d:da:d5:cf:e6:3a:bd:1d:81:c8:73:
2e:88:3d:93:1e:ae:1b:a0:8e:2f:92:77:95:f1:1c:
84:88:23:97:0d:87:d8:d4:de:2d:b1:c7:9b:69:bd:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:A3:7E:CA:F6:48:2F:7B:AC:06:90:39:81:F9:DE:73:F7:B0:86
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f2:91:9a:13:82:cb:1d:5d:91:98:23:19:84:89:e6:14:b1:
6c:3e:16:97:39:99:97:35:56:21:4d:0c:0c:7d:2f:f5:05:76:
18:48:45:26:b7:d1:a8:a3:80:31:ca:6c:ad:d4:7b:00:e9:7b:
ab:ec:1b:7b:7f:b2:61:ce:3a:26:f5:f7:26:bd:ca:9f:b9:e8:
e6:8a:03:d2:b0:d6:db:3b:ad:15:86:9e:35:05:1b:10:0e:7b:
5b:bb:d7:62:67:58:a8:97:1c:f9:14:0a:d8:3e:25:cd:2a:62:
ac:ea:eb:7d:98:dc:bc:6d:a4:8b:2f:b2:8a:f5:25:ba:ed:db:
98:7f:ed:80:d5:c5:f7:56:67:88:ea:0f:07:95:5b:34:33:a9:
a9:73:67:48:c0:e9:d7:21:ab:4a:2b:e0:e8:4d:78:54:12:62:
f7:97:9d:a4:2b:a1:10:a3:83:cf:32:0d:10:58:df:f1:3f:40:
eb:4b:0f:e0:f8:16:c2:9f:0e:46:91:51:88:5e:d6:a5:bf:a4:
bb:54:cc:f7:02:8f:fa:33:3e:be:19:a5:9f:dd:4b:ac:15:7b:
55:99:49:ca:63:f5:0d:51:fc:61:9b:ea:4d:89:54:39:63:20:
cc:28:90:31:b8:1b:a4:f5:c8:a1:db:4b:41:99:0c:91:48:3c:
f4:7f:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:24 2026 by rpki-client