
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier: gxAK73n2a3QGgCBWA01ODQvjHgYJRZn5AtLORISGfj4=
Subject key identifier: 2A:5C:09:E3:6E:28:4E:EC:DD:D2:EF:AB:29:B1:DE:B9:A4:41:5D:95
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 204B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number: 1FF7
Signing time: Wed 20 May 2026 15:59:55 +0000
Manifest this update: Wed 20 May 2026 15:59:54 +0000
Manifest next update: Wed 27 May 2026 15:59:54 +0000
Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: Z+smyQPVKjtSxXNupeBxYFgEoVhMrvBrd+V1gJGV4u0=)
2: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: j6Fn0yl9QruB/L8VIjM7Cvrv8dXDeLRII1Kg9BFfdqQ=)
3: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8267 (0x204b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: May 20 15:59:54 2026 GMT
Not After : May 27 15:59:54 2026 GMT
Subject: CN=6a0dda7a-29b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:c2:ef:9a:f3:04:ec:a5:4a:83:96:30:bc:
86:0e:09:53:81:ff:32:fc:3e:4b:d9:66:47:23:56:
b3:af:38:0c:19:e8:a3:56:6d:3f:3e:e5:ec:18:49:
95:a0:b8:2d:f9:e4:7d:20:1b:29:f4:67:0b:f4:eb:
00:ab:5c:a1:c7:94:03:09:f8:b0:84:32:7c:3e:4b:
2a:13:b8:8d:d2:4f:69:14:45:45:96:3b:81:53:71:
e6:62:76:83:9d:aa:83:72:72:b0:c2:65:8f:09:f3:
1f:0c:41:25:d5:97:98:5e:95:3e:5e:a4:28:01:ba:
4d:85:d7:0f:d9:a9:76:d5:74:fe:ac:94:a5:f4:38:
59:20:a8:46:7f:59:66:7f:2e:4d:7c:30:d2:52:fb:
65:7f:06:bc:69:52:35:b3:e0:5e:b1:dc:65:65:e3:
88:5f:73:9b:15:a2:be:22:e7:24:98:0e:4a:db:57:
fc:27:fd:e7:73:c6:97:27:a5:01:75:88:2b:05:1c:
42:5c:6c:5e:2e:17:80:89:02:0e:7c:6c:ac:80:d1:
e7:95:fc:0e:f0:c0:e3:cf:95:20:15:df:0a:bc:71:
8f:6d:6d:a5:1b:1e:0c:a2:82:94:48:73:89:ca:2c:
f1:22:12:f6:34:6e:20:1f:4d:d2:63:7c:2f:fc:59:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:09:E3:6E:28:4E:EC:DD:D2:EF:AB:29:B1:DE:B9:A4:41:5D:95
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:cd:e4:7a:79:9d:7d:67:a5:52:e8:7e:f0:90:de:5a:c0:58:
42:3d:0e:cc:9e:7d:4f:ac:80:34:f7:80:0e:cf:aa:1a:05:14:
3e:0b:5c:f8:0d:23:0b:a1:21:06:48:e5:ee:fd:35:79:d9:a1:
d2:f1:a0:f6:e0:44:7e:f3:e4:c9:f4:f2:9c:8c:14:b3:41:35:
37:48:f0:b3:bc:9c:fa:5d:cf:1f:a9:62:4f:3c:3e:ad:55:7b:
8c:eb:ae:53:9b:cd:11:57:30:20:69:cc:0f:0c:0d:0f:43:55:
9d:2d:57:36:10:58:a0:e7:a6:42:d1:18:5b:f7:7b:88:7e:ec:
35:cc:a4:88:5b:4a:45:97:65:a9:5a:f5:cf:23:6b:c5:ef:7b:
1d:12:b2:0f:a1:e2:5e:5a:be:d9:62:9d:fb:90:71:72:fa:46:
d2:35:b1:98:81:96:ee:ea:52:52:cf:4b:80:db:6f:6f:12:4c:
b7:7a:f6:c5:00:a4:10:d6:32:a4:f7:40:81:0b:bd:ac:c8:a3:
2e:32:25:2a:a4:f7:9a:fb:da:a0:5b:35:99:60:46:63:3b:de:
c4:28:f1:88:3f:45:cf:d9:20:e9:59:a6:4e:6f:c2:26:6e:d4:
53:4e:b1:38:c5:20:f4:62:c6:f6:65:5e:9f:dd:73:d5:2c:d0:
98:7a:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:04 2026 by rpki-client