
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier: rOKFknhtWMbFlmsGIfMCxXsY5mEtWL25RXRnHZcyybc=
Subject key identifier: 6A:37:E6:83:B7:9F:03:9C:D3:D5:B5:F7:84:46:5F:49:CE:39:D9:8B
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 2098
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number: 2039
Signing time: Sat 12 Sep 2026 15:56:58 +0000
Manifest this update: Sat 12 Sep 2026 15:56:57 +0000
Manifest next update: Sat 19 Sep 2026 15:56:57 +0000
Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: V9cMv4qduPich0vBDJf9VBhH6mIP/XbK1PbYRyCPMEk=)
2: B6uB0uLFo5kCYXHSVGA76mH8H9I.asa (hash: 0eEwtHlDTp8oTQdpYlosgQpn7/bbRaaZ4LW9p58Em2g=)
3: YzA9ZVsqvw1-8XWmtPk4xT91c4w.asa (hash: b5KuP1dyVMqyI8BVVHz6+QkOSV1b34yUsC+RPMa5M0Q=)
4: QddJQ9AU1DejB9kWQxSe_-RAcwk.asa (hash: MNzb7V3axwNjOOorQnNwsquV2ScuC0xOrQ5fGHkrViU=)
5: E4AEC0ACA75F11F19F6EA77F3611F970.roa (hash: jAX/VFWI/LGqcl+oM9q5+Phgjxnh7/enJfNQUBHHpkI=)
6: BC6CE974A76011F19E77BBC67BEE528E.roa (hash: WBg74k3aA0swlePdFjLpH7JHUBKooZ7R34qJXjEBIwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 15:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8344 (0x2098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: Sep 12 15:56:57 2026 GMT
Not After : Sep 19 15:56:57 2026 GMT
Subject: CN=6aa57649-7486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:66:f9:45:27:74:85:e7:a3:6d:41:07:fd:
fc:cc:31:99:de:5f:2b:8b:2c:06:77:88:ce:23:a1:
4b:3c:46:ff:e5:81:a1:61:07:2a:0f:31:21:92:82:
0d:56:e8:ad:20:ca:cc:95:86:44:89:f1:fc:77:d9:
71:90:51:68:e9:2b:91:3e:aa:b9:b9:11:09:51:b8:
39:25:37:11:77:ac:50:e1:ad:c7:e9:78:be:cb:09:
8f:91:41:94:10:51:c5:7c:55:5b:21:53:ed:93:c7:
95:8e:7c:45:d4:11:9d:60:27:0c:ea:5a:7f:0a:ee:
cb:4f:91:3e:3c:3b:2e:54:c4:9c:91:9a:4d:97:cb:
b2:5f:83:9b:71:69:80:95:a4:ca:7d:3d:6f:58:15:
54:30:7b:47:86:58:09:3a:1d:c5:56:ee:12:98:d9:
30:9d:f5:98:23:01:e4:2b:88:53:f8:48:a1:45:9b:
c6:35:83:25:30:c5:0e:89:0b:d3:ff:95:02:6d:a4:
ca:aa:23:26:80:f3:fb:ce:44:4e:c8:7b:31:b5:28:
31:35:8d:b1:f4:76:57:0a:44:7c:82:fd:df:a6:d5:
24:b7:e9:1d:ee:02:09:e6:74:a1:78:17:e2:db:02:
6a:60:76:00:b7:bc:e5:1c:9c:b6:6b:18:4e:9b:2f:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:E6:83:B7:9F:03:9C:D3:D5:B5:F7:84:46:5F:49:CE:39:D9:8B
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:31:1c:df:99:d8:f5:2a:ea:0e:90:20:d0:df:d6:13:df:
78:ba:b6:53:fd:49:91:9b:dc:a9:96:24:78:27:8f:73:0c:60:
be:05:1b:d6:2b:c0:4f:39:b1:ef:df:ef:e9:9f:43:55:d0:f3:
03:72:59:40:d1:35:ae:fc:e6:bf:00:c5:dd:cd:f2:cb:ed:8b:
bb:bb:dc:30:ae:f1:a6:7e:69:c3:94:97:0e:52:03:57:ce:99:
4c:bc:7c:e2:d1:93:bf:c5:f6:6f:5a:66:15:6d:fd:ae:5e:d9:
20:be:ae:1f:3e:35:13:6c:87:08:a4:ac:d7:3b:0a:e4:3d:da:
52:03:dd:33:94:01:45:c3:d8:79:63:26:76:79:71:71:c4:05:
0c:49:65:33:1c:18:9c:54:76:ec:95:2c:a5:f8:9e:ac:5c:2e:
45:a2:c6:7d:48:41:b9:3a:11:83:6c:0d:79:b6:31:dc:32:28:
50:34:ed:e5:d0:cd:b4:bb:65:93:8b:44:b2:79:53:13:97:aa:
4e:cf:83:9f:69:35:da:68:98:66:92:45:68:c8:f1:80:f5:3e:
23:03:9f:6d:83:4d:8f:53:57:df:fe:dc:16:9a:62:a0:09:72:
23:aa:17:48:7e:14:d2:49:1e:a0:8c:3b:80:6a:7c:45:36:bd:
1d:85:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:21:05 2026 by rpki-client