
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier: Yc0F2stR1mVAplEezqHKtilxJb9sRRi6rgJGBEEHmEk=
Subject key identifier: 6E:77:9B:D3:61:15:0B:97:18:6D:AF:E8:34:D0:2C:C5:76:09:AE:4E
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number: 04CC
Signing time: Sat 20 Jun 2026 23:50:12 +0000
Manifest this update: Sat 20 Jun 2026 23:50:12 +0000
Manifest next update: Sat 27 Jun 2026 23:50:12 +0000
Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: MgxoTCNPaxlCRTkgOJoX+1EFYF4Q9U4gS9ymoDa4xBA=)
2: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=)
3: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=)
4: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 23:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Validity
Not Before: Jun 20 23:50:12 2026 GMT
Not After : Jun 27 23:50:12 2026 GMT
Subject: CN=6a372734-0852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:95:b1:60:8f:37:39:13:07:9d:d7:6c:30:
e5:ec:65:c1:87:5c:69:23:83:42:7a:29:4a:6f:ca:
24:d0:db:9f:dc:4d:c0:00:d7:20:26:83:9a:3d:04:
6c:71:fc:11:a7:df:6e:40:98:67:02:cc:e0:27:2f:
85:e5:94:c7:82:b1:9d:b2:c1:fd:42:99:3d:bc:01:
d0:32:28:53:12:50:e7:c6:8a:de:01:79:a2:1d:74:
a2:f0:48:49:a3:67:bf:d0:7c:55:e4:e8:97:1d:0b:
1e:5d:12:e8:d5:41:2f:e2:df:46:01:ad:51:5e:99:
35:ce:40:f8:3b:85:14:f4:4a:53:25:a3:27:f6:2f:
d8:68:eb:73:96:51:40:db:a0:c2:67:02:53:35:2e:
92:5e:26:e5:98:d7:99:88:57:1b:19:e4:99:8c:58:
d8:0b:94:16:3d:9c:b1:38:e0:77:a8:ec:76:1e:75:
5b:38:fd:a2:46:ca:e6:79:e0:42:5c:24:e3:de:92:
3d:50:bd:98:d8:3e:d7:11:76:9b:f4:9f:d7:7e:02:
2a:ca:1b:e4:60:57:ff:23:f8:e6:c9:8b:60:7a:b8:
49:6f:4b:d0:e5:94:f1:b1:b7:82:8c:c7:3d:46:84:
a4:76:26:9f:7a:9d:f6:0f:fc:d8:c6:69:1d:ba:50:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:9B:D3:61:15:0B:97:18:6D:AF:E8:34:D0:2C:C5:76:09:AE:4E
X509v3 Authority Key Identifier:
keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:09:88:85:b2:2a:e8:32:97:4e:7d:b8:e2:34:7b:c7:5a:
17:9b:9a:fb:b2:05:53:64:20:f0:6a:99:1e:41:6a:df:58:3b:
99:61:aa:73:ff:fe:52:4d:43:22:ef:8a:1c:d9:55:59:c5:3e:
a0:15:74:12:01:cd:31:cf:e9:45:a5:1f:72:11:fb:0f:7d:32:
1a:97:08:93:29:a2:03:d1:86:a2:6c:01:99:d6:e0:4e:66:0a:
04:54:12:bb:c0:f3:08:db:06:2f:3f:0b:40:de:9d:46:f1:33:
b9:f6:de:ca:eb:99:cb:e5:ad:af:a7:3b:8b:42:e5:a0:1b:af:
14:91:c0:55:4d:e1:af:d4:4a:85:a3:4d:b4:69:4c:d9:bf:e7:
24:c0:d3:d0:05:60:2a:89:7b:a4:7d:d4:53:48:5c:ee:71:26:
3a:14:28:fb:1f:6a:43:a0:a3:c0:0b:81:c8:84:79:c8:d6:c3:
88:eb:0c:ec:3f:7b:82:9f:4c:dd:cd:5a:ba:94:2a:99:5d:b8:
78:4e:c5:e0:54:99:e7:ce:e9:66:8a:e9:9d:24:f1:e4:45:d6:
f1:41:b6:db:b5:81:be:fe:ba:ec:68:69:08:52:91:29:94:46:
df:65:50:fb:db:b2:c0:0c:8d:5b:f9:aa:b3:bb:5f:4d:80:07:
89:41:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:39:14 2026 by rpki-client