
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier: vnnt1Y84KVbkf1Mle6q3yd8eTcPx+whTC/uQHHV/sHE=
Subject key identifier: 1D:DF:1D:3C:26:6B:AB:5D:1A:A1:C9:95:65:DC:BF:40:7E:AF:1E:B9
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number: 02B4
Signing time: Thu 11 Jun 2026 03:40:44 +0000
Manifest this update: Thu 11 Jun 2026 03:40:44 +0000
Manifest next update: Thu 18 Jun 2026 03:40:44 +0000
Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: RERzGGpBsfYgftEa8h3+G0o0Tn2GtwhNrgiJENTZjM0=)
2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
3: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
4: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Validity
Not Before: Jun 11 03:40:44 2026 GMT
Not After : Jun 18 03:40:44 2026 GMT
Subject: CN=6a2a2e3c-ea4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:cc:53:56:09:00:39:fe:2c:fa:73:80:a9:
e9:9d:a5:30:c6:83:44:83:11:6a:a2:90:f1:12:52:
87:1e:c5:96:0d:f4:ff:3d:df:d3:09:6a:21:60:48:
02:ed:3a:0f:b2:71:16:64:fc:57:34:f1:97:38:a6:
7a:9b:d9:15:b3:13:70:da:bb:e3:c9:4b:4a:ba:4b:
3a:a7:bc:70:d9:3e:c4:f9:0c:32:cc:c7:06:80:c3:
e2:d6:48:d5:6f:16:55:08:fb:7f:85:81:1e:ab:88:
b1:68:11:67:7a:df:0f:72:09:d7:70:b6:68:98:a7:
2f:af:b6:d6:e8:6f:14:4c:9c:5c:29:9c:17:73:7c:
53:e5:4d:62:83:6a:bc:bc:35:b0:c5:e5:f9:7b:b9:
ac:a6:e6:28:f4:a2:f3:b3:04:e8:09:89:37:ef:9f:
c5:e6:66:15:7f:07:98:13:f2:3b:aa:6a:30:ea:46:
60:e7:8c:02:8c:2a:d0:e1:31:cf:28:d4:51:13:f6:
c0:52:22:e8:44:f2:80:8b:89:54:53:6a:3d:ad:29:
cc:39:74:e8:17:eb:f5:77:43:30:53:bb:26:f2:11:
0b:fe:5b:26:61:75:ff:fd:4f:bc:a0:ab:7f:3d:f5:
79:a7:c0:82:bd:9f:62:69:82:3f:ae:d8:99:f5:73:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:1D:3C:26:6B:AB:5D:1A:A1:C9:95:65:DC:BF:40:7E:AF:1E:B9
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:d3:18:7c:77:20:80:4d:38:01:c8:15:90:ed:a4:bf:47:
d4:c3:2d:88:b9:81:40:ff:8b:00:60:68:8b:3c:cb:54:9f:74:
c9:8f:66:a3:43:31:63:13:ca:9d:cf:87:5e:be:1e:43:e9:a4:
c5:6e:01:2d:8d:50:12:e0:48:4b:c2:fe:53:06:b1:59:1f:54:
6e:8e:26:8a:b9:a6:32:f8:0f:81:f4:fa:c5:b5:f2:20:8f:ad:
64:80:38:b2:6a:cf:7e:9a:12:3b:19:62:97:05:6d:d1:56:b0:
06:f4:aa:ac:7f:60:8c:3e:93:9a:6c:96:eb:c6:38:e2:46:f1:
23:8c:85:5b:5a:a4:2d:df:f6:73:cd:a3:88:d6:af:b9:1f:46:
d3:07:21:1c:ce:74:0a:4a:1f:db:0e:7b:7f:f0:df:a1:b2:9d:
e6:81:0b:79:53:b7:75:bb:e9:66:92:73:46:5e:3f:10:f5:42:
96:4c:1f:a5:b5:ea:dc:b1:d1:c5:38:ce:91:5c:2b:47:dc:5c:
a8:09:17:f1:46:0d:ba:6e:22:df:a8:f4:bc:6d:c4:f9:e5:a0:
49:d0:bd:01:03:a9:fb:4a:7b:c2:52:bf:14:f2:99:dc:a1:fa:
f0:c5:01:e1:39:d8:26:05:b2:37:9f:2a:5a:be:c5:a3:5d:23:
d3:7f:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:28 2026 by rpki-client