
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: uKhko/sdLia3di5r+SGXkUsXGtrNVGecA/U6037UexY=
Subject key identifier: D3:6E:4F:3C:F7:3C:6F:DC:8B:1F:CA:E6:35:4E:BA:AF:59:B5:4A:4E
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0C57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0C4A
Signing time: Tue 18 Aug 2026 18:59:59 +0000
Manifest this update: Tue 18 Aug 2026 18:59:58 +0000
Manifest next update: Tue 25 Aug 2026 18:59:58 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: F/3gsZe1B3ZvqmqtVeUlDKcgptdHSeXd28MeKsY8pYU=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Aug 18 18:59:58 2026 GMT
Not After : Aug 25 18:59:58 2026 GMT
Subject: CN=6a84abaf-251a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:e1:69:81:d9:8c:40:a2:4e:df:e5:ee:e6:
d7:bc:d9:bb:fd:82:0e:d7:3c:0d:42:a7:dd:e6:54:
7c:50:98:5f:a2:97:36:95:48:66:78:87:b1:6e:30:
87:3a:82:9d:56:b2:57:06:7e:29:70:44:c0:21:dd:
ae:83:31:a8:2b:7e:3e:f2:78:1f:6f:4c:02:9c:74:
e3:7b:86:ce:8b:24:d1:01:be:62:c3:3a:63:53:88:
1e:c1:43:35:0d:a3:46:38:a7:3c:8b:84:f3:5a:8b:
40:21:76:d2:b3:df:fa:c6:21:15:67:d8:76:8a:28:
ec:ba:b8:e7:09:59:5b:ff:aa:87:d2:4b:6a:86:e4:
92:b0:f6:1a:01:1b:7c:24:33:e8:2b:8f:ac:e6:ca:
2f:86:f9:59:d2:40:12:c9:eb:51:d3:99:45:fe:ed:
98:54:66:b8:9a:9e:56:e7:d5:ff:6a:ee:40:97:86:
fe:44:62:f6:0e:20:4c:dc:eb:6f:02:fd:fd:01:7f:
68:4b:ae:b8:fd:e2:d6:0e:ab:c9:fb:d2:5f:b5:1a:
d4:24:ad:0f:80:b8:84:aa:8a:81:19:31:7e:9d:7d:
a4:d5:43:1c:15:1a:f1:3d:6b:da:86:4a:2f:96:33:
e9:7a:74:4d:84:84:99:ea:c1:11:a6:03:57:06:ae:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:4F:3C:F7:3C:6F:DC:8B:1F:CA:E6:35:4E:BA:AF:59:B5:4A:4E
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:63:5b:f7:4d:3f:85:e2:2b:93:e7:24:00:c5:b2:a9:5d:
30:c6:d3:25:ce:99:11:a0:26:38:e9:0e:49:a7:ad:fa:7f:e9:
5a:90:e6:45:c5:b6:00:78:01:4b:62:ae:0e:92:6d:57:e3:75:
40:f3:e6:d5:09:33:e8:e5:8f:f0:e1:1e:54:8a:56:08:3d:fb:
4b:7f:12:19:d9:11:8b:ac:0d:e1:a6:48:3c:03:5a:61:e6:7f:
34:02:64:8a:56:23:0a:4d:aa:e7:fd:20:d3:f3:11:91:62:b1:
c9:07:6a:5a:09:68:30:31:a9:6a:2a:6c:12:d4:a6:fd:0e:06:
65:ad:8e:3c:8e:8a:3a:67:8b:a4:33:ba:75:26:78:18:85:a6:
ac:cf:fc:a6:50:0c:2a:17:16:a5:c8:6b:7f:cc:c0:35:3e:a5:
ae:c3:ad:1b:31:20:b8:fc:87:57:d8:2f:38:f6:aa:73:04:6f:
ba:e2:af:d0:15:87:3f:5a:55:7a:74:d2:6b:92:be:23:fc:85:
de:12:75:95:fe:ca:c1:ed:06:af:cb:74:19:2e:91:58:3b:a8:
4b:2b:3c:ea:00:bf:d7:c0:93:e8:57:6b:25:72:39:15:33:4a:
f3:13:00:3a:6b:43:0c:1a:8c:c5:7d:6b:18:0c:06:4c:7b:23:
ba:a4:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:32:37 2026 by rpki-client