
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json)
Hash identifier: 4iHRviZQ/W0/TKGIpdOkyqjZyTViajhNJ1g8cCl0BqM=
Subject key identifier: DF:14:6A:F6:DE:C3:54:2D:2A:16:0F:49:F4:2D:81:E9:27:68:35:CD
Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
Manifest number: 01A0
Signing time: Thu 21 May 2026 04:27:37 +0000
Manifest this update: Thu 21 May 2026 04:27:36 +0000
Manifest next update: Thu 28 May 2026 04:27:36 +0000
Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: l2VxEPh7ImTexD5pIWSezjYgVpjVNsgm5lFJlpucedo=)
2: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: rIc4xpour7cATeZsp1B1Ry8Mz3CLrgcG3IJVLB+LmQA=)
3: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: usejeAbfaCrnya4BmIxpNANwrvKrHGDPWrTfazFyZ+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl
rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Validity
Not Before: May 21 04:27:36 2026 GMT
Not After : May 28 04:27:36 2026 GMT
Subject: CN=6a0e89b9-5f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:e7:ce:3c:e3:ee:72:e1:5d:b4:5e:38:fc:
16:d1:45:ed:95:27:d4:25:50:75:bb:18:2f:a0:3d:
5f:94:07:c8:af:fc:59:bf:18:f5:a6:a2:cf:a9:c5:
a8:0b:cf:63:1e:2b:f7:8f:e7:d4:4f:81:5b:75:9a:
ed:68:19:b1:86:7f:93:a4:cb:5e:cb:9d:41:5c:7d:
0b:ec:17:7a:4c:74:5e:7a:9a:cd:00:00:0e:a0:1d:
23:80:54:3e:6d:2f:1f:93:83:ae:5f:d5:91:e3:68:
ae:ee:0d:40:16:28:55:71:6a:c3:f3:d2:12:62:ad:
b2:3b:99:d4:db:b3:32:a7:de:14:83:36:80:27:27:
e9:d8:bc:42:f4:bf:a0:eb:75:7f:21:92:1d:2e:05:
9f:e3:5f:bf:b8:b9:bf:2b:fb:a3:74:5e:15:16:42:
2f:c9:95:fb:0c:b3:4d:04:56:20:9b:5b:21:62:2a:
23:4e:b7:5e:cd:01:0f:05:45:12:4a:38:ca:64:65:
1d:27:11:b9:9c:fa:7e:47:bf:ec:b4:70:50:5d:91:
ad:1c:a1:85:61:1a:44:8e:34:ee:d1:6a:38:5c:72:
dd:49:63:aa:85:b0:05:99:2b:b4:be:44:97:3a:a5:
85:2d:c3:42:de:c5:64:c2:d0:94:29:31:f5:e5:71:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:6A:F6:DE:C3:54:2D:2A:16:0F:49:F4:2D:81:E9:27:68:35:CD
X509v3 Authority Key Identifier:
keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:d4:08:9f:41:c7:46:0b:ae:b8:dc:46:75:97:fe:dc:8b:
7e:41:cc:8a:dc:9a:fe:30:fd:a5:20:65:ae:2b:ed:cd:45:5d:
c8:3a:2f:b5:7b:9b:ff:d1:1d:ee:98:05:53:7e:28:ad:2f:ee:
e3:9c:1b:b0:f5:e4:e3:a4:fe:3e:98:f1:d5:cf:6b:07:87:30:
7a:95:5e:65:17:41:fc:fe:7d:09:1e:f9:e7:c0:94:d2:71:57:
f5:62:11:b1:24:35:d2:8c:89:5e:2d:ae:6e:c6:26:18:d0:53:
eb:35:00:8c:0e:0a:77:77:8d:98:78:2d:fc:88:6f:82:62:e2:
6c:36:11:c0:28:b3:d6:2e:a4:76:79:9d:4a:64:13:58:ad:80:
7e:f2:33:b1:7a:6e:61:4b:4e:05:63:40:35:f2:78:e8:f7:a0:
cb:86:f7:50:10:04:b2:d6:d4:1b:1e:ec:c1:cf:97:b8:76:7c:
30:35:eb:5b:28:d1:db:b1:28:33:4e:77:9d:f0:01:e7:c9:ed:
4f:a0:db:9e:cf:eb:6d:13:44:88:f0:08:e1:f3:15:01:ec:63:
3a:19:d9:a2:e1:29:57:1a:2f:71:0b:c6:b5:a8:5d:63:00:d5:
15:d8:74:f5:9e:25:d3:9f:74:0a:bd:3a:06:7c:09:07:a6:62:
b5:f3:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:37 2026 by rpki-client