
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier: G2mHfOEhMlgsdwSVZPU0JjcZjtvx4QPrGD+RxKs3uyg=
Subject key identifier: A6:98:76:AB:26:CC:69:08:57:98:AA:A8:7F:A7:84:8B:C9:27:20:54
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number: 9C
Signing time: Sun 11 Oct 2026 07:57:07 +0000
Manifest this update: Sun 11 Oct 2026 07:57:07 +0000
Manifest next update: Sun 18 Oct 2026 07:57:07 +0000
Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 81A49ko5e34OrG17v5laIHjSQ/DNe/8Hhk63SFVlOjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Validity
Not Before: Oct 11 07:57:07 2026 GMT
Not After : Oct 18 07:57:07 2026 GMT
Subject: CN=6acb4153-2caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:c7:b2:8f:d7:72:e0:3f:0e:c7:3b:f6:f5:
40:02:db:f5:32:01:49:23:72:ee:74:01:6c:1d:c5:
7c:b4:1c:56:b1:be:49:40:8b:4e:08:62:ff:af:ac:
8b:99:69:f8:9c:6b:22:2c:b1:f6:fc:72:81:ca:0b:
ab:9e:15:d8:29:90:42:ed:5b:1b:82:ef:3e:d7:67:
5a:34:b7:81:1a:7d:22:a9:1e:75:4c:3a:db:6d:13:
53:e3:43:58:f9:7c:84:4f:16:2a:62:a4:81:a5:7b:
03:aa:84:e4:8b:65:09:aa:02:67:0d:6f:f2:91:ed:
b9:6d:50:76:fe:e6:37:8d:2e:6a:ff:e9:a5:89:e5:
5d:06:db:75:d7:eb:23:85:71:62:b6:6c:31:06:1d:
1f:7f:eb:79:21:ee:35:2d:9d:8a:d0:56:f0:88:f8:
ec:25:4c:fb:a4:9a:cc:53:a1:5c:9d:59:fc:94:3e:
34:7b:6c:ab:51:18:67:34:1f:21:33:71:a8:05:8f:
91:1d:3f:de:2c:0f:ea:1c:5d:0f:ce:74:9f:ca:57:
f6:2b:c6:1e:f8:89:df:97:c8:52:bf:bb:32:81:0b:
d5:1b:01:54:f3:0b:44:03:63:01:b0:d4:53:7d:e0:
b9:86:71:7e:51:9d:dd:5b:aa:35:9b:4d:cd:4c:97:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:76:AB:26:CC:69:08:57:98:AA:A8:7F:A7:84:8B:C9:27:20:54
X509v3 Authority Key Identifier:
keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:a1:9d:1b:59:af:32:e7:5b:bf:c7:4c:f9:93:36:3f:2c:
6f:66:c0:a0:f8:40:56:0e:4f:42:f8:64:61:cf:0e:c9:e2:4f:
e6:24:ce:bf:09:92:12:4f:32:85:38:d1:39:c4:bc:6d:01:76:
8b:b6:64:94:f0:d6:de:bf:89:56:01:f4:7f:1d:94:ab:91:df:
e7:06:9c:c7:b2:43:98:ba:00:cc:44:5e:8c:09:fc:a2:c0:bd:
36:0b:ad:d0:fd:06:49:81:38:6b:97:70:12:95:7e:ff:47:26:
4f:cb:76:1f:d5:8e:12:d5:90:d0:1c:ea:ff:53:57:9b:93:e0:
5b:fa:1a:09:ab:34:d3:b9:22:dc:cc:8b:f1:9b:9d:1f:4f:d1:
6e:fe:58:31:7c:76:13:9b:30:0a:9f:05:55:17:0f:d5:cc:db:
d6:f6:21:8c:c4:09:2f:13:67:0a:8a:69:63:db:6a:b2:3e:7e:
b3:31:b7:f6:db:6a:67:38:1c:0f:e8:0c:2b:0c:54:38:b1:ff:
21:b8:90:7e:bd:ff:57:79:2e:fa:a9:cb:82:3a:70:0f:33:4a:
95:f8:00:8e:cf:57:de:d8:41:2a:5d:d5:3b:b4:9d:63:1a:f9:
6c:16:ed:a9:59:51:a0:db:d8:13:c9:60:65:a5:3d:6a:53:f0:
29:00:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:03:46 2026 by rpki-client