
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier: Q4hE9JQ6ErvHynyHPjd9SoWi6heQ3eiaVbXLsiFUYBY=
Subject key identifier: 72:42:95:31:37:F9:43:8F:92:81:10:07:CE:F6:72:B7:08:93:B6:23
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial: 1E8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number: 1E7F
Signing time: Mon 28 Sep 2026 16:05:46 +0000
Manifest this update: Mon 28 Sep 2026 16:05:45 +0000
Manifest next update: Mon 05 Oct 2026 16:05:45 +0000
Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: CVNNSC4RG58g+NyCVFK4hehR+/ASLk0/q0rtcXIa1uA=)
2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7821 (0x1e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Validity
Not Before: Sep 28 16:05:45 2026 GMT
Not After : Oct 5 16:05:45 2026 GMT
Subject: CN=6aba905a-5298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:4a:fc:af:20:ff:23:04:87:94:72:fc:27:
6c:7a:aa:cb:98:28:ed:60:62:13:2a:37:79:ca:94:
97:55:74:47:6b:25:8e:9c:aa:f3:9e:80:f3:1c:42:
d8:1b:39:fb:43:eb:b0:14:cb:17:1e:e7:54:ca:ab:
81:1f:89:31:a9:0c:80:16:4f:70:a4:de:a8:cd:2a:
ff:d0:f6:55:77:7b:c1:97:a7:7d:84:9e:b8:8e:f5:
5e:ca:67:97:2b:d4:40:88:b8:ee:1c:30:b9:61:f5:
6b:04:09:73:59:c6:e9:c5:95:dd:44:12:83:87:49:
f2:e2:fa:cb:e0:d4:f4:b8:ac:20:3c:c3:1a:b1:47:
78:fa:0a:3e:fd:9b:df:5c:7a:6a:93:3d:3a:59:b7:
54:bf:87:05:07:f9:81:88:0a:3a:09:2e:83:9e:f6:
f0:a5:7d:1c:9e:8a:81:3c:93:2e:bc:d7:5f:26:c3:
c8:2c:40:a3:31:29:cf:b9:f3:2f:9b:d4:5e:95:ad:
c7:e0:49:bb:1a:c2:1f:60:fe:ce:51:f9:67:32:64:
e7:3f:3e:98:3c:89:e5:45:ae:4a:1d:15:4e:11:7b:
27:f7:7f:cd:cd:d7:ae:48:65:91:d2:d5:af:f8:25:
a2:b2:7a:53:a2:d4:87:91:37:a9:87:25:b7:a6:82:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:95:31:37:F9:43:8F:92:81:10:07:CE:F6:72:B7:08:93:B6:23
X509v3 Authority Key Identifier:
keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4e:c6:b0:6f:b5:ab:3f:a4:c0:19:a8:74:07:72:5b:3a:e7:
98:d6:66:c9:31:6c:2a:36:02:8f:e7:ec:2e:93:c1:50:12:ff:
94:ad:5b:a0:d3:85:b9:c7:45:d9:a4:da:29:7e:43:5e:a0:56:
c6:94:6f:97:00:be:55:be:58:9a:e0:5b:37:37:db:fd:50:ee:
8c:d0:ba:d1:15:2f:71:7e:cf:2a:e9:40:b5:23:96:35:7a:a4:
bd:a0:9b:e6:97:19:a0:2f:e4:97:9b:ba:8e:26:56:46:0c:c1:
c5:31:35:d1:1b:50:8b:a4:2e:0b:5e:86:03:11:18:0e:23:8a:
e9:37:7a:1a:63:29:44:ef:9e:69:a2:a9:f8:52:e2:72:be:de:
2f:e5:b8:ea:d4:ab:87:b8:67:06:6c:a5:46:b6:35:b4:06:12:
4c:4c:01:3e:cc:d1:e3:66:29:bc:c3:55:6e:c5:23:c4:fa:98:
1e:2b:63:e5:01:29:ed:a3:72:1b:54:59:06:77:ff:2c:e6:44:
c5:68:42:0f:b7:99:76:0a:db:52:45:19:b2:d2:83:7d:f4:44:
ed:2d:da:75:03:f8:28:c2:be:24:a5:0a:09:3f:1b:cb:77:a4:
be:95:16:a8:e5:bd:56:3f:92:3b:60:7e:81:a9:ba:40:ee:da:
a8:47:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:23:08 2026 by rpki-client