
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: rp5SeZnvYTn8ygc8SDZ9PoyT06VqgvQlfhSoTRLk6Lg=
Subject key identifier: 22:38:49:96:90:CF:BC:62:1E:A5:9A:09:6F:CD:5A:0B:DD:91:5C:2A
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 06A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 0692
Signing time: Fri 16 Oct 2026 22:42:52 +0000
Manifest this update: Fri 16 Oct 2026 22:42:52 +0000
Manifest next update: Fri 23 Oct 2026 22:42:52 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: aAhUZ4cV3NvBJ/OfRSTVAI6b3pLkLMyV+PNF9bDQ+So=)
2: 4D0C006C76C611F194A7C5D875A30FBC.roa (hash: aw+wjqTvXBV1XIeL4o+TSL3pjvhQFfAu+VBJTX/VGdg=)
3: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: Rnz7YdmM/dFUbfVZUB1hF2F9t7TaIkBVLBwLs6I5YcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 22:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697 (0x6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Oct 16 22:42:52 2026 GMT
Not After : Oct 23 22:42:52 2026 GMT
Subject: CN=6ad2a86c-e488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:87:0c:d7:da:71:a9:4e:c0:37:2a:0b:c4:
5c:4a:fe:76:9a:66:d8:a0:9d:ef:55:36:5d:20:95:
e7:66:28:bc:04:4e:5b:ee:7e:a4:76:02:f3:ab:0c:
81:fb:25:2c:4d:58:2e:f3:d6:92:58:fe:b2:f5:35:
48:eb:e9:78:2d:e7:64:34:b8:a2:d4:0e:5a:f1:7e:
d7:25:a1:7e:45:5a:7e:f5:e8:67:e9:ce:51:40:19:
7a:b6:a8:a1:e4:b3:90:4a:28:a8:26:4c:a4:b3:05:
d7:e0:48:74:7b:cd:f8:7b:47:5f:19:53:22:fb:f9:
f0:67:6a:5f:6d:63:17:b7:ec:74:87:f9:f7:63:e3:
ad:5e:3a:c2:90:f5:20:d8:6e:3e:72:7f:12:da:c8:
08:b4:68:4a:ea:af:b6:91:b2:d1:24:81:43:8e:8b:
9a:03:c1:42:e4:40:70:76:ff:45:65:9f:0d:12:a0:
39:ba:7a:fc:a7:8f:a8:a0:4e:cf:63:da:9d:fd:30:
98:17:94:40:da:f9:e5:82:dd:ef:7b:60:ec:5f:54:
3e:09:1d:24:51:13:7a:9b:0d:3b:c3:90:6d:b3:6e:
05:bb:12:71:94:75:ee:b3:98:75:ee:c7:a3:8f:31:
42:ab:9a:73:7c:83:ef:fc:66:9c:2e:f3:28:d9:91:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:49:96:90:CF:BC:62:1E:A5:9A:09:6F:CD:5A:0B:DD:91:5C:2A
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:51:f3:cc:b4:2c:0b:32:80:93:bd:39:9c:cc:34:82:25:4c:
aa:0d:80:b0:f4:e6:5d:5c:f3:c7:b2:65:cb:aa:10:55:da:cf:
a8:81:2b:05:8e:03:85:15:87:3d:04:c9:cd:2e:49:5d:d1:57:
5d:cc:7d:8c:92:3c:db:60:0d:db:6f:4a:64:ed:0c:f6:2e:53:
7b:e3:85:91:2f:42:a7:60:97:b2:c6:9d:62:9d:70:70:47:63:
3d:0b:b6:eb:43:4e:09:da:31:f6:77:e6:d8:47:2f:e6:91:ff:
91:52:1b:6b:29:90:c3:8c:ef:32:1d:4e:29:95:2f:32:40:d6:
9c:a5:12:fb:6e:8b:26:83:d1:c9:02:77:61:c9:79:a0:0c:9d:
fb:18:87:37:3a:ab:21:bb:7d:87:07:7f:7a:b7:da:eb:b1:48:
c3:eb:2f:68:3c:32:e1:49:64:7e:e7:d8:c1:a5:97:77:74:a6:
90:22:2a:85:4c:e1:f0:f4:4a:04:7c:31:32:56:57:45:01:81:
24:c8:a2:70:ea:f0:cf:51:59:23:4e:9c:c8:9f:fb:43:17:46:
21:d6:de:8a:2c:ea:94:72:b7:71:29:1e:8d:16:8f:42:c4:42:
2d:44:b1:be:ed:3e:fe:fb:d8:07:0f:4b:0b:2a:19:ef:2f:15:
86:14:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:24:28 2026 by rpki-client