
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
File: JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json)
Hash identifier: H1dZd94ehUvwL77D7dNOj5v4yt8Lij/0/Xv+TloVRK0=
Subject key identifier: 8B:27:6B:65:53:99:C9:8D:D7:79:77:F8:F1:6B:91:8C:70:88:38:10
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial: 0DD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
Manifest number: 0DA8
Signing time: Sun 20 Sep 2026 17:55:55 +0000
Manifest this update: Sun 20 Sep 2026 17:55:55 +0000
Manifest next update: Sun 27 Sep 2026 17:55:55 +0000
Files and hashes: 1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: qPpNTwz2IoqreUMZn4P+GSp8pUFYfdTPHZHgLXkQgyM=)
2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: 2j8ZEZZDC+v0AsplIrNRFX86JLUI1D1lZouNpF7eL1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Validity
Not Before: Sep 20 17:55:55 2026 GMT
Not After : Sep 27 17:55:55 2026 GMT
Subject: CN=6ab01e2b-92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:30:c0:ee:c8:ad:bf:75:f9:8f:2a:06:c1:
1f:f7:e2:a1:44:f6:1c:0a:c1:d3:86:96:10:ea:30:
22:ab:b9:2a:87:9e:7c:f7:9f:7c:31:36:5c:43:86:
08:c6:24:d7:3e:fe:c4:e6:bd:a5:c1:07:bb:4a:79:
92:2a:e9:1d:71:e6:a6:49:e9:76:8a:8b:f4:cc:b3:
25:ca:08:16:95:b4:0d:bb:a0:cc:a4:9e:d5:2d:1b:
92:4b:ac:90:7f:5c:70:30:89:3f:fe:80:b6:40:a6:
0a:5f:f1:5e:6b:0f:d9:26:d9:da:45:7e:77:0e:5f:
2a:29:4e:91:86:6d:05:29:fc:a1:4b:61:fc:8c:00:
21:19:d1:04:66:18:ba:d4:81:63:85:fc:3d:37:12:
cd:ff:d7:e7:13:01:1d:ab:5c:b5:27:5a:8e:f9:c5:
fb:0c:f6:f2:64:e3:03:91:d2:eb:42:65:41:dd:cf:
02:3d:24:72:7f:aa:02:10:ca:96:9d:b0:ba:4e:cc:
b8:c9:58:d6:fc:18:b2:12:84:df:7b:bc:a5:fe:95:
55:1c:e2:34:bf:ea:a4:cc:24:fd:fd:ac:71:a6:43:
18:54:77:c0:61:b1:28:6d:da:86:1d:84:f3:fa:5a:
19:a4:94:8b:47:5e:1b:09:a6:b7:13:f3:ac:fa:57:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:6B:65:53:99:C9:8D:D7:79:77:F8:F1:6B:91:8C:70:88:38:10
X509v3 Authority Key Identifier:
keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:11:f7:c2:ff:18:04:2b:09:d3:b1:5e:4e:e0:53:1e:40:a5:
d7:61:cf:f5:1c:63:0d:39:01:ff:c0:b3:4f:30:76:33:c2:45:
f7:23:f9:ca:65:22:13:ed:f1:05:9a:86:bf:41:aa:4e:7a:03:
10:96:5c:41:1d:b1:30:59:b2:63:53:55:d4:a3:79:74:b9:c6:
4a:39:26:48:5d:f2:66:25:d5:ea:7a:44:c0:24:8b:50:8e:70:
96:e4:7f:2a:64:f8:7c:23:34:ab:a7:d1:5a:f9:2a:30:f0:28:
c2:e1:53:6d:ad:a5:da:2e:a2:1a:18:03:39:f8:9b:da:c9:2a:
d5:1e:ef:f2:8c:45:46:80:3f:de:ca:92:2a:d2:9b:e0:13:5e:
08:35:22:b9:87:69:7e:06:e7:1b:45:e0:34:5c:43:a0:30:cf:
32:23:51:b3:f2:a1:dd:74:18:26:68:f6:f0:d6:99:8f:28:41:
56:cc:3f:6d:cc:97:fe:7a:58:14:49:43:d3:31:f3:6a:fb:e5:
c8:72:e5:3f:4d:cd:36:09:a0:56:b6:32:d4:1e:97:80:3a:00:
26:53:01:3e:4d:c6:49:ea:55:f2:38:84:74:7b:17:23:49:f3:
32:d8:d1:4d:15:64:b5:ab:c8:f2:75:a0:e5:0e:a6:2d:f4:86:
72:2f:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:39:07 2026 by rpki-client