
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json)
Hash identifier: HH7pl5Kr7CNDjl2oap+A0HlxP9v3xE6T9odH9td5ntg=
Subject key identifier: A2:2B:05:7C:DA:0C:06:68:13:C1:66:FB:BD:FC:D3:EE:7C:A0:CA:F2
Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
Manifest number: 01FA
Signing time: Mon 21 Sep 2026 03:18:35 +0000
Manifest this update: Mon 21 Sep 2026 03:18:34 +0000
Manifest next update: Mon 28 Sep 2026 03:18:34 +0000
Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: bE92NH2ENSGlvr2HNzii4OsD5g9DlJdMV2ZiDWx79jY=)
2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: EbaHzYxJkhS/e/mhIStkM2ixlMOj0eIXkmV/72ibVUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7
Validity
Not Before: Sep 21 03:18:34 2026 GMT
Not After : Sep 28 03:18:34 2026 GMT
Subject: CN=6ab0a20a-1cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:4d:34:40:9a:21:f1:8e:5b:93:ec:69:cd:
b4:41:0d:49:30:69:97:cd:58:ea:0a:c8:82:3e:91:
7d:c5:3f:47:02:68:b8:21:f2:67:35:b8:9c:e1:42:
3c:a8:09:7a:fc:60:0d:3f:53:a4:cb:62:8c:7e:50:
8e:30:c0:df:96:34:84:84:54:a7:d6:67:11:76:ec:
84:67:cc:3f:bf:03:43:ae:46:1c:a5:2f:39:e5:9c:
03:3d:67:39:19:4b:40:ad:e8:3f:ee:34:d4:a7:27:
c6:04:34:43:e9:8c:49:7b:2a:7d:15:04:b2:e4:40:
01:61:be:43:21:01:d0:2a:e1:51:6f:07:0d:85:c1:
51:fe:58:6b:59:65:38:fa:1f:dd:42:6f:74:c4:aa:
32:94:f5:41:bf:50:58:62:f6:aa:08:fc:6b:2e:2c:
02:06:54:a8:9d:58:d6:44:01:34:61:8c:a8:31:e7:
6f:75:12:99:79:31:9e:ab:ac:5d:3c:78:a8:ab:13:
85:54:c3:0d:71:b8:d8:51:cf:4f:a0:e1:32:58:48:
95:bd:fc:d9:60:23:a3:31:ed:ec:be:7a:5b:8c:c4:
2e:79:54:cf:54:fc:5f:15:ca:e6:80:72:08:4f:e3:
cd:dc:9f:9c:08:7f:fb:ef:3d:58:d7:d8:a5:b4:1d:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:05:7C:DA:0C:06:68:13:C1:66:FB:BD:FC:D3:EE:7C:A0:CA:F2
X509v3 Authority Key Identifier:
keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:2e:de:a6:45:db:d4:86:94:71:13:4a:cd:97:02:c5:26:
52:e4:71:0f:f4:a5:01:31:99:12:f2:be:60:61:07:59:89:8a:
f2:b3:96:73:0c:ac:88:c5:b3:cc:84:48:f8:3a:ee:df:21:59:
a0:c0:d5:f8:c7:cc:fc:25:c9:88:4f:54:c4:7e:22:d2:36:e9:
d0:ff:57:41:c4:49:f1:2b:dd:59:8c:25:b8:3e:58:56:12:64:
b0:5f:cb:3e:d7:c7:de:61:e0:3c:21:a6:3d:f4:52:a8:8e:b2:
f7:a1:47:1b:57:72:c1:f7:f9:6b:ff:11:85:7c:b8:7c:bb:da:
f5:cf:8a:87:aa:ca:15:65:0b:fe:85:bd:54:31:ed:d7:c0:b6:
32:ba:d7:13:77:aa:c3:2d:00:f2:cd:59:c8:4e:01:ec:6e:88:
b4:f8:2a:12:e4:31:b4:a3:90:c9:57:df:62:32:28:85:5e:32:
74:67:10:dc:07:5e:d0:74:fe:b9:5f:7c:56:03:1e:99:96:aa:
b5:a1:a3:a1:73:4e:ae:09:2d:fe:94:cf:38:27:85:b4:77:8e:
2e:73:ef:b0:e8:56:ac:ac:97:49:9e:db:12:4f:60:d1:7e:ca:
63:13:6c:89:88:e9:9b:6a:2b:00:b4:1c:f3:77:69:6b:02:f1:
fc:14:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:52 2026 by rpki-client