
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json)
Hash identifier: OpTZjCy92PF2MIzbpmsoxDjTd/NzJ4DQiynPzQxeFXc=
Subject key identifier: 71:79:06:1E:00:3F:BF:09:83:B3:FE:02:0C:95:34:2C:0C:BB:06:0B
Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
Manifest number: 06F0
Signing time: Tue 06 Oct 2026 18:40:33 +0000
Manifest this update: Tue 06 Oct 2026 18:40:32 +0000
Manifest next update: Tue 13 Oct 2026 18:40:32 +0000
Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: 6W9PBwMPQL6VWN/9sp99Gfjt1cwdsmLxkXZLXPbPe28=)
2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: C9xOCAlI2ugXqr2LkeMuXjVj2fsjnMUChwzmuRA9WBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Validity
Not Before: Oct 6 18:40:32 2026 GMT
Not After : Oct 13 18:40:32 2026 GMT
Subject: CN=6ac540a1-1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:56:f7:28:1f:19:29:8c:96:4a:bd:de:7c:
9b:fb:9e:24:46:18:fe:0c:9e:57:00:9c:8c:32:0d:
4c:12:88:3b:18:a2:f8:d7:00:fa:c2:f3:12:b6:3e:
14:5c:4b:80:3c:6a:19:c4:87:4c:fb:7a:99:b3:23:
bf:57:9c:6c:de:4a:90:0f:a1:bb:c4:25:27:8d:ee:
ae:7c:fb:f2:af:fc:3e:90:34:cd:b9:ca:ca:5e:94:
30:e2:24:49:86:d9:db:e7:ac:8f:1e:5f:28:97:57:
cc:94:55:a3:dd:02:0d:b7:32:af:97:90:7f:8c:8f:
4e:f4:89:fa:71:13:54:88:dd:12:2d:10:3a:90:ea:
7c:34:09:d5:25:b5:ed:69:6f:b0:94:99:8b:a1:18:
60:dc:c8:95:85:9d:77:0b:e2:8f:e1:81:3d:99:be:
18:57:00:11:11:64:39:03:78:6a:a8:c4:de:f1:33:
ac:6d:b3:a4:88:bf:e7:af:0b:ec:6e:f9:46:da:1c:
49:f7:30:71:78:54:67:f6:57:fd:fe:26:10:f7:a5:
39:90:af:e7:a7:ca:52:6d:65:45:82:24:fe:4d:28:
9f:e4:0c:25:29:e3:c8:52:49:3b:ce:db:22:68:46:
2f:cb:b3:86:4d:9d:1e:a0:0b:0c:c3:54:33:18:51:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:06:1E:00:3F:BF:09:83:B3:FE:02:0C:95:34:2C:0C:BB:06:0B
X509v3 Authority Key Identifier:
keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:c2:af:5d:de:6f:3c:6c:ba:8d:78:36:a8:a5:ad:b3:0b:e3:
c2:a8:16:37:45:a8:ca:43:f9:14:e3:25:1c:51:0e:8e:da:17:
99:43:fa:67:a5:03:4c:c7:ce:fe:7f:e0:c4:98:0a:f0:4c:22:
2e:35:c4:49:a2:bf:11:da:55:be:54:6d:68:77:7b:10:a6:41:
76:db:1d:7e:44:80:83:32:d7:2d:da:33:6f:96:c1:10:52:7c:
f8:87:91:7c:2f:92:1d:88:58:af:ad:71:0d:3b:8e:33:98:56:
73:bf:ec:c7:5e:bc:4b:e5:5c:f2:61:ae:f9:41:89:59:f2:3b:
64:1d:e0:96:18:98:37:f1:29:0d:a0:65:2c:ad:29:95:bc:3e:
e9:6d:2f:c1:90:56:88:91:30:4f:29:a8:ce:50:11:13:f0:39:
41:cc:16:8f:87:33:48:5c:dd:fd:59:0d:ca:38:ad:05:fd:18:
63:ba:b9:49:95:de:1a:86:5b:83:84:36:96:06:75:fa:93:7d:
9f:e7:40:05:9a:cc:aa:f2:1d:43:04:0c:f8:1a:9b:02:f7:63:
86:da:3f:c4:94:7b:71:3e:0a:72:4f:ca:37:67:b8:0e:6c:52:
68:c1:47:0c:60:50:5f:e2:29:a9:b4:75:c1:d8:ae:fd:22:60:
30:1c:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:11:46 2026 by rpki-client