
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File: j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier: bZeYAEOz2cgf6wO7q3DZdJrg96J1p8teNOXypCbL16U=
Subject key identifier: 31:70:29:05:79:59:51:A8:4C:42:68:0F:99:0C:11:CA:BE:79:64:95
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number: 01D6
Signing time: Tue 29 Sep 2026 04:05:03 +0000
Manifest this update: Tue 29 Sep 2026 04:05:02 +0000
Manifest next update: Tue 06 Oct 2026 04:05:02 +0000
Files and hashes: 1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: FFZT4wYnv0iRy59zd5/Wv+xSm2hLYE33SzefcjPJLOQ=)
2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: jvZ/ModfbQ+nJiqi0y0StRHq9ETC/wMHvIwaRLSskes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Validity
Not Before: Sep 29 04:05:02 2026 GMT
Not After : Oct 6 04:05:02 2026 GMT
Subject: CN=6abb38ee-e106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:39:ec:95:28:c9:9c:fa:da:e1:ca:2d:59:
d2:45:6b:ad:6a:6d:45:f7:4a:17:e4:16:e6:40:b0:
8f:f0:4f:39:f6:f5:06:f0:a9:a1:24:fd:39:e2:21:
ef:9e:21:5b:f9:19:be:9d:56:39:77:62:24:ff:e5:
ca:9a:0b:28:12:26:78:4b:68:36:94:bc:79:37:52:
77:1c:58:42:f1:d8:2e:5f:97:92:05:b0:7d:88:06:
88:38:ec:71:80:32:54:9c:95:7a:d8:e6:11:bb:49:
a8:da:d7:4b:5b:11:b2:bc:fd:6a:94:80:a0:d6:9f:
e9:44:4e:2f:12:ea:56:30:50:63:55:90:71:56:9d:
81:7e:da:8f:59:0d:6f:24:da:a8:ad:b9:a9:1b:29:
e6:37:28:7a:0d:cc:be:ac:c0:6e:c6:18:3f:e1:fd:
b1:08:05:77:37:fa:00:5f:c8:c1:1c:91:20:c6:ff:
bd:f6:c5:a3:0a:57:7f:f0:d6:c5:8d:b9:97:81:34:
68:df:15:94:13:c1:34:a6:17:f7:34:fd:6c:91:7d:
af:35:78:bb:a7:76:dc:53:39:f0:d4:15:34:f9:c6:
6b:f1:db:9f:94:fc:c5:5b:bc:38:32:1c:cf:25:81:
04:ee:47:18:18:c4:4e:0c:09:14:25:df:76:61:79:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:29:05:79:59:51:A8:4C:42:68:0F:99:0C:11:CA:BE:79:64:95
X509v3 Authority Key Identifier:
keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:38:3b:38:3a:42:6a:06:d4:31:a1:4d:d5:a0:f6:e1:6f:5a:
ec:0c:fe:f0:2d:43:93:45:eb:70:37:51:54:b3:23:ea:85:a4:
cf:af:7f:ae:26:50:2b:3e:a4:97:83:8b:98:b8:7d:d8:15:d0:
5f:4d:e3:e2:9d:ea:9c:1b:42:51:da:20:1d:eb:68:ff:1f:77:
b1:83:b0:05:67:bc:c2:19:47:0e:d7:fb:87:3f:f3:0d:e9:f3:
24:ac:64:15:fd:f4:27:50:0f:c6:72:ed:bc:d2:c1:d1:c4:94:
01:6d:47:0a:11:a4:b3:52:b9:0f:18:ea:59:d4:05:b5:f0:2d:
e1:b2:04:43:68:44:9c:55:f5:ba:e7:f6:1a:01:7e:0d:fb:e0:
78:d6:7f:23:1d:d0:55:e2:dd:d5:52:79:58:6c:29:ed:a0:af:
18:f3:d0:a6:a1:5e:97:89:36:fa:6f:f1:8d:ed:88:98:cb:67:
d6:81:1b:30:7a:d2:7b:08:74:6e:3e:1a:dc:31:47:db:11:f8:
7e:81:24:ec:b9:a4:da:60:61:8c:70:ed:aa:80:56:78:7a:ec:
36:b6:eb:0e:29:21:4c:c9:73:e2:64:0c:41:e9:c6:34:60:ef:
3a:4a:2a:e2:9c:a0:17:a4:2c:68:45:6c:85:f3:99:69:c2:26:
18:40:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:24:29 2026 by rpki-client