
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier: yBeh0fbybiDw/dOorWflGVHGSgk4CqHeowO402BNJg0=
Subject key identifier: 91:ED:FE:71:4D:4B:00:D2:50:25:0D:28:A6:53:0C:61:4A:BF:13:57
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 07DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number: 07D4
Signing time: Sun 20 Sep 2026 21:14:50 +0000
Manifest this update: Sun 20 Sep 2026 21:14:50 +0000
Manifest next update: Sun 27 Sep 2026 21:14:50 +0000
Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: iHUy4vDNWlsNBoMiVUUXjCwYn8QUyPbaohTolrQMiz8=)
2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: Sep 20 21:14:50 2026 GMT
Not After : Sep 27 21:14:50 2026 GMT
Subject: CN=6ab04cca-e5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:3f:76:cf:d1:f8:5d:a5:38:99:02:6f:2b:
e3:bb:8f:f5:2e:7d:7c:e9:ac:fa:1a:9f:0c:09:b7:
d2:23:6c:f3:60:ab:ac:9c:25:4d:d7:a0:f0:cf:5d:
d1:a7:b6:3d:63:f1:88:b7:ea:4d:da:3d:7d:6a:28:
7b:19:3b:0d:07:fa:44:3c:be:10:e7:18:81:42:a9:
5d:a0:0a:7a:9f:42:31:8f:f6:5d:e5:c2:a7:f8:57:
1c:f4:6b:bf:70:5a:7f:10:cb:f5:d0:ac:52:4e:67:
f6:11:76:6a:1b:49:3f:8b:d9:17:99:b1:2c:ff:44:
75:ce:ee:2b:72:b5:8b:04:63:96:7d:d3:73:98:14:
06:17:68:56:d7:08:38:95:a0:0d:9d:e2:46:2c:de:
19:43:8a:f5:3a:40:77:4e:1b:00:53:e7:fd:4e:b3:
88:34:fc:6e:0c:cb:7c:ad:37:b0:16:b7:6e:ab:fe:
12:ec:37:69:c8:49:af:e0:7a:2c:2e:36:3e:b4:69:
72:fd:2a:99:93:c8:4d:ba:71:74:b9:f6:35:88:20:
07:47:39:bb:d4:71:97:b0:b5:a6:82:c9:35:ee:aa:
2d:69:38:bf:b2:75:0c:bf:09:7c:e6:ec:ab:34:8b:
b2:5f:b3:d3:db:95:d7:79:a7:e2:a0:42:47:2c:e8:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:FE:71:4D:4B:00:D2:50:25:0D:28:A6:53:0C:61:4A:BF:13:57
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a9:1d:58:c8:b4:dc:bb:e1:da:b6:7d:c1:8d:cb:11:88:e7:
47:11:c7:0a:9c:0e:f6:8c:f5:29:25:aa:5b:6d:e5:5f:32:be:
b8:25:a3:e8:99:39:4f:6f:f4:22:cc:f8:b5:a8:38:af:52:e5:
06:f1:75:0e:a2:51:dc:4c:ed:4a:83:6b:9f:2f:0f:dd:30:9b:
78:ee:1c:50:bc:de:4f:32:ad:8a:b0:7e:99:c2:43:27:b2:33:
02:86:15:c0:cf:7b:e4:2d:42:8e:12:2d:8e:d7:70:d9:c9:bf:
2b:59:a4:40:f3:7e:12:5e:56:1f:50:e4:dd:b4:a8:d8:0f:f0:
dc:00:d8:cd:44:d8:46:40:bc:5e:5c:75:12:15:ef:62:bf:aa:
78:aa:0a:22:2d:ca:a6:d6:b7:bf:2b:85:60:2a:9c:8e:ea:43:
ea:96:59:88:22:cd:51:e0:9a:10:6e:d0:e5:89:ce:41:a8:7d:
aa:87:49:f9:a0:5e:e9:58:5f:8e:2f:ce:00:ba:5a:ac:4b:02:
f6:e0:1f:0a:21:dc:0e:a3:dc:72:4c:f7:18:a0:c7:a7:86:eb:
dd:82:5f:b8:1e:8d:5e:d4:b2:0a:2d:b1:7c:86:bf:cd:1f:68:
bf:4b:75:32:f3:c0:93:fb:fc:08:22:15:0b:43:e7:0d:dd:17:
08:7f:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:57:00 2026 by rpki-client