
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File: rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier: c2LR0g8mIBe1Ro/0fB+rghI6fqHQyB4Z410DQw9bW7s=
Subject key identifier: 9D:7D:F4:CA:6D:98:42:FA:7F:55:06:F1:9B:B9:D2:A3:9F:15:1E:DA
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number: 7F
Signing time: Mon 21 Sep 2026 07:46:51 +0000
Manifest this update: Mon 21 Sep 2026 07:46:50 +0000
Manifest next update: Mon 28 Sep 2026 07:46:50 +0000
Files and hashes: 1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: y7B4WmxrhKHoy219GEgOP1idr46WFzaBPBvusFos7Dw=)
2: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Sep 21 07:46:50 2026 GMT
Not After : Sep 28 07:46:50 2026 GMT
Subject: CN=6ab0e0eb-3b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:a0:10:dd:76:6c:c3:ee:8f:a1:3d:b8:05:
7c:b1:f7:21:b5:34:95:cd:77:46:dd:b7:e6:41:87:
6d:9d:77:22:fd:b1:f6:48:6f:5c:23:9c:84:a8:c9:
34:8b:2b:85:b4:c9:1d:81:ad:6a:c1:fc:86:d9:33:
85:d4:e8:bf:1d:f1:c0:cb:bf:2a:18:b5:c0:b6:7f:
98:cc:e9:c5:34:14:8f:9a:02:a1:21:5c:8a:72:4e:
25:6a:75:86:ff:1e:1e:54:a7:79:8d:46:c6:d1:79:
da:17:df:fe:89:04:3f:c2:9a:44:56:22:c7:2c:93:
47:7a:46:0a:6f:37:e4:f7:5b:4e:f1:88:fe:55:15:
fb:a9:4a:52:d4:ae:d7:b4:01:c9:21:92:da:77:46:
bd:c3:5c:74:2c:aa:9f:e0:52:19:21:2e:a1:ab:9b:
82:6e:54:e6:48:02:40:b6:c1:58:79:f6:b7:19:af:
a8:fe:03:55:08:a2:7f:1f:84:8c:2f:99:11:36:32:
82:65:40:b8:4f:4a:19:99:b9:42:eb:73:3b:83:15:
c7:8c:68:3b:db:98:c7:b3:36:07:2a:53:1b:23:bf:
48:53:40:25:19:0b:39:d8:e7:07:22:ce:f7:fb:eb:
b8:9d:e6:9b:27:78:30:28:d7:7d:cc:6e:2e:92:0c:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:F4:CA:6D:98:42:FA:7F:55:06:F1:9B:B9:D2:A3:9F:15:1E:DA
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:ea:8e:c9:e3:de:d2:b7:b4:08:4e:02:a9:c1:c7:2b:d4:
29:5c:cc:ac:2a:1d:ad:b7:a0:67:3c:c3:af:8c:aa:08:ad:0b:
2a:e4:d9:79:85:02:09:73:54:7b:44:3c:a3:0f:f6:90:21:5b:
b4:38:95:c9:53:7d:51:85:33:4b:97:98:2a:49:75:c7:4c:8e:
02:47:12:09:e8:d2:cd:b1:03:bb:b5:fb:ab:6a:37:27:a7:56:
27:ae:d3:c0:92:b9:6c:ae:8d:35:fd:98:f3:75:b6:c9:22:38:
5c:ee:b9:a7:d6:38:a2:10:0c:be:9b:39:b1:49:95:93:67:fe:
f2:8e:2c:07:98:38:38:9d:bf:f4:91:0f:ef:21:90:8a:71:27:
50:0a:77:66:3c:b9:1f:c4:48:01:b2:c0:1a:44:56:57:74:dc:
90:6c:9a:7a:29:dd:85:18:cc:c8:1b:b3:7d:ff:b0:a2:04:eb:
30:98:47:e9:f4:33:82:9b:58:2e:9f:13:3d:9e:4d:de:8d:ac:
d2:9c:77:0b:bc:71:3b:ec:1c:dc:7b:ec:19:bc:36:a9:c3:af:
2d:a3:42:ac:35:91:73:c8:5d:c0:95:06:9c:21:cc:8a:c7:d5:
a4:56:fa:9b:03:f7:27:af:46:da:1f:7c:0b:68:25:54:7a:a7:
9e:29:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:19:51 2026 by rpki-client