
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier: gMgQ5qmT7txzX7HR8Co+hgCiJsMq5wTJa44IopjOruI=
Subject key identifier: 2C:13:4A:D2:BD:54:FB:99:C5:76:06:3F:A2:64:0D:49:E3:26:77:BB
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number: 02D9
Signing time: Sun 11 Oct 2026 01:27:35 +0000
Manifest this update: Sun 11 Oct 2026 01:27:34 +0000
Manifest next update: Sun 18 Oct 2026 01:27:34 +0000
Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: LOqPjYex0v1nNHDPjwP5hDPvK9t+6aaJtPGpWTXrxA0=)
2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: SrQLMleMB4YU3ZEQhfOBgMc2EpS7tNcL9YRSRP+wumw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
Validity
Not Before: Oct 11 01:27:34 2026 GMT
Not After : Oct 18 01:27:34 2026 GMT
Subject: CN=6acae607-7639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:0c:f9:c7:eb:8c:0e:59:31:e4:58:78:3e:
74:85:49:52:e6:af:85:c2:f3:49:f6:0f:6b:74:49:
7d:2f:fb:24:e4:37:3c:31:d5:f0:8c:83:76:95:13:
d9:75:00:6d:29:bc:2b:90:49:5f:be:10:c7:f7:b2:
81:b3:cf:19:ec:9d:ed:f3:57:54:92:08:d0:26:f2:
9d:a5:ca:be:19:38:47:77:48:3c:f4:a4:fe:43:4e:
d2:3c:fe:e7:ee:1b:42:d8:d4:93:dc:67:2c:ac:ea:
79:b8:78:56:d6:a7:c8:09:04:76:b0:b2:e6:91:0c:
84:4a:1c:22:dc:cc:54:de:7f:ec:c0:49:17:c6:b8:
3d:c0:f3:3e:a1:18:e7:95:e6:8a:7f:25:69:b4:fa:
36:23:b1:a7:e3:a3:bd:e4:38:e9:2a:d9:73:59:b0:
f6:e1:a8:f4:ad:aa:aa:59:7c:a9:26:d4:60:b4:ba:
4e:2e:8e:d0:e7:64:71:32:e5:e3:62:cf:01:07:76:
b5:9b:b9:7f:1e:cb:4e:2c:d9:2c:3e:80:95:14:9d:
08:d6:47:80:ae:fd:b3:df:f6:cc:de:12:c3:2a:58:
8e:ee:50:c3:70:4d:69:68:c2:54:5d:e8:0b:b1:a6:
12:01:c7:29:46:ba:35:d9:7e:ae:89:95:c7:37:17:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:4A:D2:BD:54:FB:99:C5:76:06:3F:A2:64:0D:49:E3:26:77:BB
X509v3 Authority Key Identifier:
keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b3:af:d6:b9:bc:13:30:17:07:fd:9f:de:66:81:71:a7:34:
bd:a1:56:2f:81:7a:2f:82:45:a3:71:c8:c6:05:2f:9d:e0:6f:
ad:c1:ab:42:cd:91:97:b5:eb:d5:cb:47:11:a5:9a:09:35:69:
80:ac:5b:68:5b:b0:b1:b3:4a:cf:51:b9:e3:f9:fb:7a:fc:b3:
a4:3a:e5:40:6d:ed:4d:39:bd:9c:2a:00:ea:ac:6e:b6:13:70:
94:28:25:26:36:c6:fd:e9:8c:7e:86:ee:f4:5a:8b:c0:c9:16:
9e:5e:f6:26:72:d4:63:a9:6e:76:0d:67:95:96:64:c4:8e:ec:
36:1b:a2:0f:18:b3:94:47:8f:5c:13:6d:77:f3:83:de:40:e8:
5e:5e:8c:ea:6b:b9:04:9a:ae:09:4a:88:9d:1a:92:d2:cd:51:
cd:f1:2b:3c:d5:cd:15:c6:08:62:aa:7f:5b:1f:8b:3e:30:0f:
96:47:40:87:08:8a:27:de:e8:42:85:0b:1e:11:a7:d9:64:b8:
6e:48:88:2d:06:c0:4f:96:85:cc:77:d1:97:ac:65:ff:2a:6e:
d5:fd:4c:d2:1c:cd:c3:c4:3d:6f:29:e9:5b:ba:c1:7f:65:11:
2e:22:47:ee:7c:20:70:f9:33:8a:1f:a8:be:bc:d9:df:98:0f:
a1:8f:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:07:57 2026 by rpki-client