
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json)
Hash identifier: 18dx7KUZ7hxDzdyY04R6+B9idDI3WUeANo+PDasUXao=
Subject key identifier: 42:88:8A:D2:18:C1:40:13:FA:55:AD:8D:97:E7:52:97:BA:10:E6:44
Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Certificate serial: 0C0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
Manifest number: 0CE1
Signing time: Sat 26 Sep 2026 19:00:46 +0000
Manifest this update: Sat 26 Sep 2026 19:00:46 +0000
Manifest next update: Sat 03 Oct 2026 19:00:46 +0000
Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: VWQfHSMaaFRBRDpdVPF8Kt0f3Tjvy2e2DQJYDlIeqVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Validity
Not Before: Sep 26 19:00:46 2026 GMT
Not After : Oct 3 19:00:46 2026 GMT
Subject: CN=6ab8165e-dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:66:08:9d:a3:41:60:49:6c:39:b3:95:55:
14:3c:45:00:f7:a3:63:a7:f2:e6:37:4c:1b:a4:53:
80:87:c9:1e:41:8b:db:51:28:a2:a9:fd:55:c0:aa:
f7:df:0b:e8:77:ad:a9:6e:a8:b1:b3:55:7c:f1:9a:
e4:4b:dc:6c:f7:0c:b0:fc:4f:c2:00:e2:5d:22:ae:
48:0c:bd:bd:3d:71:79:0a:a6:6a:c6:1b:3d:12:8c:
20:02:9d:9e:99:e1:cd:9d:dd:4d:64:e3:a6:3e:50:
fb:cd:02:19:36:94:8f:90:1d:52:19:5b:72:4f:8b:
3f:d4:d4:32:c8:3f:59:70:92:07:37:b0:9e:a2:ea:
39:d4:ec:66:08:45:29:0d:d6:ce:e5:ea:70:68:84:
d7:ea:de:fa:12:a6:f4:d3:05:47:c1:0f:38:c7:ad:
e3:c7:04:58:a0:72:b7:d6:5c:19:b3:be:33:8a:f9:
1f:cc:08:88:bb:b3:65:ad:e7:11:aa:0d:2c:81:ca:
d6:92:dd:c7:ac:19:6f:6e:5f:17:2e:55:c7:8e:92:
1e:89:ba:89:ed:43:12:88:57:1b:c4:ce:60:f1:b1:
3e:d4:10:04:1b:a4:bc:75:3e:0b:20:bd:52:23:8a:
b7:03:52:bb:51:5f:ad:9c:c3:31:6d:08:ad:5f:bb:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:8A:D2:18:C1:40:13:FA:55:AD:8D:97:E7:52:97:BA:10:E6:44
X509v3 Authority Key Identifier:
keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:37:a5:2e:f4:7c:ee:a1:45:28:62:25:11:cd:1c:91:8b:
39:38:5e:b9:23:26:e5:cf:02:70:d8:3c:b4:77:0e:13:14:d9:
c4:49:be:d8:25:62:5d:c1:53:97:50:3c:b6:de:4d:6d:03:c6:
b9:63:1e:66:3a:ef:b3:50:42:05:c8:5d:29:0a:1e:30:6d:a3:
73:a8:e8:cb:30:fa:66:af:48:e3:25:a9:21:56:a3:f1:29:e0:
e4:7a:1d:1e:34:38:94:34:ab:8b:22:b8:59:c8:96:a1:ca:c9:
fe:19:52:b2:6f:87:37:65:1e:e8:b6:13:6e:70:9f:77:5e:f4:
d7:ce:d8:aa:45:b0:5d:06:2a:22:b4:64:48:0b:31:5d:61:bb:
f1:19:58:db:df:65:d0:d1:6f:93:f8:5d:5f:3a:2a:2b:84:b6:
ff:86:cd:f1:0c:2b:e0:02:c1:5c:e1:f3:d1:03:a0:68:fc:dd:
10:8c:ad:81:bd:b3:e6:9b:79:86:18:11:36:d7:78:20:df:52:
22:d7:04:4d:df:f9:9f:23:15:ad:1e:b5:5a:e4:79:54:2c:90:
75:12:00:f1:07:40:ee:6e:50:73:83:71:21:32:75:86:ef:77:
3b:63:25:c7:54:19:b4:34:7d:8a:e5:35:8d:6f:7c:de:e7:c3:
99:15:7c:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2
QUQyMkMzNDYwHhcNMjYwOTI2MTkwMDQ2WhcNMjYxMDAzMTkwMDQ2WjAYMRYwFAYD
VQQDEw02YWI4MTY1ZS1kZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6dmCJ2jQWBJbDmzlVUUPEUA96Njp/LmN0wbpFOAh8keQYvbUSiiqf1VwKr3
3wvod62pbqixs1V88ZrkS9xs9wyw/E/CAOJdIq5IDL29PXF5CqZqxhs9EowgAp2e
meHNnd1NZOOmPlD7zQIZNpSPkB1SGVtyT4s/1NQyyD9ZcJIHN7Ceouo51OxmCEUp
DdbO5epwaITX6t76Eqb00wVHwQ84x63jxwRYoHK31lwZs74zivkfzAiIu7NlrecR
qg0sgcrWkt3HrBlvbl8XLlXHjpIeibqJ7UMSiFcbxM5g8bE+1BAEG6S8dT4LIL1S
I4q3A1K7UV+tnMMxbQitX7tZLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKIitIY
wUAT+lWtjZfnUpe6EOZEMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1
OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3
MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ
TFRWMzRTSWU2eHRxMGl3MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcAA3pS70fO6hRShiJRHNHJGLOTheuSMm5c8CcNg8tHcOExTZxEm+2CViXcFT
l1A8tt5NbQPGuWMeZjrvs1BCBchdKQoeMG2jc6joyzD6Zq9I4yWpIVaj8Sng5Hod
HjQ4lDSriyK4WciWocrJ/hlSsm+HN2Ue6LYTbnCfd170187YqkWwXQYqIrRkSAsx
XWG78RlY299l0NFvk/hdXzoqK4S2/4bN8Qwr4ALBXOHz0QOgaPzdEIytgb2z5pt5
hhgRNtd4IN9SItcETd/5nyMVrR61WuR5VCyQdRIA8QdA7m5Qc4NxITJ1hu93O2Ml
x1QZtDR9iuU1jW983ufDmRV8dQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:18:32 2026 by rpki-client