
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier: beyiIGp1cWRz96DacENPw56sMySLMwfd+cMFb2vR6xw=
Subject key identifier: C1:19:4D:27:DE:BC:78:46:5A:46:5B:17:B7:2C:E0:E9:07:79:F9:5A
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number: 358F
Signing time: Sun 20 Sep 2026 14:22:12 +0000
Manifest this update: Sun 20 Sep 2026 14:22:11 +0000
Manifest next update: Sun 27 Sep 2026 14:22:11 +0000
Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 5qJ4GKrLCO76Mq6dEI/n7Qw/+jQQ2nRrimDTIaexA24=)
2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: GeaS1wm5HUzDhRPnFMwxNijLtG7Ej2e1/5+Wkd8XMhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Validity
Not Before: Sep 20 14:22:11 2026 GMT
Not After : Sep 27 14:22:11 2026 GMT
Subject: CN=6aafec14-25fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:a5:84:28:16:01:ff:c0:00:cb:99:b2:c5:
14:b9:9d:b7:92:97:88:1a:9e:b2:5a:40:da:b9:8c:
33:c3:05:3a:1a:12:b7:a3:35:47:9c:c4:86:c9:5b:
c9:b9:f3:c1:30:48:2c:9e:4d:a9:d6:8b:87:a7:92:
cf:77:68:cd:a3:07:dc:12:ca:ee:48:55:2f:39:11:
46:32:e1:7c:bd:ef:4b:e1:a0:ee:34:0d:eb:6a:c2:
14:46:3d:7d:f5:a1:e1:f9:9f:c3:3d:d4:7d:84:41:
90:75:37:71:42:8a:b8:23:63:1e:99:2c:08:e6:80:
44:97:78:17:b8:61:67:95:8d:ac:bc:3a:23:2c:44:
a1:26:28:0d:7b:f4:c8:c3:18:14:c4:db:aa:83:22:
18:b9:50:97:09:c9:0f:f2:56:6d:4f:9c:e9:c5:15:
2c:a6:e6:c2:18:63:1e:f9:1b:de:21:04:33:63:7a:
0f:84:21:42:2e:92:fe:8c:92:45:14:c8:8a:93:0d:
8d:c6:0b:26:8d:a0:7d:dc:47:be:09:97:e8:33:29:
be:1c:cd:02:cd:95:f2:fb:1d:1a:d4:0c:c1:3d:4b:
39:f0:d2:bf:f3:48:43:1e:96:0a:d0:b4:d4:6b:e1:
4e:25:f3:2c:d1:60:b5:01:49:b5:53:bc:bf:91:aa:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:4D:27:DE:BC:78:46:5A:46:5B:17:B7:2C:E0:E9:07:79:F9:5A
X509v3 Authority Key Identifier:
keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:3f:7c:0f:89:06:db:c1:91:8c:c0:7e:70:a9:25:80:08:
54:b0:fa:f9:31:82:d7:f9:7f:3b:6c:3e:b5:50:54:b3:5d:f9:
80:a4:c6:6c:22:48:d9:57:54:3f:38:df:48:b2:2b:3c:bf:26:
7e:15:dc:34:52:ac:42:1c:e5:d4:48:7b:8f:13:ca:3f:96:30:
4f:d7:c1:54:29:1e:6d:8a:cd:1d:bc:2b:b9:0a:fa:25:fd:8d:
e9:ff:2b:55:4d:b2:e2:46:de:02:6d:81:af:48:1a:6a:15:ee:
a6:bf:c2:a4:e7:19:9d:1a:17:6d:c8:47:1d:41:96:34:db:c8:
3f:92:4f:97:d9:f2:de:66:b9:76:77:cf:c8:96:8c:4e:aa:82:
90:43:98:6a:6c:8b:e9:db:f8:da:0e:c8:a9:c9:ca:ed:6f:cd:
20:0f:93:ea:bd:20:d7:8a:eb:22:fd:0e:e5:9b:a2:99:bf:e0:
3d:b9:06:56:11:9e:11:57:49:42:ba:33:15:3d:c6:02:52:df:
06:a3:1a:3c:94:c8:20:76:55:67:d9:dd:f8:25:9f:2d:ba:fc:
da:7c:7a:75:4a:08:4f:72:7d:36:37:56:fd:56:00:94:be:e1:
3b:8b:48:49:36:48:9d:93:c6:10:a6:c1:ae:63:3b:5d:67:56:
0a:7e:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:38:49 2026 by rpki-client