
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier: BHzXKBZ4vrzmEXKHnGf3MhIRXSYIL4QTrBYzz1W/w5E=
Subject key identifier: 94:73:8E:F7:97:46:80:10:87:58:E6:A2:3A:C7:82:FF:78:5A:20:41
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 0A77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number: 0A4D
Signing time: Sat 10 Oct 2026 19:47:53 +0000
Manifest this update: Sat 10 Oct 2026 19:47:52 +0000
Manifest next update: Sat 17 Oct 2026 19:47:52 +0000
Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: 4p9ufAUjXwMbGlOvpQA5r4DbFizWU3gPK9j0Fmd3Esg=)
2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: KWvwHruv1KceHBzzUFVoKpJPfw5czAZyyAOarnbSqBw=)
3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 6ELYEf//xgOmHmrw5674KJknvEDN6uqGmjP7VLTouxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Oct 10 19:47:52 2026 GMT
Not After : Oct 17 19:47:52 2026 GMT
Subject: CN=6aca9669-8a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:eb:3f:91:da:6b:a7:d7:05:a4:12:b0:b9:
4b:a0:1d:6e:25:dc:fe:65:8a:73:cc:8c:62:94:20:
e3:fe:9c:cb:a2:df:c9:22:ab:79:78:cf:b5:03:55:
10:6c:4f:b0:4d:86:db:5d:22:2c:df:66:d6:b2:1f:
c8:77:2a:94:c6:3f:21:94:b0:42:79:ed:71:53:13:
79:76:0e:9f:90:b3:6f:59:37:e7:89:1f:d2:95:26:
72:54:6a:e5:71:e6:12:93:b3:6a:12:6e:bd:d4:d4:
59:93:74:df:95:e2:a6:1e:74:09:b7:6e:0b:cc:d0:
53:8d:c6:f5:ac:24:00:98:53:db:aa:5f:13:ec:27:
c2:5a:f6:cf:be:1c:fa:88:e3:12:2c:aa:ec:25:f0:
03:42:77:1e:19:6b:74:c0:9d:ce:56:a5:51:3f:48:
c3:4d:1f:ed:61:7b:2e:5f:e5:cb:56:93:c0:89:e3:
3c:11:b8:1f:1d:1f:00:99:3f:83:65:b7:f1:4a:c0:
a7:e5:c8:60:2f:4b:03:72:f8:72:6e:12:d1:04:4c:
ca:36:3f:91:cc:aa:e4:c7:ef:eb:7d:13:1f:5b:6f:
f4:b8:11:e9:c9:72:30:a3:fe:23:0a:ec:f1:6a:7b:
d9:85:ac:97:72:72:0a:9b:81:30:72:6a:fa:33:4a:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:8E:F7:97:46:80:10:87:58:E6:A2:3A:C7:82:FF:78:5A:20:41
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3a:52:93:54:db:1a:e1:d4:e1:b3:1c:c0:e6:c5:ff:a2:35:
4f:f1:17:5b:00:a5:e9:4f:23:26:3e:98:86:9b:79:8a:9e:96:
6f:2e:a8:f4:3e:59:29:85:eb:1e:34:22:38:b4:83:1c:a4:b0:
30:df:dd:22:ae:91:4d:d0:90:a9:c9:df:7d:1f:06:b5:ea:0c:
a0:15:4c:37:fc:78:fb:ad:23:20:af:79:9d:b2:64:b5:1a:d3:
f5:11:0e:36:9a:5f:6f:39:c5:eb:fc:2f:30:3e:a7:95:50:5d:
c6:87:ee:36:7b:f3:25:d1:5f:79:e3:db:b1:bc:79:82:6b:59:
66:c4:d8:19:83:0d:bd:64:86:e5:e3:a0:d8:63:2e:67:e9:4c:
18:3c:e3:8c:3c:bb:f2:ba:11:21:d4:12:76:50:58:3f:00:84:
02:49:52:cb:33:65:a6:01:e0:4d:a5:83:63:e6:bb:29:b7:8b:
a0:d7:e4:d4:1d:fd:a5:c7:c8:6c:f7:6e:b3:a1:89:a1:ec:78:
f0:8f:41:8e:7f:74:7e:30:ee:78:22:c7:8f:02:62:36:a3:39:
b0:4f:58:55:e8:cc:79:b8:98:71:9f:9b:ca:a5:a7:94:45:ef:
66:d0:7a:b3:67:2f:71:96:fe:7f:9c:88:9c:05:e6:98:94:14:
0c:f4:e4:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC
RUM3MDU0NDEwHhcNMjYxMDEwMTk0NzUyWhcNMjYxMDE3MTk0NzUyWjAYMRYwFAYD
VQQDEw02YWNhOTY2OS04YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA60LrP5Haa6fXBaQSsLlLoB1uJdz+ZYpzzIxilCDj/pzLot/JIqt5eM+1A1UQ
bE+wTYbbXSIs32bWsh/IdyqUxj8hlLBCee1xUxN5dg6fkLNvWTfniR/SlSZyVGrl
ceYSk7NqEm691NRZk3TfleKmHnQJt24LzNBTjcb1rCQAmFPbql8T7CfCWvbPvhz6
iOMSLKrsJfADQnceGWt0wJ3OVqVRP0jDTR/tYXsuX+XLVpPAieM8EbgfHR8AmT+D
ZbfxSsCn5chgL0sDcvhybhLRBEzKNj+RzKrkx+/rfRMfW2/0uBHpyXIwo/4jCuzx
anvZhayXcnIKm4Ewcmr6M0oTswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRzjveX
RoAQh1jmojrHgv94WiBBMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx
QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3
RG5EN215dlVBSnkteHdWRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApDpSk1TbGuHU4bMcwObF/6I1T/EXWwCl6U8jJj6Yhpt5ip6Wby6o9D5ZKYXr
HjQiOLSDHKSwMN/dIq6RTdCQqcnffR8GteoMoBVMN/x4+60jIK95nbJktRrT9REO
NppfbznF6/wvMD6nlVBdxofuNnvzJdFfeePbsbx5gmtZZsTYGYMNvWSG5eOg2GMu
Z+lMGDzjjDy78roRIdQSdlBYPwCEAklSyzNlpgHgTaWDY+a7KbeLoNfk1B39pcfI
bPdus6GJoex48I9Bjn90fjDueCLHjwJiNqM5sE9YVejMebiYcZ+byqWnlEXvZtB6
s2cvcZb+f5yInAXmmJQUDPTkwA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:28:06 2026 by rpki-client