
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier: A8YFUD036So2SEN4rlbUc+EDfOFjAo/D5duiK0/cIZw=
Subject key identifier: 51:1A:BE:72:77:93:88:A3:2D:E0:9D:63:39:57:70:C9:10:1E:1A:B8
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial: 037F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number: 0377
Signing time: Mon 21 Sep 2026 00:37:20 +0000
Manifest this update: Mon 21 Sep 2026 00:37:19 +0000
Manifest next update: Mon 28 Sep 2026 00:37:19 +0000
Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: fOO/UOqbmEYKZZZp9GwOZRXljF1LN3zljv2/6t8HUAs=)
2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: ZS5cuNMtd6yQQN38E7lp5FQ2jmo2L2QBDwPjFbM0irs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Validity
Not Before: Sep 21 00:37:19 2026 GMT
Not After : Sep 28 00:37:19 2026 GMT
Subject: CN=6ab07c3f-4669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:a7:f9:43:22:97:c1:1f:3e:1c:08:1c:07:
e2:ae:11:12:90:82:3b:0c:9c:11:a7:58:8b:6f:42:
05:7a:ef:aa:35:be:b3:fe:3e:14:c0:d7:25:76:91:
88:d2:db:32:dd:be:a2:cb:00:25:21:39:fa:5d:bc:
59:06:ed:42:14:11:c2:92:e1:74:c0:69:4c:59:09:
85:7b:b4:1f:3f:6d:0d:04:e9:15:35:76:55:44:88:
3f:86:c8:47:9a:0a:e5:cf:58:19:f3:c2:ac:32:4b:
0e:8e:9f:87:6e:ab:2b:ef:5e:70:db:96:85:dc:b2:
e1:8d:f1:81:e3:66:16:cf:98:ec:77:4f:d8:e9:ec:
b2:65:d9:2d:e5:2b:e3:9c:8f:33:1f:2a:da:6b:4a:
ac:f0:8c:8b:c0:ef:f4:da:18:d7:39:2e:6d:be:e1:
59:eb:e2:38:18:3e:10:5b:bb:f4:76:85:2b:55:9b:
e8:96:d6:be:0c:77:42:21:86:50:1f:ae:c3:24:00:
f8:42:29:36:d8:85:bf:17:5b:0c:92:70:cf:fa:be:
94:73:0c:4e:94:54:5d:c9:16:f6:cc:9d:ba:da:a3:
39:6c:06:cf:d9:80:40:27:70:7c:06:c2:98:e5:2f:
e6:41:dd:c2:27:4b:ec:b0:56:01:d3:83:66:13:07:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:BE:72:77:93:88:A3:2D:E0:9D:63:39:57:70:C9:10:1E:1A:B8
X509v3 Authority Key Identifier:
keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:94:c3:9b:b6:55:02:39:fb:17:d9:92:43:43:24:6c:68:
5b:e8:4a:6b:76:9b:11:54:7d:c9:e8:8f:89:83:eb:94:3c:77:
90:ba:c7:3d:66:c2:33:49:aa:15:e8:7f:1b:12:ba:82:b1:fc:
84:56:19:c2:78:8a:44:6c:fe:41:65:59:7c:d6:1d:b2:18:7d:
e3:5c:4f:e4:16:37:20:e8:94:1c:bd:fc:b9:be:f8:22:07:b8:
aa:8b:4d:a7:9d:a5:43:37:91:a7:85:ac:57:d5:d1:78:51:fd:
19:71:9a:cd:d2:46:b6:b3:88:05:2a:57:74:c2:88:2f:9e:bd:
e8:25:1f:fa:56:f5:8d:58:13:4d:5c:33:57:63:f6:53:7c:23:
6b:c6:c5:50:15:0c:03:cb:54:e7:38:42:07:bd:8b:93:9f:18:
cb:e2:2d:4c:f9:ec:f2:eb:ce:f9:31:43:80:37:78:fa:f0:df:
94:bf:39:db:e1:f4:eb:96:e0:aa:24:c2:8f:d0:f5:9a:43:0d:
13:47:4c:0d:37:73:c5:f8:03:08:3d:b8:ef:77:80:67:8f:04:
e0:b1:be:8a:03:59:89:08:8b:8d:35:b3:cc:fc:ae:85:82:b2:
c3:b0:f3:9f:00:1a:33:2a:5f:d9:f2:31:dc:3b:b7:60:fd:a3:
1a:8f:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:44:33 2026 by rpki-client