
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier: hNzfgWJS/1X0ICJf+jbuxqgEQDjPcDXMtP41w8CQgyA=
Subject key identifier: A0:E0:E2:83:D7:39:B4:AA:0F:FF:1D:D1:F8:7E:25:54:30:31:52:53
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number: 0187
Signing time: Tue 13 Oct 2026 05:11:33 +0000
Manifest this update: Tue 13 Oct 2026 05:11:33 +0000
Manifest next update: Tue 20 Oct 2026 05:11:33 +0000
Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: ANMt+fg2fe43grUZSG+o7kiq4htisV+41nx7/Jc3zlY=)
2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Validity
Not Before: Oct 13 05:11:33 2026 GMT
Not After : Oct 20 05:11:33 2026 GMT
Subject: CN=6acdbd85-c782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:5c:83:96:be:1f:3e:fb:62:f7:fa:24:23:
57:fa:f6:7e:79:49:47:b2:bf:16:33:71:bf:58:02:
9c:cf:8f:89:dd:6f:43:12:c9:f8:50:19:b1:6e:0e:
52:cf:90:3e:90:72:38:e0:bc:3d:cc:cb:4c:8c:da:
fb:ca:1b:c0:2b:31:af:39:a4:d3:93:54:5d:d8:c8:
0f:ed:b5:8a:3f:6f:ca:b5:93:8a:30:9d:fb:39:b0:
00:14:f8:4f:ff:67:17:d0:62:df:1b:1f:df:a1:2f:
c6:66:c2:41:2d:3e:aa:2a:3c:3a:63:e4:0b:c8:57:
70:be:86:c7:d7:7a:c0:7a:6e:dc:f1:e3:37:f4:3f:
9c:ad:41:b8:49:fe:7b:36:75:6e:2f:2f:3f:19:90:
b8:86:da:8e:64:9a:fc:26:00:0b:df:36:80:d6:f9:
6b:a3:ee:91:8d:fd:9d:7e:0f:52:13:7d:89:60:b0:
7f:16:15:60:a5:bf:a1:4e:50:f0:a3:54:c5:4d:4b:
f5:41:88:9c:34:49:07:94:3d:ea:6a:7f:ff:32:8b:
8b:75:20:d9:16:e8:2d:db:9a:45:2e:d8:b0:0b:a4:
18:e5:01:2f:fe:38:c7:1a:17:0c:65:cd:9e:e2:a5:
85:87:25:04:a2:1a:51:da:16:7c:63:c0:b6:7a:50:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:E2:83:D7:39:B4:AA:0F:FF:1D:D1:F8:7E:25:54:30:31:52:53
X509v3 Authority Key Identifier:
keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:81:99:83:3c:54:5d:74:aa:95:61:25:60:f5:94:c4:1f:66:
2b:9a:04:d7:66:b0:6b:14:57:f1:79:22:3b:aa:8a:6e:01:ba:
1b:54:d8:c3:d3:46:56:17:43:78:6a:fa:5c:d5:a6:51:e1:0d:
6a:4e:2f:fd:b1:22:a5:75:56:83:f6:bf:23:a1:30:a7:01:49:
6f:85:e0:8f:e6:af:0b:01:7b:b4:53:25:92:c1:cf:07:a0:7a:
60:ac:76:07:78:de:56:d8:05:8b:6e:7c:ed:6b:32:6f:7e:ff:
e9:47:dc:50:37:90:ea:06:1a:2c:da:03:87:c6:ca:f3:d0:66:
a9:cf:23:da:61:b6:4a:3e:49:9f:b3:4e:aa:b9:1c:3d:80:54:
75:93:30:c6:fd:ce:b6:73:90:cb:f9:3e:d6:ea:3c:8a:f4:ad:
84:18:19:16:a1:a2:ca:71:f9:a6:15:35:da:86:29:db:ef:fa:
63:9c:49:77:ff:3c:9e:6e:49:cd:6f:b2:ea:ad:60:4e:f8:4c:
33:c1:ca:ea:b0:6c:ee:59:49:97:01:38:9b:41:53:e0:29:2d:
44:6c:7a:b4:60:b9:c5:d5:03:d5:4e:cb:51:a5:00:ac:e3:e3:
00:35:f9:bf:f7:93:23:59:19:82:63:87:cb:0a:5b:56:df:83:
d3:98:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:22:35 2026 by rpki-client