
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: 0YTAFMdsmFtK+tEGRiAmLvwIdZ8EnsUVokKUHC7Uah8=
Subject key identifier: B3:B1:F1:64:ED:A6:F7:1E:3B:51:D6:CC:05:8D:E6:FA:19:73:76:DA
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0BAE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0BA4
Signing time: Sat 10 Oct 2026 19:10:55 +0000
Manifest this update: Sat 10 Oct 2026 19:10:54 +0000
Manifest next update: Sat 17 Oct 2026 19:10:54 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: 1eUnHC4eUNL3oONQtnRjVJt1RiyjramjMLrt2Jiliyk=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Oct 10 19:10:54 2026 GMT
Not After : Oct 17 19:10:54 2026 GMT
Subject: CN=6aca8dbe-4180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:69:e6:50:8e:4e:47:b0:35:b1:a4:a0:70:
d7:bc:7c:8a:3b:50:4e:28:ef:1a:f4:49:07:39:31:
0d:8f:fa:43:28:5e:73:3f:f9:2a:79:d5:b9:62:d7:
30:2f:ef:5d:be:84:57:43:09:32:5a:16:a2:81:e1:
ff:21:e9:86:29:8f:cd:2b:81:ea:9f:a8:ce:21:0f:
e2:c3:9e:0f:30:a8:98:92:29:b8:57:b9:f0:ac:e4:
a4:a2:0a:02:f7:9e:18:fa:6c:b7:01:35:c2:d1:34:
89:6b:46:df:44:35:1d:3a:dd:11:20:7f:52:3f:cb:
1f:03:04:11:7b:93:4c:76:47:5f:9c:ad:fe:71:4e:
23:09:c4:58:7b:d1:bd:3b:5d:f5:b3:60:9f:07:3a:
6c:2c:9a:02:d9:f8:10:50:52:a8:2d:62:45:08:bf:
2a:e2:4e:89:5d:57:6d:a2:72:d6:6b:98:a3:8c:6d:
b0:8e:fc:71:9e:ac:b4:51:95:e0:49:31:37:54:e4:
4b:c0:ce:96:07:dc:95:39:51:a0:ed:e7:c2:8b:9c:
a1:fc:b0:95:ca:8b:13:5c:6b:be:e8:27:9e:85:26:
3e:01:ed:dc:6a:d4:98:41:64:74:39:1c:39:24:b3:
7b:db:b3:a0:c1:47:77:e2:8b:b0:4a:ea:2a:38:8c:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:F1:64:ED:A6:F7:1E:3B:51:D6:CC:05:8D:E6:FA:19:73:76:DA
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:12:29:0f:81:c0:94:b1:49:26:26:2b:2e:6b:bf:57:38:
a4:13:05:d8:ce:a1:47:60:35:77:f5:8b:c0:87:d4:fb:53:53:
fe:43:4d:52:01:1a:85:0b:13:75:ef:39:ff:33:8e:0d:ee:c6:
68:0f:48:1d:50:42:5a:e4:48:e3:e1:b9:18:75:24:1c:88:e4:
f3:1e:46:ad:93:84:5d:08:f0:c8:1a:08:f5:db:86:fe:30:b3:
0d:a8:5f:b1:13:a6:e8:cc:81:83:9c:ed:e1:5a:27:94:c7:eb:
95:34:dd:d8:29:f2:90:7d:3e:fb:57:a2:6a:72:f9:a4:20:ad:
9e:45:23:cb:2a:c2:4f:5c:c0:7d:dc:44:6d:53:d4:e0:4d:11:
fd:fe:0f:ec:90:ed:83:9d:29:4b:6e:db:01:b1:b3:32:40:ef:
16:f6:1c:78:e2:db:b6:ea:eb:f3:21:1c:a8:b7:39:7c:9e:ac:
ec:54:30:a3:b6:3e:70:fa:01:df:a2:58:67:55:07:e4:66:c9:
f8:8f:a0:cb:ac:8e:cf:eb:3f:7f:fa:34:40:42:3d:13:07:46:
1b:60:de:a5:6a:0e:6b:b2:d1:9b:3c:1a:1d:7a:ed:97:17:69:
b6:bd:67:e9:5e:2d:b4:51:ec:8a:1e:8d:7f:8e:6f:78:bc:dd:
fc:1f:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:50:23 2026 by rpki-client