
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File: jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier: izIw90v2RGrXJUhUIpCCynfY7SauHv1F7NbtFEfUo0I=
Subject key identifier: EF:AA:83:8B:C6:D6:FA:27:CE:B3:51:77:ED:64:2E:69:1C:D0:19:0C
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial: 02F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number: 02E9
Signing time: Fri 25 Sep 2026 01:01:34 +0000
Manifest this update: Fri 25 Sep 2026 01:01:34 +0000
Manifest next update: Fri 02 Oct 2026 01:01:34 +0000
Files and hashes: 1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: YzpMmVQQo0aARpXFypZqPr5EUmX8D+qcc3uNzxIOuK8=)
2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: SHGrRXj8iL8y62i+lXT9bwWoMs/o/3OL7e7V5YLO+Uk=)
3: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: Vebt9O/IkdXmftIw76IOG9N8DrlxVAK/4Vf1+tpsbVE=)
4: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: ItDB42YA4akVh7SOSm7en+1Za7DGiN8sAhKI1UhXvfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
Validity
Not Before: Sep 25 01:01:34 2026 GMT
Not After : Oct 2 01:01:34 2026 GMT
Subject: CN=6ab5c7ee-1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:c3:69:20:65:13:1d:b5:99:62:41:00:0e:
0a:b3:9a:50:25:c5:be:9f:46:88:f7:a9:13:ba:3e:
44:fe:57:05:23:15:66:f0:58:cd:cc:60:49:bd:86:
9a:7e:11:4f:be:f7:60:2c:a1:87:04:14:07:dd:d0:
70:d4:15:7f:93:67:1b:1e:6f:95:da:47:3d:e5:ba:
fb:29:e0:19:88:02:ff:62:01:19:4c:d0:54:fc:c8:
18:13:4c:42:c4:9b:2e:56:5a:14:b9:a9:e2:c4:54:
69:92:f8:d5:6a:f6:99:da:6d:04:22:22:ef:bc:17:
5b:81:be:0c:49:9d:a9:59:42:20:a4:34:8b:b2:ee:
78:bb:86:f8:9f:a8:57:2d:b3:41:0d:66:8d:00:63:
ac:0a:c1:d3:1a:fd:7f:c1:64:44:6c:52:d5:1c:89:
d0:a4:9f:41:d2:40:d6:d6:f2:1f:35:ca:cb:4f:f2:
82:02:39:e3:f4:44:dd:16:8c:a9:5a:aa:31:04:56:
a9:b8:8d:1f:e3:8a:50:89:48:e7:9c:87:d9:88:74:
7f:f5:c5:87:03:2a:9e:00:48:28:13:68:bd:39:99:
f9:21:05:e9:a9:86:6f:49:4c:33:c8:68:18:b2:16:
53:1d:e8:de:84:79:da:ab:a7:28:94:1f:09:cb:c9:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:83:8B:C6:D6:FA:27:CE:B3:51:77:ED:64:2E:69:1C:D0:19:0C
X509v3 Authority Key Identifier:
keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:75:a1:2e:00:c4:56:16:fe:9c:2a:c8:74:78:bd:9b:a5:
3f:35:c9:27:c0:d8:68:dc:3b:09:45:b5:df:26:fc:28:73:b7:
bb:02:8f:74:aa:fc:13:03:b6:28:47:16:f1:3b:7e:8b:2e:e6:
ac:c3:39:0d:48:ae:55:01:d8:b9:49:4e:d0:0d:75:ea:a5:69:
f4:af:f6:ff:f6:e3:59:51:1b:23:27:98:08:24:b8:45:b8:65:
e1:fb:39:e1:b7:19:cc:82:7e:fc:8d:9b:8c:6b:28:f6:1a:71:
a3:a2:23:14:d0:be:82:94:86:1d:3a:db:25:34:ba:da:a3:85:
43:67:6c:82:be:8a:26:8e:4a:85:d8:26:d5:56:2c:d9:86:95:
7e:fe:0a:ce:3c:7b:c1:27:67:18:17:4a:1c:6b:fb:8a:c8:dd:
78:9c:51:1c:01:00:bc:c3:c4:e0:18:1c:b5:81:4d:2e:af:9a:
f8:f8:67:29:0c:4c:1d:40:ff:4d:ec:40:95:87:e9:e1:84:f4:
d3:b5:89:cb:3d:34:49:a2:68:7b:80:dc:59:78:5e:70:52:6f:
0d:cc:84:be:5a:f5:84:c5:be:9a:70:f7:af:99:60:5b:02:23:
6e:e3:4a:10:fa:b1:bf:0a:7b:2e:d1:58:fc:c4:3f:dd:17:10:
24:09:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:17 2026 by rpki-client