
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
File: JfzCC3gzseILvBM0UQqTrh1obMA.mft (raw, json)
Hash identifier: H6NOQBb7v3oNLwcU/AMXybu/B05Ev7SSm8xcnI1DgZU=
Subject key identifier: 75:66:11:74:17:1C:E0:73:EC:EE:0E:F1:CF:3C:F9:61:62:45:CE:84
Authority key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
Certificate issuer: /CN=A918AA54/serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
Manifest number: 0400
Signing time: Mon 21 Sep 2026 00:17:14 +0000
Manifest this update: Mon 21 Sep 2026 00:17:14 +0000
Manifest next update: Mon 28 Sep 2026 00:17:14 +0000
Files and hashes: 1: JfzCC3gzseILvBM0UQqTrh1obMA.crl (hash: 9Sz/DbndBm946rb6m/qelMn0wWDCpOC8xR0BZQjuIPU=)
2: FD8683B6AB2F11F199111181AFEE528E.roa (hash: nj7zpHhdZPeAnSuqqiBAFC350E8Xly3tDniLk5HF2SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Validity
Not Before: Sep 21 00:17:14 2026 GMT
Not After : Sep 28 00:17:14 2026 GMT
Subject: CN=6ab0778a-453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:00:f5:50:61:d2:24:04:40:ae:7a:90:19:
40:0f:cd:5b:6f:35:6c:11:81:a2:4a:3e:b8:31:2e:
56:ce:a8:85:88:f7:da:3b:6a:14:ce:23:0d:b8:ee:
bd:46:4f:a7:70:e4:58:f6:33:30:bd:27:05:e8:8f:
9f:54:1e:a8:42:a5:c2:5c:c1:b2:38:a4:f9:48:f1:
ba:b3:49:4f:ef:38:35:ef:a4:01:bf:68:a7:8d:c5:
1f:82:c8:06:fe:5e:5b:74:ae:5b:dc:98:29:70:8d:
cc:73:5d:b7:f4:cf:6a:c4:97:4f:0d:ad:69:8f:ee:
ef:14:81:42:f6:7b:df:c8:55:06:d2:ff:2d:2d:bf:
22:db:aa:73:40:2e:11:7d:6a:be:4f:b2:ee:3c:8d:
d3:74:2e:ed:ea:51:e8:1d:5e:29:ae:dc:c1:25:5d:
71:02:cf:46:79:1a:cb:a8:c9:af:45:a0:fd:72:9a:
e4:28:b5:3c:70:e2:99:d8:4b:65:cd:ae:9b:2a:3b:
03:b6:64:44:9e:a1:bb:37:e8:dc:e6:02:75:4c:d6:
a3:09:e8:24:9a:e4:42:cc:74:63:3f:db:28:9e:94:
3c:55:74:db:17:95:85:41:d6:41:1d:5c:04:a4:c7:
30:f6:eb:90:67:8a:0b:cc:c1:95:79:82:99:9e:de:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:11:74:17:1C:E0:73:EC:EE:0E:F1:CF:3C:F9:61:62:45:CE:84
X509v3 Authority Key Identifier:
keyid:25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:f4:47:02:e4:1d:51:22:03:c4:e3:2d:7f:c7:53:36:97:
6e:9f:61:fd:fe:43:c5:c9:0c:c7:bd:b5:5c:56:32:b4:0f:6e:
5d:68:7f:24:c7:e2:60:b2:ca:ff:2f:c8:3f:c7:f1:db:77:e6:
52:40:c1:1b:fe:74:f1:56:80:9d:be:1d:5a:4e:a4:fc:5e:a4:
2d:d3:23:9c:0b:bb:5a:04:95:a1:60:ca:30:a7:e6:cb:a9:be:
5a:15:22:f4:c8:b6:9d:3f:38:1f:6c:c9:72:73:9c:ab:d4:96:
d0:00:1f:93:bd:d2:f3:67:ab:52:25:6a:1e:7b:cf:88:e0:71:
3e:9b:9b:4a:a0:4b:4d:a3:8c:b2:39:d7:52:a5:a5:02:45:12:
d1:18:14:19:81:e4:12:1c:56:8d:7c:e3:22:d0:6c:70:bf:f3:
84:26:31:08:3e:02:0a:6b:8d:8b:67:25:63:f8:fc:54:9d:6e:
32:b0:02:ec:a7:94:ab:90:ac:48:ee:31:2f:97:a1:e0:5e:e4:
b8:f4:ec:9b:34:02:0d:28:40:31:95:e4:0e:33:ef:16:74:d4:
30:d4:aa:be:58:ac:54:91:5d:11:f4:85:c7:e8:be:a5:16:87:
24:ef:30:b3:61:1a:ff:e3:6d:89:bf:6e:82:92:28:ea:18:bf:
15:69:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:28:34 2026 by rpki-client