
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier: 6WdLN+Lxm5hbwdBRjznzRPMeygxvcoTEMMYW+XM3oR0=
Subject key identifier: F6:21:B5:55:E1:25:52:85:99:B9:00:09:5E:42:8F:50:E8:28:22:6C
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer: /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number: AE
Signing time: Tue 13 Oct 2026 07:45:20 +0000
Manifest this update: Tue 13 Oct 2026 07:45:20 +0000
Manifest next update: Tue 20 Oct 2026 07:45:20 +0000
Files and hashes: 1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: qhKCGIXjVN+S2O31729qcsDsmbt750lnVrXDr9+P8HM=)
2: 17B8A8547B6A11F18E1A84F95FA30FBC.roa (hash: nrBaU7iZQSC+FLQvbkU6ic7bwgfAUClqxQi743KCfc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Validity
Not Before: Oct 13 07:45:20 2026 GMT
Not After : Oct 20 07:45:20 2026 GMT
Subject: CN=6acde190-12fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:32:77:44:fa:41:0d:be:7a:8c:7c:d2:60:
05:80:74:54:e1:47:9b:ed:45:0a:3a:56:de:8e:38:
85:82:a6:1f:86:a7:a1:ec:28:21:9a:0c:2b:ee:e4:
5a:71:76:e1:28:a4:31:db:20:12:36:c9:d8:b8:cd:
92:c8:0a:f0:04:ce:0b:1c:2f:c6:ff:e8:38:9d:28:
44:45:99:01:1b:cc:ec:fb:d9:fa:d0:3d:c3:ae:3b:
3b:2a:aa:58:1f:af:d1:69:69:ad:77:86:f9:3e:db:
d9:24:e6:e4:01:25:95:d9:41:81:65:3d:51:73:44:
c1:e0:72:20:31:fd:ba:7f:16:37:18:eb:4c:db:a0:
e5:b7:51:56:8f:16:22:bd:a6:36:29:16:95:6b:e9:
30:f0:97:c4:99:f4:e8:e8:b5:da:90:66:d0:50:86:
22:e5:7f:5f:7b:1b:b0:7a:fd:e6:1a:29:e6:fb:ac:
dd:f1:9a:2d:d7:f4:05:85:7c:c5:18:de:af:17:49:
63:9f:3e:15:c1:79:af:67:64:3c:12:b0:a7:59:99:
4b:1b:17:e1:de:54:ae:24:4b:ef:9f:8a:71:96:3a:
a4:ed:7a:69:64:29:16:71:93:67:93:b0:29:eb:1b:
06:05:17:ad:06:6d:6c:23:d8:27:4f:64:83:7f:6f:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:B5:55:E1:25:52:85:99:B9:00:09:5E:42:8F:50:E8:28:22:6C
X509v3 Authority Key Identifier:
keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:77:26:75:a1:97:75:39:3e:d5:e4:3c:a1:fe:d6:6c:c9:0f:
16:e2:4b:ed:b7:10:6d:fe:60:06:2b:c7:4b:03:d2:02:5e:dc:
ae:e8:0c:39:17:9a:c8:08:4d:5a:d2:01:36:73:87:bc:51:05:
2c:cf:c9:06:4d:58:66:bc:6d:06:09:29:05:56:d5:e5:6d:1a:
0a:44:7b:fb:f2:45:ee:f4:b4:70:6b:d8:d5:58:8e:0b:6e:d7:
52:c3:cf:61:e5:73:43:06:18:4d:97:d7:05:49:b9:c0:02:7f:
74:a7:75:4d:da:fb:0c:52:1f:10:9a:42:67:5e:64:d7:6f:5c:
7c:24:03:3c:4e:5d:14:28:5e:0a:04:5b:5a:6b:bb:e7:a7:40:
8d:de:09:e2:c5:15:67:6e:a2:e3:c0:b0:d3:01:61:d4:eb:02:
c6:21:08:92:23:ff:57:11:ec:de:c3:3c:f4:a5:05:a6:2b:e4:
9e:5a:17:19:c7:8d:fa:7b:89:32:dd:22:20:0e:83:f2:05:f0:
e2:73:92:da:68:66:53:b4:c7:5b:a2:00:90:23:53:b5:c4:d6:
8b:83:cb:5d:c9:9c:43:0c:b5:1c:81:07:92:79:41:c3:d0:4d:
d1:cd:0b:42:f1:5c:6f:64:8a:30:a1:26:00:1f:01:87:aa:f7:
a7:d1:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:10:01 2026 by rpki-client