
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier: Th/brnHfgQFc02FeksAKCPXUPMkJ2iiHdqaVNx7AaTg=
Subject key identifier: 03:A8:1E:8B:FB:2F:D9:12:E7:6B:36:CB:0C:01:77:1C:5B:C8:BA:C1
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial: 0B65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number: 0B54
Signing time: Mon 12 Oct 2026 19:21:21 +0000
Manifest this update: Mon 12 Oct 2026 19:21:20 +0000
Manifest next update: Mon 19 Oct 2026 19:21:20 +0000
Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: Dxe+yaKRsDo02j5MPY4u/UIIR1XGaNs/jRptOUcm3io=)
2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=)
3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Validity
Not Before: Oct 12 19:21:20 2026 GMT
Not After : Oct 19 19:21:20 2026 GMT
Subject: CN=6acd3331-ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:7e:24:2a:86:2c:e3:6e:f2:f3:3d:5a:c2:
57:89:a4:58:cb:67:d5:a0:76:b7:4a:a8:bb:b2:f9:
a6:37:47:7e:2b:4a:af:5c:38:15:d7:54:3f:df:15:
89:02:65:22:1f:7f:f7:5b:29:70:fa:5e:9f:dd:02:
83:a4:b1:44:01:31:f3:6c:b1:8e:60:8c:23:38:e1:
eb:9b:28:99:37:07:8a:d3:30:49:81:6d:b7:fc:ca:
77:ed:b6:50:19:d0:1c:c4:b5:96:e4:cd:02:b0:82:
e0:8e:af:42:93:4b:4d:76:04:86:5e:04:8a:20:5c:
fe:f2:7b:38:ad:53:75:30:07:e2:d3:60:00:5d:eb:
40:42:b1:c2:a0:02:b2:f7:df:1a:44:5b:71:21:4a:
e1:30:c7:41:82:0b:da:6a:92:03:98:46:ab:12:90:
4e:bb:25:d2:e2:38:fe:a5:48:f8:1c:7b:e5:e9:21:
92:12:69:82:98:28:31:a8:04:1f:f3:89:1f:22:92:
42:85:b7:a7:f3:1c:13:bc:cf:cb:38:51:32:87:bb:
f5:74:62:c9:83:93:96:43:ee:04:7b:db:9b:2b:c3:
61:5f:3d:df:30:76:b2:8e:b5:ad:63:7d:d2:1a:31:
5f:3f:4f:c6:ec:01:cf:db:aa:7f:d1:ff:ce:98:71:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:1E:8B:FB:2F:D9:12:E7:6B:36:CB:0C:01:77:1C:5B:C8:BA:C1
X509v3 Authority Key Identifier:
keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:55:24:b4:c2:cd:4a:92:63:b9:de:a1:8d:56:6a:6d:bc:
64:2e:b7:bb:29:d3:97:33:37:d3:ef:55:22:87:7a:62:af:93:
a6:f0:84:00:e7:28:ad:48:0c:3e:bf:f7:3a:4a:be:e1:3a:c1:
a6:ec:1b:2c:be:de:f4:81:6f:13:6a:91:a3:d2:e0:f2:c3:d9:
0b:0b:0c:a4:6b:17:75:ff:71:e6:82:70:63:84:f9:f6:ab:46:
eb:58:58:ba:26:6c:f3:c9:9b:9d:9d:bf:a7:a0:d0:95:87:ae:
d5:0b:ce:6a:48:4d:94:70:40:6d:4f:7a:f6:0f:98:c2:94:a9:
17:f4:25:fa:f3:d8:43:aa:04:ef:72:47:f7:53:06:77:9f:ee:
ae:77:82:cd:7e:a2:05:d5:dd:cd:be:a5:d7:a9:17:59:b9:c1:
65:2c:a4:44:42:7a:11:72:a8:77:54:d9:71:bd:b3:0e:2a:9b:
7a:15:50:df:ea:a5:4f:e1:a8:28:25:fa:c5:0f:2c:48:bf:cd:
e4:73:04:8d:c2:75:dc:d2:b7:17:0d:67:46:eb:7e:97:8d:a8:
ad:43:0b:3d:f2:53:c1:35:f8:8a:20:fc:d0:6e:2c:63:0f:14:
fb:6b:6f:58:fe:9b:80:7b:cb:7a:c5:1b:fb:7b:ed:3f:5e:2d:
63:34:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:40:46 2026 by rpki-client