
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: BqEhjVyvErQv7CXf7AtIeU8tDdf5WM085Ffm8Xfm8gM=
Subject key identifier: 1E:10:A1:EB:2E:84:BE:42:E0:CB:43:D7:6C:33:A0:CE:07:90:B9:D5
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 0245
Signing time: Wed 23 Sep 2026 02:24:15 +0000
Manifest this update: Wed 23 Sep 2026 02:24:14 +0000
Manifest next update: Wed 30 Sep 2026 02:24:14 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: aQ14eNbpIKxYVg65tB6h134BIxh+oYf5smiVwPRvkU4=)
2: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
4: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Sep 23 02:24:14 2026 GMT
Not After : Sep 30 02:24:14 2026 GMT
Subject: CN=6ab3384f-8652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:b8:5f:1a:70:b3:8a:90:a2:e8:56:e3:e6:
0d:49:a0:38:ed:50:2d:bd:5a:0a:fd:b1:3b:41:53:
d4:83:34:a5:9a:28:cf:e8:f8:74:0e:01:1d:2c:d1:
18:7f:3a:9c:8d:ed:62:f7:8f:2b:d9:38:09:71:74:
7e:34:45:3d:59:44:e4:11:b2:e9:e3:d4:36:38:56:
f3:16:bb:b5:04:8e:88:99:d9:ed:26:87:20:ea:b4:
b1:1a:9b:7e:e5:91:fd:e7:de:b8:23:b0:01:0b:2e:
c4:e5:90:ab:13:b3:9c:df:52:c7:88:22:7d:07:86:
e1:93:63:60:0f:ba:34:13:9e:d8:0e:d2:e7:9f:e1:
71:7c:c7:e1:a7:f8:dd:0f:cf:e3:90:4f:41:f2:da:
e6:f2:76:72:6e:47:e4:3f:28:0b:c5:e0:10:86:83:
ec:92:d9:44:6c:c4:ac:2d:4c:10:5f:be:70:fa:ee:
4f:da:02:34:c4:f6:28:01:d6:8e:36:60:1a:76:83:
69:ba:48:85:af:77:33:03:bf:c5:b6:70:3b:49:43:
06:9c:6a:c1:59:49:87:63:95:59:43:38:4c:b6:54:
53:7a:16:0f:84:83:ea:57:e5:70:b0:8b:91:e9:7b:
c2:e4:39:8d:d4:2a:d4:7b:bf:83:7e:1f:cc:00:df:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:A1:EB:2E:84:BE:42:E0:CB:43:D7:6C:33:A0:CE:07:90:B9:D5
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0b:2d:bc:d5:47:89:d0:ed:c5:73:6e:f3:76:86:1f:41:9f:
5b:f7:78:f3:4a:a2:c4:b6:f8:1d:6e:49:66:32:4c:87:95:51:
50:ee:73:ba:3c:88:68:47:50:0d:4e:0f:60:1b:f4:6d:64:84:
46:67:d6:f1:57:9e:ef:52:af:de:06:0b:10:1f:75:14:49:0e:
c5:fc:9e:79:a3:5b:ea:ab:e4:8d:a2:7f:89:ad:ad:6e:b8:c5:
6e:34:e4:0d:0d:72:b6:17:78:87:f7:1d:a9:7b:fd:b5:72:e8:
5c:c1:7e:35:9d:7a:39:57:8a:a5:5f:02:c6:25:e2:7f:28:b1:
ae:bc:cd:72:e4:9e:9a:86:e5:25:a9:ac:d0:70:6f:0c:55:b2:
a9:22:27:22:b3:25:fb:83:7c:66:f7:3c:6f:e9:7e:27:91:1f:
dd:68:3b:1c:66:5c:3e:68:12:9c:8d:c6:10:6b:cf:ba:67:30:
c3:2a:aa:e3:fd:19:16:c5:ae:4d:60:55:4e:02:df:bf:74:32:
de:51:9d:a8:af:ad:28:4a:f8:d9:35:06:81:a8:24:71:cb:49:
bc:40:05:12:9b:49:73:09:0d:ef:8e:dd:b5:3b:79:22:b4:e4:
47:1e:fc:87:2b:b3:9a:ac:39:33:e9:b5:1f:a5:32:8d:e5:be:
c3:44:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:22:57 2026 by rpki-client