
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
File: RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json)
Hash identifier: j/RhV+dGAhXuGBWRFMvDElx779/BsvXdwP2Mz1oZd5M=
Subject key identifier: F0:2A:DD:05:E0:84:C0:91:BA:2E:1A:AE:74:9F:0B:65:E1:17:C3:5F
Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76
Certificate issuer: /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
Manifest number: 015C
Signing time: Wed 04 Nov 2026 16:07:28 +0000
Manifest this update: Wed 04 Nov 2026 16:07:28 +0000
Manifest next update: Wed 11 Nov 2026 16:07:28 +0000
Files and hashes: 1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: vGymlN50qduGd1OWOMj1GzOIQ0VhseLhyPINcycrhOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl
rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 16:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
Validity
Not Before: Nov 4 16:07:28 2026 GMT
Not After : Nov 11 16:07:28 2026 GMT
Subject: CN=6aeb5840-d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:3e:9a:f3:8e:f4:0f:8d:ef:91:03:26:6c:
ed:67:d0:fb:4d:1a:6e:34:f8:df:47:23:af:a7:d0:
f5:6f:e9:2c:28:e7:f2:c9:f3:9e:9b:d8:ce:79:d2:
c1:7d:42:e7:e6:cc:ed:b5:09:0c:a4:ab:16:fc:ee:
b6:02:93:17:e2:f8:e9:5a:31:79:e7:f5:51:7a:a6:
dd:48:d2:2f:43:53:15:5f:8d:3b:4f:91:dc:d0:bd:
ae:25:37:eb:24:95:71:a5:c5:c5:f0:10:d8:fa:68:
b0:c0:51:a5:1d:f9:64:5b:ad:e6:98:76:9a:86:08:
06:b0:20:2a:22:87:c9:69:b7:97:91:0f:ca:97:3c:
79:01:1f:6d:15:7d:c4:3f:8c:c9:66:13:b8:4c:7a:
5b:86:a1:d3:4a:ba:51:66:b3:b1:97:7e:93:e1:94:
27:17:f6:d0:30:c7:95:4c:47:5c:5b:2e:a1:d2:4b:
82:ee:5f:01:3e:3f:0e:0d:d9:d4:8a:b4:6a:7c:d5:
4a:04:d1:91:8f:c0:96:36:3a:ff:94:d0:84:5f:5c:
0c:8a:1b:2c:61:64:a0:c2:73:98:5d:c5:18:2b:70:
db:ee:6e:a4:3d:08:f4:32:94:57:fa:74:b9:ba:62:
60:cd:c3:2c:c4:e7:3b:b2:4d:23:fe:0a:21:62:7d:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:DD:05:E0:84:C0:91:BA:2E:1A:AE:74:9F:0B:65:E1:17:C3:5F
X509v3 Authority Key Identifier:
keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:6b:e4:d7:a5:ef:a1:b4:18:07:3a:6b:f7:03:1e:92:d0:2d:
76:de:b1:17:d2:79:42:11:6a:1d:ba:91:12:c6:1a:78:fc:4f:
22:1f:25:3b:ad:73:15:10:5a:6c:b9:ce:58:a9:be:43:13:0f:
ab:67:c7:aa:f4:ac:df:df:d6:7a:ad:0a:2c:5a:88:8a:ad:2a:
83:28:4f:d5:db:4a:00:6d:f9:a6:a5:50:93:99:39:1e:dd:32:
6e:95:c5:1a:8b:f9:55:69:63:ca:e9:13:04:d7:c4:21:01:2d:
37:0c:81:89:a6:ee:57:46:07:8a:52:46:68:a3:c9:ec:dc:46:
63:69:a2:aa:bc:4a:43:44:b4:d0:1b:3b:60:f0:8b:6c:eb:64:
7c:df:78:6e:37:35:96:fc:12:2a:62:d9:80:c6:ed:70:18:a5:
f8:b1:4a:70:5c:7c:eb:2b:64:c6:ca:01:fe:ff:d7:78:7d:61:
b5:8b:1a:1a:6b:e1:c6:58:b9:7e:fb:ef:38:97:22:a2:ff:67:
a5:4a:d1:54:a4:16:a1:74:2b:40:e9:3f:e8:19:84:18:05:d5:
ec:c2:d2:03:f8:b2:79:dc:6a:f4:e1:05:38:76:5c:ce:cb:dc:
b4:aa:ae:ca:5f:a2:ff:be:cd:f5:ef:04:c2:32:42:fd:e7:a8:
9d:16:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:32:19 2026 by rpki-client