
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
File: ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft (raw, json)
Hash identifier: UCOit8y6S78CrpEXKfi4cb30/V2zs2V1FTMdSXqAQV8=
Subject key identifier: 28:36:C1:E1:AA:C6:49:D5:A3:C3:70:EC:FD:90:36:5A:E5:33:16:E2
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Certificate issuer: /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
Manifest number: 11
Signing time: Sat 03 Oct 2026 09:51:56 +0000
Manifest this update: Sat 03 Oct 2026 09:51:56 +0000
Manifest next update: Sat 10 Oct 2026 09:51:56 +0000
Files and hashes: 1: ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl (hash: K32eNtHVwjduaiHIyHVoCrQYYDfRtRSTUeUG6HV70J0=)
2: BCB00D18AA3411F199884E135211F970.roa (hash: ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Validity
Not Before: Oct 3 09:51:56 2026 GMT
Not After : Oct 10 09:51:56 2026 GMT
Subject: CN=6ac0d03c-6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:d4:3a:a6:83:eb:eb:22:d0:7d:6f:82:f5:
e5:53:fd:19:52:16:7f:3e:b8:d8:0b:73:d9:a0:82:
e0:10:62:bc:6f:11:89:20:b5:b8:fb:ee:0d:a6:7c:
e6:4b:e7:c7:32:2f:36:f7:26:9e:e2:9b:e9:0b:21:
45:a0:b0:f8:eb:46:20:67:04:74:95:b7:de:47:78:
f5:2b:d8:6e:b7:d9:cb:c8:a3:aa:d3:e5:ad:9f:84:
8b:bd:23:a8:0f:5c:03:d3:1a:35:9e:1f:31:f9:1d:
e1:f4:e2:f7:38:35:96:38:ad:cc:51:7b:b3:1a:c6:
5d:43:b8:41:79:60:0f:ef:4c:f3:ea:05:e3:c4:18:
03:88:3f:0c:f4:c1:62:5f:29:3a:cc:0b:10:d8:9f:
2b:43:05:09:43:4b:29:34:0d:d4:f5:9d:9e:d6:ba:
ca:f2:00:70:8d:c9:29:dd:bb:c6:92:e8:82:2e:59:
1b:20:d8:33:d8:e7:56:ed:22:39:84:b1:54:00:43:
ef:8d:71:98:fb:15:fc:a9:f0:f2:98:fb:39:0e:af:
62:d3:71:16:ee:6e:ec:12:61:fb:46:fa:35:84:27:
ed:d9:8b:82:c8:cd:c0:ce:80:d2:44:ea:09:ba:3d:
6f:05:00:f7:b3:37:29:38:ce:71:cf:b2:2d:27:27:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:C1:E1:AA:C6:49:D5:A3:C3:70:EC:FD:90:36:5A:E5:33:16:E2
X509v3 Authority Key Identifier:
keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:4a:18:98:42:85:50:9a:c4:9c:94:7e:c8:e6:ea:84:da:
4c:46:da:a0:ba:1f:0e:2f:3b:27:b7:4c:ba:a1:2e:02:09:f4:
bd:07:9d:09:7e:ac:21:fb:8d:44:07:9f:48:e3:5c:44:65:a8:
d3:ff:a6:41:22:3b:1e:62:82:96:ea:19:a3:d3:28:5e:a2:a8:
39:fd:80:64:73:ca:b2:66:06:e9:4d:fb:b0:75:db:8e:b5:f8:
e3:47:d6:81:31:78:8a:9d:63:1e:90:92:b1:bb:eb:15:1d:6d:
8a:80:6c:a9:bb:54:a0:66:4f:5f:07:e0:43:de:d2:68:eb:c6:
cd:00:7f:8d:79:b0:72:ad:dc:5d:f4:a7:90:02:fc:48:a0:b9:
f9:31:a5:38:ff:65:36:9a:1b:36:4c:42:ac:b4:5e:2c:9d:5c:
c8:2d:52:82:8e:70:b9:58:c2:73:1b:a3:7f:d1:47:83:4c:78:
10:60:ab:4d:a8:dc:c1:c0:24:6f:d6:ff:90:59:9b:55:bd:1f:
a7:5f:21:82:16:37:98:52:32:34:31:6e:f3:a4:d8:54:24:a6:
69:54:08:f1:45:d8:bf:06:a0:ed:9e:5a:35:fe:71:27:03:dd:
f5:f9:36:e7:a9:59:e9:6d:8e:ce:75:e6:8d:c3:c9:43:28:77:
73:df:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:42 2026 by rpki-client