
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier: h4HgbSoRZqlDXx45HapXD5u/GcEpYAIetbVrTuv3mYo=
Subject key identifier: 4D:A5:A6:2F:AD:B3:17:46:6C:5A:D8:9E:4C:44:01:5D:D7:C8:7E:DD
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 06:34:21 +0000
Manifest this update: Sun 11 Oct 2026 06:34:20 +0000
Manifest next update: Sun 18 Oct 2026 06:34:20 +0000
Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: /jFsAc87Sc9cFHQJibSyWDGMcIwy3wZo3EpaEwNCqbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Validity
Not Before: Oct 11 06:34:20 2026 GMT
Not After : Oct 18 06:34:20 2026 GMT
Subject: CN=6acb2ded-2ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:49:c4:2b:a7:74:dc:a9:59:f6:c1:da:8d:
a6:ed:5f:5d:ae:f4:d4:88:f8:57:2f:69:af:71:eb:
1b:ed:88:eb:aa:31:84:ef:b3:42:17:94:bb:72:a4:
6b:f0:c4:65:cf:25:57:75:8c:85:22:1f:dd:19:d3:
4d:72:b9:0f:c7:a9:8c:9d:5c:cd:34:c7:a7:c9:93:
ff:05:9f:61:f9:8a:eb:78:f8:9a:f1:c7:83:ee:ca:
1e:ca:d8:60:7f:11:0c:80:ad:82:fd:51:89:d3:e1:
4a:17:f6:3a:3c:e0:4d:01:89:ad:6b:12:3c:36:a8:
b1:ba:ab:25:97:2a:c6:21:08:fc:39:ac:0b:9b:0a:
3e:5f:27:19:aa:c3:52:d1:f0:0b:06:c5:f2:28:60:
6f:7c:fe:20:46:28:86:46:b5:5a:c7:aa:f1:0d:55:
16:43:3f:4e:45:9d:04:d7:10:c1:84:e1:39:4d:33:
65:3e:b3:57:8e:3e:37:06:62:cf:52:80:fc:48:d9:
98:e4:a8:d2:30:d7:48:62:80:f0:6a:1d:e3:da:49:
4a:9e:d3:ef:4c:19:d1:48:cd:c6:40:1e:04:ce:dc:
e3:79:e3:88:f5:68:99:d8:4f:2f:f1:ba:c9:bd:cf:
a8:a1:32:b8:26:22:b8:2a:c5:30:7b:d9:d1:1c:8b:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:A6:2F:AD:B3:17:46:6C:5A:D8:9E:4C:44:01:5D:D7:C8:7E:DD
X509v3 Authority Key Identifier:
keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:e1:95:90:a2:f5:aa:26:09:e3:1b:67:19:87:47:da:b7:
60:04:1d:76:20:7c:9f:a2:18:26:70:78:b8:81:c1:8d:c5:db:
0f:b6:28:4f:e7:27:0a:15:6a:f3:b2:03:b5:50:d3:f0:8c:92:
fe:87:fa:42:d9:70:25:32:eb:fb:86:2a:6d:4c:e6:28:e8:ab:
af:ac:a2:32:26:74:e5:fb:ee:ec:f5:7f:30:dc:65:10:43:c5:
ea:b1:dc:fb:e5:dc:7b:7d:13:8b:4a:e6:45:2d:86:e3:cd:dc:
c5:e0:ce:6f:42:d6:b8:2e:f3:40:83:5e:4d:e2:39:6b:ec:c8:
7b:81:dc:88:7b:9a:39:e8:8c:2d:ac:bf:6f:3c:64:4f:82:18:
a3:e3:90:52:3a:8d:8b:a4:bb:17:a6:ef:51:4c:49:a5:4b:4a:
6d:6f:e1:24:31:df:50:6e:ad:ab:a6:ec:39:9a:2e:7b:bd:f9:
84:43:f1:1a:ae:06:0e:4f:ba:2c:25:ac:3c:14:b0:2e:30:70:
f0:60:81:e3:76:21:cf:e1:2b:1a:9f:4a:ea:09:37:b8:94:66:
c1:f4:2c:0d:66:0e:c2:07:b0:90:9c:c1:43:83:e3:f9:f0:de:
0f:e2:97:50:f2:15:20:e4:62:82:06:d7:7e:71:d8:e2:df:a6:
1a:54:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:52:26 2026 by rpki-client