
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier: KCzmjoCtK7v2eJ9W1Z0lqGVH660SSaPSOSjuEUDFO/Q=
Subject key identifier: D3:7E:65:DF:4F:93:A5:23:F4:B8:9E:FF:E5:A5:1E:D1:DE:11:6B:5F
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial: 10A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number: 1098
Signing time: Sat 26 Sep 2026 17:24:59 +0000
Manifest this update: Sat 26 Sep 2026 17:24:58 +0000
Manifest next update: Sat 03 Oct 2026 17:24:58 +0000
Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: D08wtD526XgJRlISXaMbPR2hVSV30dpKPDDLq7sXdN0=)
2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4258 (0x10a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Validity
Not Before: Sep 26 17:24:58 2026 GMT
Not After : Oct 3 17:24:58 2026 GMT
Subject: CN=6ab7ffeb-7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:f4:78:31:56:ac:03:44:b3:77:c7:70:52:
5b:b9:d6:ee:f3:25:73:d7:35:c3:b7:9b:f1:1f:3d:
2e:76:c4:ce:94:85:3f:3b:dc:19:a6:79:21:71:d3:
e4:33:18:dc:ab:a3:49:af:b7:ea:e2:d3:04:70:b7:
f8:c4:05:a2:5b:dd:8c:49:63:64:c8:b3:f9:f1:45:
ca:45:ea:38:2d:99:c1:9b:b6:22:c3:c0:e7:0c:4b:
f7:43:ca:68:38:ed:d2:14:e6:d4:fb:96:fd:d9:8f:
f1:75:41:f0:b3:61:0a:50:21:26:12:61:23:e9:d2:
49:3a:54:b4:36:56:ec:70:6a:6a:3e:3d:b2:d6:43:
a2:ba:bf:04:44:78:64:bf:3b:3e:b6:fd:ea:c2:c7:
5e:25:1c:ff:a5:4d:f7:78:d5:64:bb:47:05:c9:a3:
88:b0:12:5a:f7:00:d0:9e:2a:a1:cc:e0:e8:93:d1:
11:80:99:79:b6:78:2d:fb:3d:6b:3f:af:4e:f5:d3:
5b:4f:11:fc:9b:65:03:29:c8:f3:7e:b5:e2:8b:1f:
7c:5c:6a:e4:3b:84:8c:dc:36:78:7d:10:ee:51:38:
2a:6e:4f:e1:a9:1f:99:10:ed:2a:90:0e:92:fa:78:
bd:e3:27:1f:00:b4:44:cd:8c:44:78:60:6d:6b:cd:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:65:DF:4F:93:A5:23:F4:B8:9E:FF:E5:A5:1E:D1:DE:11:6B:5F
X509v3 Authority Key Identifier:
keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:73:4f:4c:f0:3b:f6:7e:46:b7:fd:cb:a2:f7:e0:0f:39:
46:41:e9:50:3a:ac:cf:d4:de:31:64:b8:dc:ef:9f:bc:1c:f3:
d7:14:97:d3:3e:46:20:0a:49:f8:7a:6e:ec:01:d5:bd:10:fe:
42:e0:0f:6a:0a:08:86:19:a2:ad:33:72:2b:7a:18:a8:69:60:
c8:06:93:43:50:91:ec:40:28:51:23:8b:49:20:37:ec:38:81:
fc:37:fd:c5:8f:fa:46:24:37:26:ff:c8:87:9a:d8:ef:b0:4e:
f5:11:b7:f9:7b:f1:32:8c:ab:b1:63:a4:e2:12:6c:8c:e5:c6:
8d:a4:f0:c3:1d:0f:d3:4a:29:6a:dd:0a:89:46:6d:2e:1e:35:
7f:bc:0c:c6:7c:54:eb:d5:db:5a:c9:6d:8c:95:34:29:08:cf:
66:43:c4:fd:f7:55:f1:47:3e:87:82:e2:d1:5e:41:47:8d:3a:
62:df:cf:3d:94:4c:9a:7e:6f:72:f3:b1:87:d7:7b:41:f8:70:
59:d6:bb:12:b4:88:14:56:60:4e:1d:de:7a:bf:04:bc:d2:c4:
34:27:36:8e:49:e8:cf:98:de:c6:6f:0f:2a:59:9a:cb:c3:0a:
eb:f0:7b:6d:d0:22:f2:ff:5e:95:fb:0f:89:fc:66:bd:ff:66:
bb:5a:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:49:00 2026 by rpki-client