
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier: V2aexj/denbbh0NsKyzw3lVykxgoHdes9YxSuOskCiA=
Subject key identifier: 89:6F:C8:C0:CB:2F:2C:97:C8:89:F2:8F:40:C3:FC:57:0E:58:C8:70
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number: 0B15
Signing time: Tue 22 Sep 2026 19:24:46 +0000
Manifest this update: Tue 22 Sep 2026 19:24:46 +0000
Manifest next update: Tue 29 Sep 2026 19:24:46 +0000
Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: ORYgHaoJfEqGOyzw8AC+nsNjDAMENbceMjV6ieuOw9c=)
2: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
3: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Sep 22 19:24:46 2026 GMT
Not After : Sep 29 19:24:46 2026 GMT
Subject: CN=6ab2d5fe-a8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:b5:a6:02:83:aa:10:13:2c:6e:e0:8f:13:
d4:df:50:5b:c3:4b:b1:29:46:96:9a:55:8d:a9:e3:
1b:ad:4c:38:11:f1:60:3f:e6:99:9c:87:23:f6:81:
a2:44:a2:39:9b:4e:3c:9c:3c:84:d8:fa:2a:a8:c4:
1b:a6:5c:b9:3f:f9:7d:88:60:c6:7c:d4:92:a7:cd:
29:5a:64:13:d2:56:67:bc:57:7b:e6:5c:dd:73:32:
0b:17:2c:00:ae:ab:41:b9:3c:ed:82:61:9f:6a:40:
c8:00:6b:ef:42:a5:d8:05:f2:6d:d8:90:04:e7:91:
22:5f:9e:31:7a:33:8d:2a:f1:7e:11:aa:c1:f2:14:
ec:3d:eb:76:d8:74:66:74:b2:10:4d:72:8b:e5:c6:
53:ea:1f:35:ee:60:c6:d9:fb:16:cb:73:f3:ef:0b:
a1:dc:79:a4:41:ce:e5:17:94:86:9e:2d:6a:65:97:
d5:cf:75:01:15:50:23:e8:c4:25:e7:1d:1d:e8:51:
31:3c:66:04:60:ae:1d:6d:24:60:db:14:da:34:d0:
61:df:ff:9a:84:d0:9d:f0:24:bc:80:02:a7:2a:c7:
d5:d5:97:54:4d:eb:76:a0:6f:c8:3d:c2:06:e2:78:
69:bc:f8:89:51:05:6b:85:07:ff:10:5e:94:14:01:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:C8:C0:CB:2F:2C:97:C8:89:F2:8F:40:C3:FC:57:0E:58:C8:70
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f7:66:92:ad:cc:e2:9d:20:d8:c7:96:10:f9:92:a1:80:cc:
09:4a:4d:d9:82:a1:33:5f:94:d7:0c:5f:2e:11:d7:cd:bb:40:
d9:03:7d:e7:ab:fd:69:9a:95:16:b4:3c:dd:10:fd:10:94:e3:
90:99:00:70:3d:7b:2a:8e:36:49:51:82:e0:15:c4:4e:e4:e7:
b4:aa:98:71:1c:e6:5d:93:7a:38:8f:a2:4a:97:5d:75:1b:78:
8a:57:24:2b:2a:8e:70:24:c9:6c:b1:c1:f7:08:19:73:06:b1:
43:9b:46:d8:81:e7:b6:b0:7b:56:e7:55:cd:fa:63:7e:ea:bb:
f0:4f:6e:12:48:38:0b:06:46:9c:7d:35:dc:9d:0e:22:3e:d6:
7d:de:f5:71:3c:ff:9b:ae:20:4b:e0:f9:56:73:be:bc:ad:74:
a8:51:54:32:00:c2:32:12:5b:a9:1f:e0:23:a6:fd:80:78:4f:
e0:aa:59:e8:92:f7:d0:01:38:49:42:84:ea:11:0d:57:79:4a:
bb:b5:15:a8:20:aa:5a:81:5e:ed:f0:16:5f:29:83:80:58:c7:
bf:27:17:13:c8:ca:82:69:e4:1d:ab:6c:27:5f:9a:5e:19:50:
86:e3:68:48:5a:25:fb:e5:97:2a:2f:44:1a:f2:4c:e6:57:d8:
11:c1:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:28:17 2026 by rpki-client