
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: Oun6NyHoHestJlu3kAcTb24tQYzRFI5cNOASNXXyd8Y=
Subject key identifier: 07:1C:08:B4:4C:B8:5D:0A:A6:E1:16:D8:02:D6:F0:74:B6:FF:7B:58
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 018D
Signing time: Fri 25 Sep 2026 04:32:06 +0000
Manifest this update: Fri 25 Sep 2026 04:32:06 +0000
Manifest next update: Fri 02 Oct 2026 04:32:06 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: 1iaBeHO8/nq8hRO9z69J2lcOwP267Otk+eezndhkNhE=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: GSL6x7fwjG52yvGiYM5M3VKdczF3X7Rwnq0vzDl4uSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Sep 25 04:32:06 2026 GMT
Not After : Oct 2 04:32:06 2026 GMT
Subject: CN=6ab5f946-28dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:c7:37:f2:82:11:5b:ba:ff:ef:8b:1a:e6:
a7:c7:81:4e:3b:fe:8d:18:59:40:69:c5:4b:05:c1:
2a:74:d8:b0:42:93:53:4d:0c:4f:c1:e6:10:99:01:
14:64:46:d8:2d:cb:51:5c:39:c1:c1:c0:e5:e6:76:
30:a8:6a:7c:b2:cd:4b:7f:5e:02:43:d7:80:94:31:
87:ac:0a:92:27:c4:87:ec:5a:9d:ee:a2:6d:be:14:
31:10:c9:bf:b2:6f:e1:33:18:13:fb:b6:b9:fe:49:
0b:3d:e5:f2:7f:d7:58:81:f8:5a:b1:04:67:81:02:
ee:f9:99:2b:b9:8d:7b:ab:ed:20:f3:45:b3:a2:c9:
ac:ce:09:a0:24:56:79:00:6c:01:aa:e3:ce:b7:1a:
47:ad:94:fa:d9:d7:79:af:24:be:68:bb:50:34:d8:
d1:af:22:30:57:d8:86:37:fb:a3:43:2e:06:37:43:
c1:4c:c6:42:ef:30:52:38:02:c6:62:71:21:92:57:
d3:57:4f:38:d7:4d:3b:db:50:43:04:bd:e1:7f:e9:
1e:f8:8d:d5:d7:2a:71:d3:23:85:58:39:26:79:5f:
61:92:a7:28:ef:49:61:a6:ef:7b:e3:ce:5a:a0:17:
c8:93:6e:e4:36:05:b0:77:5f:07:fa:97:93:3b:f0:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:08:B4:4C:B8:5D:0A:A6:E1:16:D8:02:D6:F0:74:B6:FF:7B:58
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:17:6c:7f:c6:03:e0:d7:34:45:f0:50:bc:f4:41:b1:7c:a5:
a4:b7:35:a2:e4:bb:d0:13:2d:08:91:be:b2:d6:bd:ab:93:60:
d1:ad:12:15:5a:6b:db:18:d3:f3:e3:0e:d1:14:1e:c9:dc:d6:
b6:3c:98:92:ac:70:bf:46:47:91:70:b8:1a:0a:13:9d:75:9d:
19:6d:68:e4:fb:47:dc:03:f5:6c:07:02:7d:cd:c0:46:61:ff:
89:df:1f:12:3f:c9:9b:ca:7c:a8:93:79:d1:3b:41:bf:32:43:
93:a6:7b:dd:a4:83:d7:5b:32:0c:a9:55:73:11:ab:91:56:d2:
a5:a0:aa:9f:0b:93:87:69:a8:c0:0c:33:b4:8c:9a:77:57:a3:
b8:86:6c:b7:97:73:8e:46:1b:b9:92:00:8a:ba:d4:6b:bb:fc:
52:5a:cd:48:50:dd:8e:45:50:f7:22:ab:26:3c:8c:7c:32:9a:
02:33:6c:41:a8:dc:cb:4d:5e:9c:80:ec:ce:ff:f6:90:2d:8f:
0f:ce:70:38:1e:ea:bd:6c:f7:24:4c:86:9d:cc:76:dc:34:62:
2e:f3:c3:27:e6:31:c4:ee:23:0d:ca:d5:b2:07:55:9c:c7:3d:
10:74:58:cb:be:89:c7:c6:fb:bf:38:a5:07:a1:32:7b:99:eb:
8d:48:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:24:08 2026 by rpki-client