
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
File: JgCH2u-Rng2r-KLILwGF1RyYfFE.mft (raw, json)
Hash identifier: +CRcYuB/NjgKuKD8Nq7n6Fp1pLdEAYJVfWisR5c1vKo=
Subject key identifier: 18:2E:E0:20:1C:05:A0:7D:9B:32:AF:61:22:D8:3F:31:1D:6F:B7:31
Authority key identifier: 26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
Certificate issuer: /CN=A91B8782/serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
Manifest number: 17
Signing time: Mon 21 Sep 2026 08:58:52 +0000
Manifest this update: Mon 21 Sep 2026 08:58:52 +0000
Manifest next update: Mon 28 Sep 2026 08:58:52 +0000
Files and hashes: 1: JgCH2u-Rng2r-KLILwGF1RyYfFE.crl (hash: vEkgQZdWDlErJljb3mX9eyyDvW6JNAEWZ4cV5qtmc2g=)
2: F88E2564955211F19EAEED7D6411F970.roa (hash: pKiZMTH93sR7vU9mFLBYmtO9yBYDCzaSyoBxrPbbRDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8782, serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Validity
Not Before: Sep 21 08:58:52 2026 GMT
Not After : Sep 28 08:58:52 2026 GMT
Subject: CN=6ab0f1cc-c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:d9:3d:ba:01:ed:87:e7:33:85:6f:ed:96:
5d:f6:00:58:8f:cb:58:d4:45:2c:a1:31:f5:97:aa:
6d:56:e2:04:d5:4a:52:45:40:e0:03:46:3c:f6:b2:
6e:f3:63:53:e2:d7:e3:0a:6a:09:24:1d:60:63:fa:
26:fc:f5:32:34:9d:94:3c:28:44:55:77:36:49:1e:
5d:1d:14:ed:66:93:24:2f:30:dc:08:8d:cf:65:f2:
5f:46:4c:25:05:6f:b8:10:9a:ff:4c:61:a6:2e:59:
bb:09:ad:7e:d9:2e:bf:39:98:6a:de:54:4b:e5:d7:
04:65:d4:c3:5b:fb:88:9f:a0:d0:d5:9a:44:dd:fd:
cb:6a:ed:84:3d:54:4e:90:b9:d6:98:4b:f3:98:bb:
64:61:ff:a0:a7:3f:82:80:89:e1:bc:1f:1a:96:cd:
49:6b:ad:bd:6a:41:0d:aa:9d:15:3c:a4:c3:a8:72:
99:ce:a7:a1:8c:60:56:cc:7b:d2:66:e7:d6:8d:65:
dd:8c:3a:70:0d:0f:db:3c:86:83:bc:40:0b:5e:e5:
ef:4d:b0:d8:56:ba:49:7b:d1:95:94:87:83:04:46:
e3:6a:84:8f:2c:24:1b:8e:e9:49:6b:78:31:65:0b:
ec:5c:e8:b4:5e:41:c6:a1:a1:da:3b:c7:3a:0a:99:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:E0:20:1C:05:A0:7D:9B:32:AF:61:22:D8:3F:31:1D:6F:B7:31
X509v3 Authority Key Identifier:
keyid:26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5c:9d:6d:87:e4:c0:90:69:64:f6:c3:87:5b:af:c7:2d:e9:
90:dd:bf:56:4e:07:dd:9d:90:c3:2f:f4:6f:dd:56:4e:15:c4:
8d:14:9c:e6:a8:5a:93:38:37:0d:a3:da:39:da:b1:8b:e9:80:
5e:4a:28:58:fd:a8:a5:e4:60:85:d5:7b:24:3b:f1:2b:20:c9:
fe:83:e3:21:8e:bc:c2:82:6f:f8:98:ef:13:ee:78:9f:81:39:
f5:2a:5b:1b:ac:f7:11:21:2b:ce:3f:f8:42:8a:ed:41:c0:51:
ba:bb:fc:6a:fc:ef:f5:dc:1a:4a:9a:06:ee:88:28:93:72:e0:
3a:41:9e:47:bc:bc:4e:e9:3f:8e:45:75:ae:32:d2:a9:8d:a0:
b1:02:42:d5:e6:dd:86:85:3a:05:7c:e7:0e:57:62:37:4b:0f:
7b:06:0b:6d:84:6b:96:c2:71:47:15:c6:95:54:3a:d0:0b:2c:
a1:08:d4:f3:81:b6:23:37:77:81:a4:e1:0b:99:e1:d7:ca:a6:
cd:12:74:7f:2c:bb:bd:e7:80:bb:9b:e7:0a:8d:65:57:c0:7d:
0e:1a:0e:e3:c4:e0:23:61:17:2d:6b:25:81:19:3b:4e:5e:fd:
96:7f:ef:46:49:32:48:1e:11:d2:90:94:4c:d3:c8:cc:2e:d3:
c6:d6:25:b6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODc4MjExMC8GA1UEBRMoMjYwMDg3REFFRjkxOUUwREFCRjhBMkM4MkYwMTg1RDUx
Qzk4N0M1MTAeFw0yNjA5MjEwODU4NTJaFw0yNjA5MjgwODU4NTJaMBgxFjAUBgNV
BAMTDTZhYjBmMWNjLWM2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ99k9ugHth+czhW/tll32AFiPy1jURSyhMfWXqm1W4gTVSlJFQOADRjz2sm7z
Y1Pi1+MKagkkHWBj+ib89TI0nZQ8KERVdzZJHl0dFO1mkyQvMNwIjc9l8l9GTCUF
b7gQmv9MYaYuWbsJrX7ZLr85mGreVEvl1wRl1MNb+4ifoNDVmkTd/ctq7YQ9VE6Q
udaYS/OYu2Rh/6CnP4KAieG8HxqWzUlrrb1qQQ2qnRU8pMOocpnOp6GMYFbMe9Jm
59aNZd2MOnAND9s8hoO8QAte5e9NsNhWukl70ZWUh4MERuNqhI8sJBuO6UlreDFl
C+xc6LReQcahodo7xzoKmUI/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGC7gIBwF
oH2bMq9hItg/MR1vtzEwHwYDVR0jBBgwFoAUJgCH2u+Rng2r+KLILwGF1RyYfFEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4NzgyL0IyODlERUU2OTU1
MjExRjFCMkQxRDcxMzY0MTFGOTcwL0pnQ0gydS1Sbmcyci1LTElMd0dGMVJ5WWZG
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmdDSDJ1LVJuZzJyLUtMSUx3R0YxUnlZZkZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
NzgyL0IyODlERUU2OTU1MjExRjFCMkQxRDcxMzY0MTFGOTcwL0pnQ0gydS1Sbmcy
ci1LTElMd0dGMVJ5WWZGRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC3XJ1th+TAkGlk9sOHW6/HLemQ3b9WTgfdnZDDL/Rv3VZOFcSNFJzmqFqTODcN
o9o52rGL6YBeSihY/ail5GCF1XskO/ErIMn+g+MhjrzCgm/4mO8T7nifgTn1Klsb
rPcRISvOP/hCiu1BwFG6u/xq/O/13BpKmgbuiCiTcuA6QZ5HvLxO6T+ORXWuMtKp
jaCxAkLV5t2GhToFfOcOV2I3Sw97BgtthGuWwnFHFcaVVDrQCyyhCNTzgbYjN3eB
pOELmeHXyqbNEnR/LLu954C7m+cKjWVXwH0OGg7jxOAjYRctayWBGTtOXv2Wf+9G
STJIHhHSkJRM08jMLtPG1iW2
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:25 2026 by rpki-client