
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json)
Hash identifier: ulIWRebglzwNCzDLEu8Ld/3Fm/RShHzfiBVC8ybnvMo=
Subject key identifier: BD:6E:B3:27:FA:5A:DE:57:E1:35:79:4A:3E:8A:50:47:17:DC:EA:D4
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
Manifest number: 02B6
Signing time: Mon 21 Sep 2026 01:26:50 +0000
Manifest this update: Mon 21 Sep 2026 01:26:49 +0000
Manifest next update: Mon 28 Sep 2026 01:26:49 +0000
Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: FbNcAAOm62MFc+xlFOVnRugCjCHnvcf3v4XSbWv02iU=)
2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: OwTmdvXh/fVgIelq52MoT3QNfZLp7zkcbYsPTc6P3yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Validity
Not Before: Sep 21 01:26:49 2026 GMT
Not After : Sep 28 01:26:49 2026 GMT
Subject: CN=6ab087d9-f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:3a:93:5b:fe:e0:73:33:ee:79:a0:c4:e8:
f5:08:98:f2:57:e2:15:76:33:6d:4c:dc:ba:38:5b:
44:ed:25:73:02:8f:0f:b3:16:33:2a:13:30:93:d4:
25:4d:79:e8:b1:26:fa:b5:09:a8:52:53:24:db:27:
fa:1e:76:f4:07:ec:b6:91:ed:ef:f5:d7:1a:1d:38:
da:60:76:02:96:fc:30:91:b9:e9:d4:96:d6:51:a2:
73:e6:52:bf:6a:2d:64:75:39:16:0c:a6:8c:50:64:
72:8d:3f:cd:58:b2:3b:b0:ae:13:ca:1d:a9:9a:d1:
51:2a:c5:5b:67:4f:6a:42:07:a0:85:86:3c:50:ca:
98:71:a1:9c:ce:b8:b8:9e:7b:ab:9e:94:d1:2c:74:
cf:a1:44:e4:1d:a6:f1:dd:9b:a7:a9:2b:d1:5b:bc:
40:59:dd:36:6b:a3:dd:ca:f6:56:9f:38:67:86:36:
b1:5e:78:87:81:dd:37:14:b4:41:be:b7:a6:e7:1b:
62:90:bd:a7:d2:46:25:57:e9:f9:08:c1:29:d9:e5:
0d:94:8e:97:82:46:53:13:92:81:60:ab:0d:2e:ab:
5c:84:90:b7:e2:c9:e8:4e:ad:43:4b:7c:ff:df:dc:
45:8f:6e:f0:f7:0a:c9:ce:3f:28:2a:57:9d:71:36:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:B3:27:FA:5A:DE:57:E1:35:79:4A:3E:8A:50:47:17:DC:EA:D4
X509v3 Authority Key Identifier:
keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:af:99:cf:47:60:b0:66:bf:2e:c9:e4:c8:09:48:08:b5:
07:b4:c0:cf:d8:d5:d8:46:f1:01:39:6b:12:31:8e:58:fa:0b:
a9:ac:97:fe:4b:b4:99:33:c7:ba:75:82:5f:75:ed:03:e8:c8:
33:28:9b:1a:34:e5:22:58:a0:a8:a5:12:3c:df:79:73:1d:79:
d3:24:e7:3c:a1:39:30:2c:30:bc:bb:9b:6e:22:66:3f:06:f9:
35:1a:93:d4:4f:cb:f2:6b:ff:36:09:e5:c5:ce:9e:85:e9:57:
b0:57:c4:60:be:97:f1:0b:82:5b:e3:2e:69:2c:2e:44:60:80:
be:79:64:ff:c3:32:55:0e:83:da:a2:4c:ec:a6:5e:b9:0f:2b:
a8:23:60:bf:a1:c2:96:4c:c7:a7:40:cf:4d:d8:ea:a2:a0:51:
ba:d2:2d:08:ea:ce:79:f6:28:54:0f:1c:c5:de:66:9d:dd:76:
2f:bf:36:d1:ae:b4:92:f1:e7:13:9c:1f:57:7a:1c:1d:5b:0a:
84:91:83:de:71:a0:06:cc:0d:e5:c1:3e:68:36:09:bf:2d:42:
46:13:ee:5c:ae:5f:67:1a:b0:d8:7b:0c:0e:dc:48:8c:b2:90:
a0:d0:cc:8c:2d:09:06:43:17:da:72:78:f2:65:b2:11:1b:83:
81:5f:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:09 2026 by rpki-client