
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier: jWVMAMj1fImKGVubEWCURg47NM1bFUJMOkhq9c+3q5I=
Subject key identifier: A0:0D:DB:73:6C:B1:4E:10:DF:CE:2C:94:79:01:C2:C8:BC:F5:ED:6B
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number: F8
Signing time: Tue 29 Sep 2026 06:47:11 +0000
Manifest this update: Tue 29 Sep 2026 06:47:11 +0000
Manifest next update: Tue 06 Oct 2026 06:47:11 +0000
Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: BLtJHt85uxiprMa9hf53iZMh/B8LW4wDE+nDKlk2K4Y=)
2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Validity
Not Before: Sep 29 06:47:11 2026 GMT
Not After : Oct 6 06:47:11 2026 GMT
Subject: CN=6abb5eef-d4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:12:2f:97:ac:de:04:16:47:99:55:45:5e:
fa:b7:30:1d:5f:96:9b:46:e1:7a:dc:ee:07:6c:19:
f9:23:af:76:12:78:83:69:b3:10:9b:58:e4:44:24:
b7:34:9a:de:ed:09:32:32:8c:dd:4a:50:74:04:22:
aa:89:b3:ed:43:a0:7f:e7:68:4f:b2:13:9b:fd:ba:
d5:58:0c:3f:3f:24:ea:10:16:c1:d2:11:91:32:8c:
02:d5:cc:58:21:70:01:b3:29:07:11:a5:b7:19:56:
87:f9:c1:31:12:97:9d:84:b7:2e:66:0a:da:63:9c:
c6:36:a9:6d:7e:22:e1:86:85:b7:b4:87:93:52:cb:
7f:ba:9e:40:5d:07:20:e5:f8:e2:99:06:7d:07:e5:
7e:43:ab:6c:33:b0:79:81:ca:f6:ed:13:64:7c:f8:
12:c6:79:48:01:bc:b8:06:f5:88:78:3d:e0:a0:45:
bd:6a:ac:70:82:41:4a:d4:06:b5:91:a0:e7:43:bd:
6b:b1:28:a6:96:c5:f5:0f:f5:24:45:95:fd:21:0c:
d3:6d:b7:5a:ef:21:47:07:c8:97:7e:80:b2:ce:8e:
8d:7e:44:a1:ec:7a:2e:2f:46:0a:99:13:c5:78:d4:
d3:c4:ca:95:7f:48:18:88:0e:04:21:5d:da:af:36:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:DB:73:6C:B1:4E:10:DF:CE:2C:94:79:01:C2:C8:BC:F5:ED:6B
X509v3 Authority Key Identifier:
keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:f4:36:2b:ea:91:04:c3:e1:cf:a8:2b:3f:e9:8f:c7:43:
b8:d8:a1:4c:8b:e1:5c:b8:54:43:31:7a:ca:d7:1c:c0:9c:20:
dc:b4:f4:ba:a4:af:30:f3:4a:0e:0a:b7:ad:9e:91:6c:4a:b9:
b0:79:e3:22:cf:92:8a:44:5e:86:d8:b8:ef:ec:0a:7f:08:0a:
e6:e1:dd:6f:36:66:0b:e0:e2:ab:9a:49:50:f6:1d:74:4f:89:
97:75:64:69:6c:bc:3b:b0:bc:e1:65:55:9d:34:89:26:24:d9:
09:9d:da:73:3d:6a:7d:eb:42:bd:88:10:a8:57:37:ac:0c:01:
18:76:49:0b:37:0a:76:22:17:a9:32:7d:77:29:b9:02:27:57:
bd:61:ee:05:3d:a2:14:8c:0b:13:9e:62:c6:39:94:57:b3:ed:
4b:11:0f:8a:16:62:9c:48:cb:c2:a9:df:1a:bc:5c:4a:2e:17:
c3:ef:12:8b:a1:b1:75:cb:c2:86:ea:d3:59:ae:a5:3f:d8:66:
36:93:88:67:2b:a5:be:bb:fc:d5:8c:f7:37:07:0d:6a:eb:ec:
d8:8e:13:a2:5c:7b:11:ed:81:01:0c:a1:71:98:e8:fd:58:6a:
60:ac:85:b5:5e:bf:ba:79:c2:54:59:1f:7a:23:92:68:9f:fb:
5c:e2:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:49:37 2026 by rpki-client