
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json)
Hash identifier: /MFxlQByk4zBH9+w/Epy4cHw4xPk7/csLT9UfMnczjI=
Subject key identifier: 24:3B:9E:93:21:BE:A4:A1:07:B2:4F:C1:63:76:A4:66:2B:DD:97:6C
Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
Manifest number: 0237
Signing time: Mon 21 Sep 2026 02:35:08 +0000
Manifest this update: Mon 21 Sep 2026 02:35:08 +0000
Manifest next update: Mon 28 Sep 2026 02:35:08 +0000
Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: woaZS/aZP6QHONKDHCwwVs61KzihHa4n1rwMIXc42YI=)
2: 22GMXwPNWWWzvWsUIcJ7UEVwvEA.asa (hash: qJkMKj8/jMHzRiV86dGH+6E0TVSHRHDhc7jDUHlYwCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Validity
Not Before: Sep 21 02:35:08 2026 GMT
Not After : Sep 28 02:35:08 2026 GMT
Subject: CN=6ab097dc-7873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:e6:de:df:81:0a:51:45:06:8e:44:ff:b6:
f7:95:65:b0:09:4d:b3:84:17:4d:1f:8e:45:35:85:
5f:44:cc:82:50:a8:b5:87:bd:ad:46:27:fd:82:88:
4d:78:86:62:2c:a7:e6:c1:d1:9d:d9:26:17:6b:81:
dd:a9:bb:c2:0b:ac:69:62:c8:71:73:81:9b:52:17:
ed:69:7c:f4:65:7a:e3:64:a9:49:a9:fa:ce:cc:b9:
27:26:87:1e:ce:02:9d:c9:62:37:ab:bf:27:36:31:
95:9e:80:82:12:76:2c:7f:fb:13:15:3a:e9:9f:5a:
6f:eb:5c:b5:36:fd:9b:15:69:96:9f:63:97:10:d7:
76:0a:6b:32:b3:64:a5:3f:c2:ff:4f:66:73:70:32:
9d:6d:6a:2a:f8:23:dc:da:f0:ba:80:d8:a6:4c:65:
49:24:93:13:3f:fe:e1:74:8a:a3:c8:ff:89:c9:33:
fa:d2:3d:d1:b9:27:2f:42:18:ca:44:5c:4a:86:b5:
a7:ee:08:25:b6:3a:1c:a3:a9:16:98:19:83:3c:8b:
1b:7c:3a:55:d4:43:e7:8b:9a:e5:22:64:af:5b:08:
80:f8:e8:b8:3b:2b:6a:58:aa:97:c6:11:b2:b4:c9:
32:c4:48:3c:34:74:16:3b:1e:9b:f1:88:50:e0:0b:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:9E:93:21:BE:A4:A1:07:B2:4F:C1:63:76:A4:66:2B:DD:97:6C
X509v3 Authority Key Identifier:
keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:cd:bb:96:85:5f:db:b3:42:f2:f7:60:80:9b:49:ee:23:
b1:ee:87:99:08:46:87:f7:b6:b9:c1:e4:fe:27:ee:cd:ba:c4:
7d:49:d5:b2:e6:5a:47:b2:73:b1:dc:de:3f:08:cb:59:d2:23:
80:fc:b0:01:36:32:fe:ee:e9:46:7a:18:97:85:a1:39:16:f3:
d9:66:27:64:ee:ad:17:4d:ca:87:51:06:98:19:8c:66:3a:31:
18:c2:a6:f5:70:0d:36:52:c1:78:58:c7:e0:44:b0:37:a9:65:
ca:4e:08:04:b4:fa:b9:b1:6e:5a:09:5b:aa:ff:5e:0f:11:fb:
d2:ed:8f:3f:50:fd:53:6a:94:56:38:36:02:d3:f2:42:20:49:
28:27:89:40:d5:7a:7c:94:73:bd:e6:db:18:17:e8:2b:b7:d2:
2b:b9:82:46:d0:b3:11:b1:0e:5b:66:e6:e6:75:13:27:03:a2:
c7:b5:c5:ad:fe:08:0c:e5:01:86:64:07:2c:59:fb:26:8e:37:
f6:f0:37:62:47:3c:e8:11:08:34:b0:80:a2:92:04:16:c6:ee:
9d:28:ea:53:5d:24:ee:28:d6:ea:0d:a3:b9:df:60:20:e0:df:
db:ed:5a:0d:21:cb:1b:e2:ea:d5:44:d1:e8:8d:c2:e6:06:b2:
92:82:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:28 2026 by rpki-client