
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: 2gJd6g/Op8xWoZPcqPOW2CfXnYY5SO3AFbJtaELSuL0=
Subject key identifier: 2F:91:D5:6A:89:E5:6F:2D:9D:71:DE:DE:51:17:69:CC:1F:15:E2:F2
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1E35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1E21
Signing time: Thu 24 Sep 2026 16:03:25 +0000
Manifest this update: Thu 24 Sep 2026 16:03:24 +0000
Manifest next update: Thu 01 Oct 2026 16:03:24 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: xKRukvSahODN7lx/SErJ2e8qzlBVeHMVnhGqa2vjqgY=)
2: 6D87A54A953811F1A113FB975B11F970.roa (hash: 0X0U+ygGSlaqbcmBljiSjt+7cFs6K3/XgAF7+i3aPNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7733 (0x1e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: Sep 24 16:03:24 2026 GMT
Not After : Oct 1 16:03:24 2026 GMT
Subject: CN=6ab549cd-aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:e4:c0:71:67:2e:6a:46:c1:94:7f:54:96:
d8:ba:3f:e3:8b:58:fc:ac:88:57:09:07:e8:7e:24:
cb:e5:f9:8e:97:f7:08:e5:e4:1d:4a:c7:30:41:3c:
1c:7d:cd:e6:30:f8:1c:c0:23:4f:2f:8b:5f:d6:27:
c7:d3:11:7d:51:38:40:9c:69:0a:54:c5:91:7d:9b:
7c:40:2f:23:6b:d2:1f:a5:8f:df:77:22:a5:29:1a:
af:63:f3:7d:4f:28:f5:37:35:7f:ef:41:d1:be:67:
af:cb:9e:94:4e:de:ef:9e:2f:82:4b:91:f7:26:4e:
93:f2:1f:92:01:41:6f:0d:da:d3:95:f7:aa:b2:2e:
49:49:b5:10:92:5b:eb:0a:db:f0:bc:40:fb:36:b6:
ee:06:ff:39:e5:af:11:4e:7a:a2:15:77:f9:50:5f:
e1:01:6e:56:45:47:6b:42:05:8a:09:f8:7c:64:be:
12:d6:ed:ea:4d:23:90:e2:8b:2a:91:9c:0b:6e:d5:
05:18:2b:ff:bd:85:03:39:94:f3:c4:b8:2d:ed:35:
e5:a5:28:ad:29:13:72:6a:2c:24:50:4e:0b:8e:79:
86:0d:a1:8f:35:6d:67:f9:9c:6f:41:d6:2b:8f:dc:
cc:4a:cc:75:a6:37:9a:c9:9b:3c:d7:5f:b0:92:d9:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:D5:6A:89:E5:6F:2D:9D:71:DE:DE:51:17:69:CC:1F:15:E2:F2
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:3c:1b:37:00:4d:c8:3d:8c:d5:74:f2:9e:42:d2:4d:6b:
22:68:c4:d6:b1:0e:f3:38:37:b2:42:34:94:ac:4e:37:7d:17:
14:4e:5a:94:ea:42:f4:3e:39:47:d8:e8:21:16:3e:e4:5d:e7:
8b:92:22:f0:97:ac:23:95:a2:6f:03:df:60:18:e4:6a:ba:5f:
5b:26:ac:d4:04:30:7e:d9:23:37:0f:88:3a:24:ca:96:06:2f:
04:52:7f:38:e5:88:db:45:3c:df:f7:e4:32:cc:17:cb:aa:f2:
81:ba:a3:93:fc:17:68:14:98:a7:f8:67:32:56:d9:de:68:f2:
7d:4e:41:9e:e8:a5:5a:00:a0:d7:b2:31:32:19:73:d1:0f:0f:
d8:e6:1c:47:2c:c7:8f:4c:b9:3b:ca:69:42:a7:e0:47:8c:31:
cd:97:6c:37:ec:34:b0:ef:32:f2:31:33:3d:d7:60:72:57:db:
93:d3:e7:51:0c:92:ea:08:a3:49:c4:c3:50:58:3c:3b:78:d9:
5b:20:15:47:a6:cf:6d:57:68:9f:4b:bb:e0:32:26:4d:74:1b:
99:b0:1d:fb:ce:bd:78:f9:4c:3f:bb:21:96:f8:32:dc:2f:35:
5e:56:0d:37:0d:77:27:f8:a4:bf:e9:54:b7:40:ab:8f:a7:14:
f9:53:3b:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIzQzUxMTAvBgNVBAUTKDI3MzQwNDdENkU5NzhENTA5QkE4QTUxQTZGMTA2NDg3
OEY0Nzc1REEwHhcNMjYwOTI0MTYwMzI0WhcNMjYxMDAxMTYwMzI0WjAYMRYwFAYD
VQQDEw02YWI1NDljZC1hYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44nkwHFnLmpGwZR/VJbYuj/ji1j8rIhXCQfofiTL5fmOl/cI5eQdSscwQTwc
fc3mMPgcwCNPL4tf1ifH0xF9UThAnGkKVMWRfZt8QC8ja9IfpY/fdyKlKRqvY/N9
Tyj1NzV/70HRvmevy56UTt7vni+CS5H3Jk6T8h+SAUFvDdrTlfeqsi5JSbUQklvr
CtvwvED7NrbuBv855a8RTnqiFXf5UF/hAW5WRUdrQgWKCfh8ZL4S1u3qTSOQ4osq
kZwLbtUFGCv/vYUDOZTzxLgt7TXlpSitKRNyaiwkUE4LjnmGDaGPNW1n+ZxvQdYr
j9zMSsx1pjeayZs811+wktnxZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+R1WqJ
5W8tnXHe3lEXacwfFeLyMB8GA1UdIwQYMBaAFCc0BH1ul41Qm6ilGm8QZIePR3Xa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNDNS84MzFBMjBGRUI1
QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpWQ2JxS1VhYnhCa2g0OUhk
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6UUVmVzZYalZDYnFLVWFieEJraDQ5SGRkby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjNDNS84MzFBMjBGRUI1QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpW
Q2JxS1VhYnhCa2g0OUhkZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPXM8GzcATcg9jNV08p5C0k1rImjE1rEO8zg3skI0lKxON30XFE5alOpC9D45
R9joIRY+5F3ni5Ii8JesI5WibwPfYBjkarpfWyas1AQwftkjNw+IOiTKlgYvBFJ/
OOWI20U83/fkMswXy6rygbqjk/wXaBSYp/hnMlbZ3mjyfU5BnuilWgCg17IxMhlz
0Q8P2OYcRyzHj0y5O8ppQqfgR4wxzZdsN+w0sO8y8jEzPddgclfbk9PnUQyS6gij
ScTDUFg8O3jZWyAVR6bPbVdon0u74DImTXQbmbAd+869ePlMP7shlvgy3C81XlYN
Nw13J/ikv+lUt0Crj6cU+VM7xg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:01:51 2026 by rpki-client