
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json)
Hash identifier: 9ky1E+OX0GGcQ5RUZTFcIuhRMPtkoFBHo52jnn4Mghk=
Subject key identifier: 9D:32:75:D5:29:7C:2B:E4:DC:F6:15:CE:8D:2B:22:A2:2F:7D:4A:F1
Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
Manifest number: 0226
Signing time: Mon 21 Sep 2026 02:49:17 +0000
Manifest this update: Mon 21 Sep 2026 02:49:17 +0000
Manifest next update: Mon 28 Sep 2026 02:49:17 +0000
Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: lR6zSEOYY2frlPDUF5uyoUjsi6e0/UWxe5zWzJR1nNQ=)
2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: p/ajLhjfR7/sd63+KlmmSEwV5q6qTvLkZUOVfCuvC7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Validity
Not Before: Sep 21 02:49:17 2026 GMT
Not After : Sep 28 02:49:17 2026 GMT
Subject: CN=6ab09b2d-06ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:cf:ed:0d:39:90:ff:16:b0:de:0a:a2:42:
4c:29:af:1f:d8:ce:22:4e:20:3c:23:a6:65:25:ff:
c6:dd:c5:95:25:40:cc:29:48:f3:5d:ea:41:39:b3:
1e:56:6a:e1:9a:fd:93:05:0a:75:35:09:d6:c9:ac:
f0:ab:ee:f1:2e:e6:89:f3:76:89:71:dd:ff:c8:0f:
34:98:88:44:39:a5:31:f7:6f:f8:ef:20:16:e2:44:
1b:f2:b4:72:9c:99:d4:e2:51:1f:d5:a0:55:c1:80:
58:f9:14:1d:ba:86:34:56:5f:d0:f6:de:b9:47:b8:
f0:6f:31:5c:9a:45:97:b4:17:c7:1b:25:7b:c6:a5:
66:d6:b5:b4:05:44:1c:94:c0:3e:80:0b:59:ff:d5:
b4:37:8e:cf:18:d0:e0:df:66:c8:ce:ec:de:6c:b9:
5f:ac:8e:c4:02:6e:10:15:02:7f:e5:30:4b:8c:d0:
c6:ac:51:81:bd:a3:3a:2e:f3:fd:86:4f:f0:46:2f:
0b:72:49:2e:58:06:45:14:89:5e:b2:9d:3e:6e:5c:
3f:ac:ee:9a:bb:85:c5:10:a0:71:aa:53:ed:e5:a4:
fe:b2:b4:3d:88:3c:33:b9:87:2a:f7:9b:9f:92:9c:
06:49:c9:49:05:80:3c:22:90:cd:9e:34:32:d7:ff:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:75:D5:29:7C:2B:E4:DC:F6:15:CE:8D:2B:22:A2:2F:7D:4A:F1
X509v3 Authority Key Identifier:
keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:07:38:95:3c:e6:e5:62:34:e9:a5:32:3b:17:9c:47:a1:96:
60:86:42:94:dd:b6:9a:61:61:43:46:7c:8f:37:d7:6b:dd:2d:
5d:98:f5:fa:95:89:44:13:12:13:27:58:00:b8:e9:e3:76:d4:
93:0e:00:cf:c8:39:13:70:6a:30:5c:a3:57:dd:d1:15:e2:06:
1d:42:80:6f:13:49:74:a0:c3:88:0d:79:ef:9e:de:aa:a7:9d:
bb:86:24:a9:6d:0b:20:35:29:f0:29:b4:4e:32:fd:17:47:93:
b5:d5:e6:c8:03:55:ea:1a:f6:b5:cc:cf:9d:d0:71:04:4c:fd:
2b:ba:91:8a:84:6a:15:6a:2f:36:36:69:73:ef:dd:22:51:cf:
bd:cd:45:1d:74:0c:1f:2e:5b:59:26:ea:24:12:81:0f:4a:7e:
b7:f1:b7:ac:c9:a4:fa:d8:d5:78:db:79:f3:36:35:13:2d:8f:
24:53:2f:7d:6c:21:17:fd:4a:c1:9f:ff:43:8e:f7:6c:53:37:
fb:a3:fa:dc:68:5c:a6:82:94:d6:b5:fc:87:60:fd:74:17:d6:
e0:f8:97:d0:64:ee:21:83:ad:1c:0d:f0:27:26:fe:e1:c1:ae:
bd:51:14:e3:3c:3e:6c:04:ac:79:27:37:51:97:30:6f:6b:cf:
3b:ae:f7:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0
MkRBNzVFQzUwHhcNMjYwOTIxMDI0OTE3WhcNMjYwOTI4MDI0OTE3WjAYMRYwFAYD
VQQDEw02YWIwOWIyZC0wNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoBjP7Q05kP8WsN4KokJMKa8f2M4iTiA8I6ZlJf/G3cWVJUDMKUjzXepBObMe
Vmrhmv2TBQp1NQnWyazwq+7xLuaJ83aJcd3/yA80mIhEOaUx92/47yAW4kQb8rRy
nJnU4lEf1aBVwYBY+RQduoY0Vl/Q9t65R7jwbzFcmkWXtBfHGyV7xqVm1rW0BUQc
lMA+gAtZ/9W0N47PGNDg32bIzuzebLlfrI7EAm4QFQJ/5TBLjNDGrFGBvaM6LvP9
hk/wRi8LckkuWAZFFIlesp0+blw/rO6au4XFEKBxqlPt5aT+srQ9iDwzuYcq95uf
kpwGSclJBYA8IpDNnjQy1/8fqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0yddUp
fCvk3PYVzo0rIqIvfUrxMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG
MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2
Vi14T18zcGl2MDFDMm5Yc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdAc4lTzm5WI06aUyOxecR6GWYIZClN22mmFhQ0Z8jzfXa90tXZj1+pWJRBMS
EydYALjp43bUkw4Az8g5E3BqMFyjV93RFeIGHUKAbxNJdKDDiA15757eqqedu4Yk
qW0LIDUp8Cm0TjL9F0eTtdXmyANV6hr2tczPndBxBEz9K7qRioRqFWovNjZpc+/d
IlHPvc1FHXQMHy5bWSbqJBKBD0p+t/G3rMmk+tjVeNt58zY1Ey2PJFMvfWwhF/1K
wZ//Q473bFM3+6P63GhcpoKU1rX8h2D9dBfW4PiX0GTuIYOtHA3wJyb+4cGuvVEU
4zw+bASseSc3UZcwb2vPO673Eg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:48:08 2026 by rpki-client