
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier: QU3bNefG+0tIO6L4UGRmNTQ6j/gvzMMB2Mrq4+BEdjY=
Subject key identifier: 7B:B5:BC:61:C7:11:D0:D2:63:F3:98:16:C3:20:0E:36:1E:F1:4E:31
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number: DA
Signing time: Mon 21 Sep 2026 06:38:16 +0000
Manifest this update: Mon 21 Sep 2026 06:38:15 +0000
Manifest next update: Mon 28 Sep 2026 06:38:15 +0000
Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: GD1g3M9kPn8pg2I+S5MScN1VSd/ikNIbJzZkLOw7Kzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Validity
Not Before: Sep 21 06:38:15 2026 GMT
Not After : Sep 28 06:38:15 2026 GMT
Subject: CN=6ab0d0d8-3e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:47:ca:5c:a8:7b:27:f8:cd:8c:b5:fa:08:
97:67:ed:4e:1e:8e:25:f6:ac:51:8d:75:08:89:59:
54:90:d6:b0:49:6e:14:2e:ea:8f:89:fa:d3:86:a5:
31:a5:f5:89:3a:99:ff:68:3f:1c:ca:b0:ca:a8:71:
b2:97:14:ff:fa:3b:b4:a8:37:b6:5f:df:2a:a8:75:
15:e3:66:80:1d:b4:d0:65:20:d1:23:8d:61:27:7b:
25:6b:da:16:b7:c8:40:d1:56:b2:ad:cc:df:19:a8:
2c:11:ef:e5:8b:fa:fe:f6:43:79:44:8a:6d:e0:9b:
90:09:bd:0a:96:c6:a8:b1:19:02:73:38:ca:60:36:
a5:3a:1d:58:d3:6e:bf:bf:ef:ef:10:57:a5:c4:7d:
4f:45:51:cd:31:10:9b:da:23:3e:01:f8:80:06:da:
93:a2:8c:1b:6a:71:b2:fc:c0:aa:b6:97:5a:6c:92:
25:29:e1:46:ce:96:93:c0:08:ea:31:5a:cd:81:e8:
52:f5:e1:32:91:b2:6d:db:66:a8:a8:ae:04:db:dc:
87:74:3f:6d:19:d6:98:91:9e:93:58:b1:86:37:44:
55:80:a6:57:ed:2c:5b:a4:19:c4:51:2e:c6:3c:f1:
92:d5:5b:18:c6:7d:85:31:7e:98:6c:aa:e3:38:cc:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B5:BC:61:C7:11:D0:D2:63:F3:98:16:C3:20:0E:36:1E:F1:4E:31
X509v3 Authority Key Identifier:
keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:d2:41:35:20:08:d5:68:32:72:ff:dd:2b:1a:f0:64:db:
c2:45:24:76:2b:65:34:11:85:ee:32:aa:ff:ee:37:e2:47:5c:
25:82:be:21:4f:4d:08:f3:54:33:d4:9d:29:20:b6:7a:12:55:
bc:ea:7f:f5:19:b0:87:3f:7c:6e:14:fc:d4:96:15:d0:d2:5a:
9a:14:02:ad:01:f7:e8:82:02:b7:57:5f:36:c4:71:33:fd:32:
86:0a:fb:66:05:76:c9:a8:87:0f:ef:ba:29:fa:3e:b1:51:d1:
4f:f8:09:58:98:3f:65:f8:2a:11:43:76:fd:79:35:ae:01:83:
43:54:31:5a:86:e4:c1:83:74:1c:4d:b8:f1:66:45:f8:bd:4f:
d2:bb:f9:2c:25:89:02:91:23:30:c8:32:ef:60:36:db:57:6b:
c6:c9:75:b6:35:de:5b:fd:cd:d7:90:76:f8:f8:38:25:3b:ce:
64:de:6b:44:4d:9e:53:48:83:6d:fc:c6:2d:f7:54:b9:cb:e6:
46:96:fa:ab:34:5d:d5:21:36:a8:bc:b5:9e:96:f4:24:31:52:
ad:e0:12:4d:01:6a:13:46:3f:eb:1c:27:c9:8e:f8:cf:ac:d4:
5e:57:81:46:70:0c:5e:9e:60:7c:79:b7:29:36:14:70:14:d1:
80:8e:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:11:48 2026 by rpki-client