
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier: TgtSF9VH9FKjQwNW7flszvgxGnH1iEPGWqGsjRB51ZU=
Subject key identifier: 6A:C5:DF:34:30:C8:BE:66:A4:AB:BB:A8:0F:91:88:DA:7C:97:A5:A2
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial: 0A6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number: 0A51
Signing time: Fri 02 Oct 2026 19:55:47 +0000
Manifest this update: Fri 02 Oct 2026 19:55:47 +0000
Manifest next update: Fri 09 Oct 2026 19:55:47 +0000
Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: FjLUASLzD917LFKPrhzBEGD819VJcB13GO/WHPJbI9Q=)
2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=)
3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=)
4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671 (0xa6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Validity
Not Before: Oct 2 19:55:47 2026 GMT
Not After : Oct 9 19:55:47 2026 GMT
Subject: CN=6ac00c43-4aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:9f:85:d1:11:70:da:6f:20:14:1a:9c:9d:
4f:56:d8:6b:09:14:f9:1a:4c:1b:29:82:76:23:74:
04:16:6f:8a:f6:03:bb:ef:7c:d5:54:48:71:d8:03:
47:82:cc:0f:c4:6f:f1:c1:52:67:10:48:43:d0:f3:
5c:e0:0b:f0:26:b7:f7:76:6e:13:b5:23:7a:3c:cf:
2a:60:fa:1c:01:a7:c3:36:a2:a2:7b:42:ef:15:c1:
15:24:30:4e:3a:3c:24:b3:c8:54:99:e6:e2:ad:f6:
ad:4d:5b:cc:6d:24:cb:34:9f:aa:80:b0:4c:f4:0b:
60:f7:28:e0:e3:22:ba:ec:d2:b8:c2:07:a6:b5:c7:
ff:d2:c2:2a:e4:33:e8:fb:b8:f6:a0:36:1f:db:80:
1a:db:fb:c7:11:09:62:94:ba:38:30:bc:55:0e:91:
32:d1:a4:2e:77:92:0a:d0:9a:54:02:b5:4f:30:d5:
38:e7:77:3c:8a:e8:43:e9:31:5a:d7:df:35:37:0c:
93:d0:18:32:4b:ea:a9:b1:4d:a5:68:fd:45:00:66:
31:39:d5:2d:56:12:e5:95:4f:43:72:4a:a8:1b:91:
bf:dd:b4:35:c4:33:6a:01:02:2c:9d:00:69:4e:51:
e2:7b:a5:ee:90:c8:cb:95:1b:65:10:f7:cd:30:1c:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:DF:34:30:C8:BE:66:A4:AB:BB:A8:0F:91:88:DA:7C:97:A5:A2
X509v3 Authority Key Identifier:
keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:c5:ea:e2:9e:54:40:15:1b:71:97:c6:16:d2:16:55:cb:9a:
04:0e:12:3d:4c:e8:e9:ff:65:df:15:1a:2e:26:8c:76:ab:08:
4a:dc:86:2c:7f:c8:01:ac:c5:c7:dd:53:5d:81:78:48:67:3c:
bc:fd:e2:c7:47:57:c5:31:bc:7a:92:14:b5:4f:3d:95:ce:1c:
19:ab:8b:49:d4:d6:01:cf:53:db:1c:cf:34:7b:59:c4:d0:94:
e3:09:f8:c1:bc:01:f5:77:c6:4d:af:44:5a:43:81:67:57:62:
25:20:dc:70:c9:92:c2:a8:0e:b0:5b:12:ae:82:2f:12:d7:29:
fb:c2:37:c9:33:6e:d2:3b:69:36:e0:40:f7:49:df:5b:6c:03:
2a:6b:f9:b2:8d:94:97:97:1a:de:78:7e:ed:1a:8b:80:fc:73:
ac:68:dc:9f:6d:55:d2:88:5f:c8:69:00:0b:9f:3c:9b:80:5c:
b8:ef:fd:e9:8d:d5:fe:2b:51:54:78:69:52:ab:d0:59:be:e7:
3b:72:69:88:82:19:66:15:2b:3a:6c:9e:62:bd:52:73:f9:3b:
e2:5e:82:ad:29:6a:24:69:c8:49:d3:ee:99:aa:32:78:74:87:
7f:73:49:3e:a9:e2:39:a5:0c:f5:bc:a8:9d:73:70:a4:52:27:
cd:17:fb:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjYxMDAyMTk1NTQ3WhcNMjYxMDA5MTk1NTQ3WjAYMRYwFAYD
VQQDEw02YWMwMGM0My00YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn7afhdERcNpvIBQanJ1PVthrCRT5GkwbKYJ2I3QEFm+K9gO773zVVEhx2ANH
gswPxG/xwVJnEEhD0PNc4AvwJrf3dm4TtSN6PM8qYPocAafDNqKie0LvFcEVJDBO
Ojwks8hUmebirfatTVvMbSTLNJ+qgLBM9Atg9yjg4yK67NK4wgemtcf/0sIq5DPo
+7j2oDYf24Aa2/vHEQlilLo4MLxVDpEy0aQud5IK0JpUArVPMNU453c8iuhD6TFa
1981NwyT0BgyS+qpsU2laP1FAGYxOdUtVhLllU9DckqoG5G/3bQ1xDNqAQIsnQBp
TlHie6XukMjLlRtlEPfNMBxIYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrF3zQw
yL5mpKu7qA+RiNp8l6WiMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX
V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgMXq4p5UQBUbcZfGFtIWVcuaBA4SPUzo6f9l3xUaLiaMdqsIStyGLH/IAazF
x91TXYF4SGc8vP3ix0dXxTG8epIUtU89lc4cGauLSdTWAc9T2xzPNHtZxNCU4wn4
wbwB9XfGTa9EWkOBZ1diJSDccMmSwqgOsFsSroIvEtcp+8I3yTNu0jtpNuBA90nf
W2wDKmv5so2Ul5ca3nh+7RqLgPxzrGjcn21V0ohfyGkAC588m4BcuO/96Y3V/itR
VHhpUqvQWb7nO3JpiIIZZhUrOmyeYr1Sc/k74l6CrSlqJGnISdPumaoyeHSHf3NJ
PqniOaUM9byonXNwpFInzRf7/g==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:34:33 2026 by rpki-client