
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json)
Hash identifier: I+BIqW3xEwIkdlcofaVQRbLaL9gDnwwKnOLEiO6R62w=
Subject key identifier: 8C:AE:71:40:14:C0:7A:C7:65:8E:06:49:1F:81:D6:10:92:CF:29:68
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
Manifest number: 02BE
Signing time: Fri 25 Sep 2026 01:27:56 +0000
Manifest this update: Fri 25 Sep 2026 01:27:55 +0000
Manifest next update: Fri 02 Oct 2026 01:27:55 +0000
Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: KxOldMr8/mJj0O5CEzVrsQl3IVGLhh/JUrTlq5qqm68=)
2: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: iDRttbAq2dG33Z+GOcEvSaxwB+ZISIrhoHxT2VA+MAU=)
3: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: YbTHElizFzUtlbWyp+pwU08KL5opGYwYJhzV3rHc988=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Validity
Not Before: Sep 25 01:27:55 2026 GMT
Not After : Oct 2 01:27:55 2026 GMT
Subject: CN=6ab5ce1b-ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:11:0b:19:bb:b6:1d:23:15:39:9b:bf:c6:
08:a0:ef:3d:ff:2f:0d:c7:af:6b:3c:aa:b8:d1:ab:
34:99:d3:8d:23:33:8e:70:f5:d0:bf:c2:f5:50:8f:
b4:db:23:f4:ec:66:1d:74:43:dd:d0:67:bb:ff:c5:
c1:73:f6:71:26:f9:c4:b3:b0:b3:e7:62:ac:25:55:
5a:0c:e2:25:bb:93:90:17:4b:2e:68:23:ea:11:3d:
2d:3c:3a:1f:87:66:c2:97:c5:bf:da:5a:70:32:e6:
d5:75:45:54:80:7a:58:94:f1:d2:55:06:a6:90:0d:
cd:c6:5d:fd:14:d3:41:42:77:10:51:2b:35:06:45:
7e:e9:02:59:21:07:42:c8:17:41:09:79:d0:5c:1c:
b0:d9:99:0e:3e:a6:8b:c4:24:66:e1:90:17:12:89:
e0:0b:2a:6d:7e:51:a4:ee:cb:c5:4f:74:37:3f:d7:
10:37:3f:83:63:3c:69:8c:47:47:8d:2a:2b:b3:3b:
a2:00:61:17:e5:3c:5e:3d:b4:da:34:1f:da:98:3d:
f6:c3:e8:6f:1a:b6:72:2f:03:e3:9e:81:a5:dc:b4:
ac:a1:1e:d2:bd:c2:b4:d2:03:f0:2f:7b:10:ea:13:
bd:2e:6a:b0:a8:23:9e:c5:d2:d7:90:62:c6:61:70:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:71:40:14:C0:7A:C7:65:8E:06:49:1F:81:D6:10:92:CF:29:68
X509v3 Authority Key Identifier:
keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:a0:f3:f8:78:f2:89:04:8d:5a:79:d1:79:ad:d9:9d:25:
c2:f8:d5:f4:2f:aa:24:73:4f:4c:9e:cc:6d:20:ad:f0:1e:cf:
df:a8:82:ef:06:55:df:6d:2c:b7:3c:b6:94:ed:92:c3:fa:d6:
dc:c3:7d:64:b2:54:62:7e:7e:88:85:6d:39:ac:ea:36:a3:ef:
aa:78:64:37:a4:3f:16:97:5c:df:aa:a4:e3:81:8b:cd:58:7d:
2b:65:2a:61:04:db:89:26:c6:81:77:74:6f:6f:9b:55:4d:1b:
32:5d:37:b6:aa:4e:66:f1:3c:b4:78:53:22:6a:19:6d:e4:ba:
97:c5:28:d0:60:3b:09:2e:a4:a7:03:79:d7:98:ac:cd:b0:a2:
34:e0:31:8a:e0:fe:0f:ca:f8:17:d4:cc:85:bf:e7:4e:96:84:
82:41:03:c7:3a:6f:91:25:2a:07:3d:3c:18:6f:47:7f:f9:10:
ea:d2:7d:3f:cb:35:85:c9:ba:1c:6f:b7:00:1e:5a:50:33:ac:
e2:58:a8:de:08:20:f5:02:94:62:cb:a3:c9:24:e0:f3:9a:a4:
cd:21:e0:50:91:08:37:61:de:22:c9:27:5d:b1:f7:d3:c5:c0:
df:11:1c:72:e1:32:ef:e3:da:96:a3:8e:22:b4:60:7a:18:5a:
a7:50:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:22 2026 by rpki-client