
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File: ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier: iUq6DiV6Izn+qk/B5gjBnAVuYwxlypbUbhNX9loRrGs=
Subject key identifier: 46:A0:C8:6A:1C:C4:68:44:1F:C9:21:4D:75:3F:07:42:17:99:21:36
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer: /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number: 82
Signing time: Mon 05 Oct 2026 08:09:48 +0000
Manifest this update: Mon 05 Oct 2026 08:09:47 +0000
Manifest next update: Mon 12 Oct 2026 08:09:47 +0000
Files and hashes: 1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: WWFq2ZNISsE3AiNj80jGmdigKWLNMf2fY0b4lr03AsQ=)
2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Validity
Not Before: Oct 5 08:09:47 2026 GMT
Not After : Oct 12 08:09:47 2026 GMT
Subject: CN=6ac35b4c-6916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:03:7e:24:94:af:a0:ff:b5:2a:61:c8:55:
e0:24:bd:2c:54:7e:b7:45:6c:ca:32:58:8c:8b:4a:
2a:20:1b:18:eb:b5:5d:14:e6:d9:86:ea:a7:6d:1b:
eb:5e:60:f8:9b:92:50:50:05:d4:e2:0c:03:9d:e7:
60:00:fc:5b:9f:3c:a6:88:47:9c:2f:94:3f:5f:31:
37:96:fc:9e:c9:cd:81:92:61:da:4b:52:32:07:39:
c1:21:0d:f8:1d:0a:a2:b3:eb:ec:09:00:1d:e0:ac:
f1:ce:07:49:96:67:45:4f:63:c3:56:cd:b5:e5:ff:
06:68:5a:09:e1:e6:0b:b6:fe:89:86:09:ef:29:72:
00:7b:20:20:04:0a:24:f9:61:29:9f:b8:a1:1b:a2:
de:ba:b9:72:b3:29:21:02:a1:36:ca:bb:a6:4a:44:
86:72:b1:45:56:a3:21:29:9d:ca:0a:1a:2b:39:f9:
51:45:3b:b7:3d:32:c5:c3:a2:b2:7b:ab:19:2c:36:
1f:f2:d5:25:36:48:cc:23:48:f6:f8:a0:2b:b9:e7:
4f:f8:84:19:0b:b1:b5:79:89:70:4d:ad:47:64:a3:
18:27:a0:e3:c6:7c:e5:40:2b:41:3b:5c:bc:07:21:
9f:99:b1:2c:a6:df:31:9d:40:92:a4:f7:34:e2:c8:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:C8:6A:1C:C4:68:44:1F:C9:21:4D:75:3F:07:42:17:99:21:36
X509v3 Authority Key Identifier:
keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:f9:75:44:f6:5f:9b:81:57:eb:15:a5:07:60:80:b7:44:
78:3d:b9:c2:de:c7:cf:08:8f:5c:ac:2a:c3:67:e5:18:0c:e1:
16:21:aa:86:45:b3:e0:b2:91:ec:55:dc:75:b2:55:04:a0:a3:
58:74:36:cd:50:73:ef:4a:7d:8a:a3:d9:d4:ab:7c:da:96:dd:
dd:59:b1:e1:dd:3d:40:f3:1b:8b:20:20:63:57:93:2c:97:5d:
78:24:72:ca:94:46:3b:d3:c5:4c:88:8d:99:61:91:c4:bf:fb:
4c:12:d4:79:0d:16:ba:f2:ed:21:b8:93:58:46:30:c0:75:6a:
a1:dc:0d:db:fa:8d:c7:cf:6f:45:04:c8:fd:f0:08:b9:cf:e2:
02:86:10:e7:b0:e0:e2:f1:7d:63:ba:f3:1a:9c:e4:ed:0c:95:
f0:9b:c6:57:09:53:40:c6:8d:b4:27:fc:35:e9:7c:6b:a7:d7:
e8:10:88:a2:13:7e:4b:fb:3b:81:7a:95:a0:05:f4:9f:4b:ea:
9b:e2:bd:50:27:ef:b8:c7:c4:55:ca:4e:ec:ce:e0:49:d4:34:
1b:ca:43:e9:1e:06:9b:f8:26:6c:b3:88:15:eb:31:e9:f2:15:
61:9c:71:f8:82:9e:27:f1:dc:74:46:5b:f2:31:29:4e:e3:ba:
56:f9:28:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCRTUxMTAvBgNVBAUTKDhFRUQ3Njk4NEYyMzFBQTJDNzBGMjk4MjM3OERDNjlE
RDgzRDU4NUMwHhcNMjYxMDA1MDgwOTQ3WhcNMjYxMDEyMDgwOTQ3WjAYMRYwFAYD
VQQDEw02YWMzNWI0Yy02OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueQDfiSUr6D/tSphyFXgJL0sVH63RWzKMliMi0oqIBsY67VdFObZhuqnbRvr
XmD4m5JQUAXU4gwDnedgAPxbnzymiEecL5Q/XzE3lvyeyc2BkmHaS1IyBznBIQ34
HQqis+vsCQAd4KzxzgdJlmdFT2PDVs215f8GaFoJ4eYLtv6JhgnvKXIAeyAgBAok
+WEpn7ihG6LeurlysykhAqE2yrumSkSGcrFFVqMhKZ3KChorOflRRTu3PTLFw6Ky
e6sZLDYf8tUlNkjMI0j2+KAruedP+IQZC7G1eYlwTa1HZKMYJ6DjxnzlQCtBO1y8
ByGfmbEspt8xnUCSpPc04sicpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEagyGoc
xGhEH8khTXU/B0IXmSE2MB8GA1UdIwQYMBaAFI7tdphPIxqixw8pgjeNxp3YPVhc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJFNS8zRUU3N0U2RTAw
MTgxMUYxQUI0RDhEMTg0MjZGNTZCQy9qdTEybUU4akdxTEhEeW1DTjQzR25kZzlX
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUJFNS8zRUU3N0U2RTAwMTgxMUYxQUI0RDhEMTg0MjZGNTZCQy9qdTEybUU4akdx
TEhEeW1DTjQzR25kZzlXRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAETP5dUT2X5uBV+sVpQdggLdEeD25wt7HzwiPXKwqw2flGAzhFiGqhkWz4LKR
7FXcdbJVBKCjWHQ2zVBz70p9iqPZ1Kt82pbd3Vmx4d09QPMbiyAgY1eTLJddeCRy
ypRGO9PFTIiNmWGRxL/7TBLUeQ0WuvLtIbiTWEYwwHVqodwN2/qNx89vRQTI/fAI
uc/iAoYQ57Dg4vF9Y7rzGpzk7QyV8JvGVwlTQMaNtCf8Nel8a6fX6BCIohN+S/s7
gXqVoAX0n0vqm+K9UCfvuMfEVcpO7M7gSdQ0G8pD6R4Gm/gmbLOIFesx6fIVYZxx
+IKeJ/HcdEZb8jEpTuO6Vvkotg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:15:41 2026 by rpki-client