
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier: g8nBNFh8EX0yaH0G1nuni3EfXrsLo9jGJX2unWWQNI4=
Subject key identifier: 05:7A:42:FE:8D:E7:D0:CF:BE:46:E3:51:38:00:AB:72:6A:71:36:B8
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number: 0124
Signing time: Fri 25 Sep 2026 06:02:14 +0000
Manifest this update: Fri 25 Sep 2026 06:02:14 +0000
Manifest next update: Fri 02 Oct 2026 06:02:14 +0000
Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: kgPYV6uA1OIwZedzHy0qPPcKw91/8D15Hh/TUOw0ej0=)
2: D1A10B8A5CF711F1A62649419A833773.roa (hash: prrov2NToaZdP51j0ExVb25OA7QCLLzbDCp+VWHGE34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Sep 25 06:02:14 2026 GMT
Not After : Oct 2 06:02:14 2026 GMT
Subject: CN=6ab60e66-bcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:df:e3:e9:81:a4:bf:9d:c5:a7:f4:57:a4:
0b:8f:91:d8:15:05:b5:0c:0d:27:f9:c5:2e:fc:56:
68:f4:31:23:77:05:d9:f6:8c:02:19:81:7a:4d:f6:
bc:92:e4:fb:6b:b2:fb:df:b3:42:ed:95:0b:ba:78:
a5:69:bd:82:f4:ce:99:54:2a:66:92:57:52:d5:60:
1b:24:c1:f0:bb:36:5d:e5:3d:17:3d:d7:8e:e8:38:
6b:ab:4a:2e:9e:7e:7a:cf:31:24:c2:d5:b7:c7:98:
3a:5d:c1:d1:4a:c2:3c:2b:d9:4c:4b:6c:4c:b6:f1:
99:53:2f:51:76:65:f6:4c:da:e0:97:f3:6a:a7:96:
1b:ad:a4:3f:32:c1:f1:f0:72:d1:74:7c:11:42:ef:
bc:93:46:af:38:6f:3a:cd:23:d8:5d:6a:d5:b0:ff:
a3:40:1a:05:0e:b5:49:ea:c9:99:88:3b:0e:ed:65:
2b:27:54:ef:20:87:46:32:b3:53:78:80:cb:08:4f:
de:54:cc:94:5a:94:0e:91:58:b5:54:6c:f9:1c:7c:
df:69:6e:6c:bb:59:62:ec:d5:a9:db:ba:57:99:6d:
67:f3:d5:b9:c0:f6:69:b0:6f:68:a2:89:07:8b:c8:
0c:67:0e:18:3e:71:6d:ea:a8:0b:23:68:71:7a:fc:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:42:FE:8D:E7:D0:CF:BE:46:E3:51:38:00:AB:72:6A:71:36:B8
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:aa:d6:9a:a5:09:8c:78:c9:6b:7b:27:04:e6:fb:b6:be:a5:
03:8e:6c:5f:ff:fe:91:5e:5b:d2:92:8b:11:ea:d1:4e:e4:75:
0c:31:17:f2:e0:cf:77:57:56:b3:b5:f0:e2:56:cf:42:6a:98:
61:03:ac:55:91:7a:71:d1:94:d0:a4:fc:9c:cd:ea:55:7a:23:
ad:83:a8:20:a9:0f:be:7e:7e:42:47:63:66:b8:a5:09:73:71:
b4:9e:c7:36:0b:00:e7:96:44:a9:4d:85:5a:70:3e:1c:2b:33:
f7:86:af:a1:eb:c5:03:44:cd:c9:aa:ae:59:c9:e4:d5:a4:57:
6f:a3:7b:45:e5:75:a2:de:e6:d3:c2:4d:87:ad:af:12:25:35:
f5:7e:4a:bd:bb:81:0f:c7:4a:0e:73:b4:6b:3e:e5:67:25:7d:
bd:65:57:b9:2c:76:e6:4a:7c:ce:a7:72:46:e3:fa:2c:e0:49:
2e:57:70:d3:b7:7e:0d:a6:de:8c:7f:ce:98:6f:4c:f2:41:1c:
b2:ad:ab:ed:75:44:bd:9b:3d:9b:54:ae:d8:f0:32:b1:14:fb:
76:c9:d3:25:67:20:b0:6c:54:8f:ff:a5:0a:b7:b5:7f:08:2d:
a8:88:8d:29:03:a0:1a:c1:a7:ba:90:31:60:70:af:da:2f:02:
26:b0:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:00:38 2026 by rpki-client