
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier: 8TS5rQ3qd9Zq51GyaSA5IUuHcmLDn6sngxAR42AxWTU=
Subject key identifier: 5B:8D:26:FE:3C:44:20:32:7A:E4:17:9C:B3:77:54:05:D5:05:F1:F3
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number: 02A9
Signing time: Sat 19 Sep 2026 02:02:42 +0000
Manifest this update: Sat 19 Sep 2026 02:02:41 +0000
Manifest next update: Sat 26 Sep 2026 02:02:41 +0000
Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: 0Mu+Ly7ITwq9n6h2/geKv1XdXDnkPdjlxV5SX5ZcXJY=)
2: 10DF38404A0F11F1ADEF3170C6833773.roa (hash: zZ1+IDgbqTdrDQD26xbPUgcOhoi1B5pU+fBcBrN7gto=)
3: 7C796C5E743311F0BAAA8B29C4F9AE02.roa (hash: /BSR0rTy9YxRu75VPc6TgIj01cxMh76wRoCuCj5Hck4=)
4: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: cgsc4sIZExv14thjIH07PFnsNLwQGZYHkNw/Y8rvesM=)
5: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: I7wXHkY5j/EtijYfTfESbTv7xxO7L2sl+cvxEqYUd2s=)
6: 41D824664A0F11F1A50A7F9BC6833773.roa (hash: JE90nL4uklO2ljFdXRRYK1Z4K+dIWdNTDTE6E92zcXc=)
7: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: of+eMJwERY8W/Zx8rlSjoD/Le9OYic1s0XcXBDZddHM=)
8: B2758A2248F911F1BA4C869592833773.roa (hash: IDrv9cUSigA/gVBFLCZmr2azv2l0klR/y+MN2iYRoHA=)
9: 2B1F36244A0F11F1A854BE8EC6833773.roa (hash: DyngqRv2JTE/tyikzuGsrm5VnuqI40CmyaWN4DrKG3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Sep 19 02:02:41 2026 GMT
Not After : Sep 26 02:02:41 2026 GMT
Subject: CN=6aaded41-deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:aa:2f:95:d4:2d:d6:6a:dc:65:6b:d8:14:
65:c8:94:13:d1:69:4f:7c:77:ef:62:b8:6b:9d:c5:
ad:3a:28:e8:d1:ac:6b:d1:4e:0f:40:65:53:79:45:
9c:96:99:9d:c9:6b:fc:77:3d:63:0d:cb:8d:bc:30:
c4:32:49:8b:8c:31:66:d2:46:bd:bd:a5:7b:e8:41:
8c:87:18:ad:bb:92:a7:39:c5:fe:41:7c:21:07:48:
8d:a2:33:47:40:19:30:15:02:45:35:6d:24:82:b5:
c8:66:09:49:2e:9d:db:4f:ee:f1:50:bf:80:77:8a:
8b:d1:d8:72:88:84:50:b0:69:21:66:27:35:91:e4:
a1:e4:98:ec:a8:7d:26:76:98:a4:2c:dd:2e:7c:17:
67:5d:fe:58:a4:c3:e5:91:94:11:c4:4e:a3:7d:0e:
5c:b9:d4:e1:82:87:4b:5f:ea:5d:d0:7d:4c:f8:ab:
9e:7e:72:58:1b:e4:ec:b1:30:e9:68:b6:89:41:ed:
94:20:f4:4c:09:fc:93:7d:e1:04:35:e3:f8:d8:c6:
99:08:28:f0:c3:6a:67:94:fb:b4:c2:a5:ff:b5:49:
9a:17:12:ea:45:d2:5b:23:fd:75:3f:32:20:e5:c6:
f1:f5:7b:86:1d:83:76:4a:e9:95:24:c0:44:aa:0c:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:26:FE:3C:44:20:32:7A:E4:17:9C:B3:77:54:05:D5:05:F1:F3
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:61:9f:17:e5:05:15:a5:41:35:6b:7d:e0:2e:4d:98:80:2e:
b6:7f:98:b9:2c:bd:31:34:ed:fd:d7:2e:99:f1:67:a6:ec:9b:
42:4f:50:f9:fa:e4:86:4a:8a:27:b8:f1:b2:f0:6b:d6:c6:b0:
26:09:55:40:bf:c3:bb:d8:5c:6f:83:55:3e:74:a5:a1:fc:8d:
16:12:14:cc:27:c3:ba:76:35:18:76:ca:57:cc:47:30:6a:db:
de:73:c2:8e:cd:fa:82:45:d3:d2:1d:8d:07:dd:77:eb:d7:55:
c6:8e:7e:05:d8:58:ef:7d:87:50:b4:66:b5:f3:62:d4:d5:62:
2b:aa:e9:3f:e3:9a:2d:1f:92:e8:26:e3:0f:35:e0:06:54:6c:
4e:cd:45:12:57:80:52:dc:3c:eb:64:e9:f0:ec:1c:f6:f8:a7:
20:b6:8c:49:53:63:0a:ea:52:db:76:b8:91:34:7b:e6:d2:8a:
13:13:09:6c:bb:a5:e1:2c:2c:d1:f2:1e:60:d1:1d:cb:91:5c:
c6:f7:5d:35:db:76:b9:3c:5c:ec:4f:8f:ae:d2:65:ef:6a:14:
48:7d:4a:fe:37:12:71:22:8a:43:c3:f7:8f:e5:8e:dc:a0:55:
d3:8c:ff:6a:5c:e3:d2:6b:0b:c5:e2:22:68:a4:43:97:62:3f:
d7:23:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:40:06 2026 by rpki-client