
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json)
Hash identifier: pVz49uIr3UJolFl0+odK8mLLUzgWfdTZu/bxosW+PBI=
Subject key identifier: E3:4F:CA:CB:13:3C:49:61:0E:D0:A4:9E:AC:5F:8F:FF:78:62:1D:04
Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
Manifest number: CD
Signing time: Mon 21 Sep 2026 06:44:19 +0000
Manifest this update: Mon 21 Sep 2026 06:44:19 +0000
Manifest next update: Mon 28 Sep 2026 06:44:19 +0000
Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: 2AbsZFV/2IwQ1T6oVZQK3W4O+ePVz6ixJsxcF6WaCbU=)
2: 7007614C829811F094DDE01BC4F9AE02.roa (hash: Y/urDtvmoxrvI9RD7nRWTtIwBS0chKb7wOu16fjLwtA=)
3: 707D9934829811F094DDE01BC4F9AE02.roa (hash: CSZOMRZBf4O/F9lGvp4ZRd14pRaIwd7jDkVp7MtH1TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Validity
Not Before: Sep 21 06:44:19 2026 GMT
Not After : Sep 28 06:44:19 2026 GMT
Subject: CN=6ab0d243-e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:bc:16:ec:21:ff:a8:66:64:c8:77:78:24:
40:5c:4d:39:16:72:0f:3c:7e:80:f9:1b:cc:b1:b7:
77:d1:ff:78:dc:3a:5c:05:93:6b:c0:e9:ed:8a:3e:
3c:ef:36:48:97:4e:8b:4f:c5:7e:3c:13:77:20:7b:
f4:44:2a:07:e6:e5:28:df:3f:d0:ec:38:3e:c6:b6:
8c:45:51:fa:b2:49:a6:19:84:63:17:23:54:6e:08:
3e:e3:47:cb:ab:58:8b:52:b9:0a:36:0c:cf:80:2e:
5e:78:72:e9:74:ba:49:f4:f4:6a:77:b9:51:06:99:
1a:b3:e3:fa:f2:aa:bc:ca:89:02:c0:40:22:64:d5:
7e:22:ed:8c:62:cd:5b:76:6a:e8:bb:87:4c:fd:0a:
0f:0d:5b:54:9a:06:4c:d6:cc:d3:24:31:02:5d:c8:
63:33:31:9f:27:28:e1:d1:94:20:69:78:ff:ca:7e:
8b:a3:f9:38:fd:14:b2:48:eb:7c:dd:54:e2:fa:89:
58:d2:08:c1:f7:63:e3:ca:bb:64:df:13:a6:14:6b:
2c:cc:e9:86:21:a3:b2:b5:d7:0c:e2:0e:8c:47:80:
d0:e4:09:67:77:aa:b6:8a:4a:27:21:26:d7:e4:0b:
e5:82:18:db:e6:61:2b:91:8a:35:b3:20:90:64:72:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:CA:CB:13:3C:49:61:0E:D0:A4:9E:AC:5F:8F:FF:78:62:1D:04
X509v3 Authority Key Identifier:
keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:35:50:6e:37:47:43:d0:9c:7e:a0:37:d9:d7:e5:1c:89:
ee:6f:f9:55:87:39:b4:45:b5:60:fd:66:eb:f4:73:71:f3:56:
6b:62:28:c8:9e:ac:56:23:67:53:38:20:a2:6b:29:fe:9a:4d:
e3:41:0a:39:32:78:22:e2:1d:18:12:4e:8a:da:de:95:71:05:
98:6f:8a:32:e7:15:12:24:f2:87:5e:9b:cd:87:69:cc:1e:47:
3f:e2:ec:ab:35:bf:42:23:f8:1d:ee:08:2c:ba:44:1c:24:c9:
9b:ea:87:cb:76:ad:36:d9:f0:ac:22:2b:f6:1c:86:6c:33:81:
28:f3:f8:c2:00:84:f9:f7:14:a7:96:42:31:41:4d:4f:b1:bf:
96:9a:dd:52:d6:b7:35:1f:55:7b:e9:46:87:d5:c1:76:97:35:
ef:0a:45:9b:d9:ee:9d:66:63:b2:65:7e:a5:b4:72:0a:84:e2:
11:9f:9d:76:fe:70:9c:a6:1f:aa:82:04:d9:11:41:f5:03:ad:
bd:4c:99:db:66:f7:28:a1:6a:6c:94:60:15:51:70:81:e4:90:
36:03:32:21:e3:4f:b7:19:06:6e:22:a6:78:a7:33:35:8e:b8:
7b:67:4c:3c:93:f4:f8:b3:da:2c:7e:5b:2b:3f:76:7a:d5:98:
cf:29:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:21:18 2026 by rpki-client