
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json)
Hash identifier: mqcQa3qhx3KUyPcmjfOoliuq8kPFYFbw7RXvp0itCLw=
Subject key identifier: D6:D6:1F:E4:05:9D:03:2B:84:61:FD:2B:87:2F:44:76:82:2E:97:5A
Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Certificate serial: 0A3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
Manifest number: 0A1F
Signing time: Fri 02 Oct 2026 20:03:08 +0000
Manifest this update: Fri 02 Oct 2026 20:03:07 +0000
Manifest next update: Fri 09 Oct 2026 20:03:07 +0000
Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: SvkAr+zQijIQuJphrh6KWK5jHpqilrybVLfFNdCZx/Y=)
2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: OaT/XW874M87KUD4zgcewRueFDXkVs/stxI74eZUrZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2620 (0xa3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Validity
Not Before: Oct 2 20:03:07 2026 GMT
Not After : Oct 9 20:03:07 2026 GMT
Subject: CN=6ac00dfb-8022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:3b:6e:95:c3:fb:b2:3b:70:fd:f9:7b:f5:
73:9c:84:88:48:13:48:7a:97:ea:3a:0b:68:9f:ee:
e0:33:b7:cd:6e:e9:12:e8:37:c3:f5:74:b9:18:be:
5b:3e:15:e4:2f:66:48:10:46:18:e3:08:29:7b:07:
07:e9:9c:95:2b:23:bd:18:b3:87:9c:54:a3:be:1b:
d5:62:a4:93:e3:37:ee:ff:28:46:f7:ff:ae:69:cb:
df:a3:b4:b2:4f:7c:6e:b7:4c:64:5a:66:2e:59:77:
09:b4:d8:3f:7d:a8:3f:eb:af:99:39:aa:8b:ad:78:
89:4b:4c:db:71:59:13:f5:1b:2c:42:2b:ad:02:3e:
34:dd:9e:19:df:c7:33:9c:e0:0e:47:23:14:8f:de:
98:79:e0:14:a0:8e:64:98:a9:f5:a1:49:ab:a4:9c:
42:1b:ac:0c:49:67:a4:43:24:8c:f9:22:44:92:fa:
53:7f:7b:57:9d:a9:59:8b:d1:c7:96:ee:d8:52:d4:
98:71:c4:a0:dc:7c:c3:5a:34:19:07:a1:d9:3d:24:
75:7f:6b:e3:ed:66:fd:71:ae:79:b0:30:55:8d:be:
03:35:94:4d:1e:0b:ef:de:bc:95:98:81:c3:04:07:
5b:aa:94:4f:dc:89:19:6b:4e:7e:d3:86:f2:59:25:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:1F:E4:05:9D:03:2B:84:61:FD:2B:87:2F:44:76:82:2E:97:5A
X509v3 Authority Key Identifier:
keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:d5:44:47:3a:16:22:6d:de:d7:70:b0:8e:08:ed:e0:dc:
5b:32:98:ba:de:65:7f:e6:8e:7b:dc:c7:01:ae:b2:be:cb:70:
1c:61:f1:84:ad:df:37:c4:32:dc:3b:a8:1d:2e:82:46:6f:97:
04:30:af:a5:e2:39:2b:3e:76:28:0a:c6:c2:a4:bd:7a:56:e3:
10:d1:1b:3f:c1:8e:c4:72:d2:6f:19:69:15:0b:18:31:7b:1e:
b8:0c:40:46:5a:f6:eb:fa:1b:af:96:c2:8b:39:8f:b5:dd:4d:
f4:a0:10:72:f5:07:5e:4b:4f:f8:33:0a:27:58:c3:19:f4:17:
13:21:7b:22:8d:ab:ad:31:29:cc:21:3f:3e:ce:89:20:46:ff:
7a:81:fb:7c:0a:b8:73:5c:25:48:85:a8:e3:a2:85:8d:b9:10:
83:8b:4e:44:dd:68:db:34:c4:21:81:5d:b4:ed:1f:4e:d8:51:
22:dc:4c:cc:07:93:3b:66:9d:69:73:8f:26:71:7c:9b:4e:3e:
a9:78:b1:ab:6f:c3:7c:2a:54:f2:7e:55:66:09:b0:5f:e4:bb:
5a:b7:07:8e:26:92:4c:84:10:21:dc:ad:c7:dc:23:da:85:22:
54:83:46:6e:28:f4:8b:62:05:96:30:ec:bb:eb:82:f6:33:be:
ae:50:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:24:51 2026 by rpki-client