
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier: afc96zccj8QtSxfNSotRgFXVT7wINRCB8Nqg8usqtEU=
Subject key identifier: 49:32:06:E9:A6:AC:32:E2:04:30:F9:C4:9E:69:43:D0:1A:3E:0A:CF
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial: 0D72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number: 1234
Signing time: Mon 12 Oct 2026 18:08:58 +0000
Manifest this update: Mon 12 Oct 2026 18:08:58 +0000
Manifest next update: Mon 19 Oct 2026 18:08:58 +0000
Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: +nhx32teymiCkp2KAKzMBtizZCpyDKzc0MgvUebWDTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Validity
Not Before: Oct 12 18:08:58 2026 GMT
Not After : Oct 19 18:08:58 2026 GMT
Subject: CN=6acd223a-9c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:af:1e:ba:13:72:12:2d:25:81:33:81:d2:
1f:8b:49:53:86:49:00:c3:c6:de:e1:a0:0b:24:87:
05:7a:fa:11:32:b1:f4:6e:9e:41:83:01:6e:43:14:
a3:33:e6:e0:15:12:71:00:72:6c:08:87:02:2d:97:
63:8d:c5:45:c7:20:6e:1f:55:a4:a3:9a:5a:95:19:
58:8d:e4:90:a9:29:74:21:a6:8f:07:52:df:df:f7:
c1:2a:c0:f3:fe:ea:bd:4a:1a:8e:4d:92:90:b0:13:
f6:8a:d3:09:d5:5f:ee:24:f4:29:ba:da:e0:de:d5:
47:15:f0:e0:e7:20:84:ae:5b:d0:2d:8c:3d:f2:e5:
5c:fa:de:fb:73:e4:c6:51:93:d7:9c:f2:0f:d8:5e:
d8:c4:0f:6b:77:e5:29:a7:24:e4:25:61:e2:db:78:
c6:2a:76:54:65:9a:6f:2a:df:bb:61:f7:da:db:96:
2f:3b:ad:7f:c3:c7:ab:c2:b0:ed:90:91:34:5b:cb:
16:b1:7a:57:96:41:51:23:5b:0c:4b:10:43:6b:0e:
58:fa:7f:51:3b:26:f9:66:88:6d:11:3b:ac:43:e6:
23:d8:bb:a0:ba:de:c1:0d:e8:ba:b1:5c:30:79:23:
35:f1:4e:df:84:9d:4f:b6:83:61:e2:47:81:c0:ac:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:06:E9:A6:AC:32:E2:04:30:F9:C4:9E:69:43:D0:1A:3E:0A:CF
X509v3 Authority Key Identifier:
keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3b:4d:0d:5d:4e:ad:bc:5b:c7:1b:d3:5c:e2:97:9e:24:9d:
c4:bb:33:bb:6c:0b:52:49:92:c1:99:4c:6e:e7:2d:e4:82:96:
6f:1b:8a:81:da:e5:35:86:a2:6a:de:0e:2c:5e:6a:ef:a8:81:
39:54:23:d9:05:b9:30:ae:54:25:01:dd:f7:46:30:dd:46:49:
c0:d0:86:12:e6:e5:1e:f5:25:ba:d5:df:ff:fc:92:77:94:b4:
9c:3c:5a:4e:7d:e2:68:13:8d:b3:4c:a8:7e:32:52:1a:ee:6b:
9d:89:9c:f3:f6:7a:c4:2b:65:2b:5e:37:3d:93:72:c3:0d:98:
a0:9c:b9:4b:c4:4c:6c:3f:41:f6:f3:ae:59:15:b8:c3:03:9b:
12:9d:49:b9:46:59:96:39:47:f6:76:94:4c:1e:88:bb:fd:4f:
8a:52:24:f7:19:1a:e6:1d:78:74:2e:10:f1:45:b3:94:d1:fb:
6c:41:80:89:4a:e4:75:ad:ab:97:37:17:9a:44:b4:5a:31:ba:
d8:9a:50:1a:85:85:f1:a7:4b:ed:6d:80:a0:ee:8b:fc:2d:8a:
0a:69:a0:05:87:b5:94:56:82:16:c6:9c:ac:d5:80:50:15:9b:
03:e7:75:15:24:c9:e1:88:db:03:b0:96:21:33:97:19:8b:fa:
52:7f:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:31:11 2026 by rpki-client