
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: NHpMAYpOcf8HexA0F05m6qtwrZNA7GS5nbMzzLJN5J4=
Subject key identifier: 8A:3A:0D:FC:3E:4C:AE:A0:BD:A0:5C:88:3C:C3:71:56:18:92:B3:7C
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0697
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 0688
Signing time: Sat 26 Sep 2026 22:35:31 +0000
Manifest this update: Sat 26 Sep 2026 22:35:30 +0000
Manifest next update: Sat 03 Oct 2026 22:35:30 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: 2WEd8k+L5o57ouLCktomgZXgVuRTKbJM63lSnOGEMCo=)
2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: Rnz7YdmM/dFUbfVZUB1hF2F9t7TaIkBVLBwLs6I5YcM=)
3: 4D0C006C76C611F194A7C5D875A30FBC.roa (hash: aw+wjqTvXBV1XIeL4o+TSL3pjvhQFfAu+VBJTX/VGdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Sep 26 22:35:30 2026 GMT
Not After : Oct 3 22:35:30 2026 GMT
Subject: CN=6ab848b2-98fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:fc:b6:a3:29:05:17:32:32:dd:b3:54:38:
a8:a8:65:67:b5:de:2f:12:ff:d3:6e:73:63:fe:d8:
ae:33:4e:a1:de:67:a7:98:3b:39:f3:ca:68:ab:e1:
ed:ad:2f:37:46:86:a1:ef:52:d5:8e:44:0e:5b:fc:
dc:8e:b7:d8:d6:23:5d:da:a3:5a:f7:2b:ec:66:c4:
73:1f:d3:83:52:54:a7:c8:2d:b3:1b:e6:c7:00:b8:
4f:fa:21:fa:4b:48:7e:97:52:5c:4b:c5:a1:0d:47:
f0:05:7e:35:d3:2b:15:6a:a5:e0:8a:63:f5:4a:51:
2e:1e:36:88:e4:f2:15:47:d9:fd:86:43:18:35:ea:
8b:6f:c3:ac:bc:a0:d1:e8:f4:f4:b5:c7:37:b4:15:
46:86:b0:94:44:c3:34:8b:f4:a0:87:77:52:4d:fc:
8b:2f:6f:81:69:2b:8c:ac:06:23:e1:d4:12:7f:db:
e3:ce:d4:2d:99:0e:f3:aa:5b:23:94:9f:3a:4d:79:
a9:7e:c5:bf:93:ca:3e:5c:6a:91:10:92:2d:7b:cd:
9e:4e:4c:2e:8e:5d:b3:7e:a8:40:84:0b:b0:c8:06:
54:3c:ff:af:df:fa:f0:79:ba:6e:d6:ee:75:40:c8:
d4:8a:f3:6c:15:76:d8:68:b2:b6:4d:a1:25:38:7b:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:0D:FC:3E:4C:AE:A0:BD:A0:5C:88:3C:C3:71:56:18:92:B3:7C
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:a6:b6:61:aa:c3:99:4d:cb:d6:a0:48:f3:e4:6b:05:b4:
02:79:f8:58:c5:87:9f:e4:96:4c:b3:15:fa:eb:11:6d:10:aa:
d7:ec:66:01:f4:9e:14:94:9c:20:17:df:23:18:bd:0a:cd:0a:
37:cb:55:25:d3:aa:09:d4:4e:ce:38:85:97:64:7a:fd:88:1b:
bb:16:e0:98:81:ff:ed:ce:98:f1:58:6f:b3:49:a3:48:2c:75:
c9:ee:65:ae:63:8f:b4:c2:98:09:8b:6c:53:24:0a:4e:49:ff:
86:41:33:e2:11:d1:57:c7:03:48:a2:09:60:96:94:99:f2:ea:
b3:0d:b4:42:06:86:80:ff:ac:dd:b8:8e:32:23:d7:31:82:14:
1f:19:a8:8f:38:91:0c:de:14:03:fb:4a:5a:27:4f:6d:67:4c:
9c:22:c9:ef:c9:51:05:ae:ab:4c:04:13:d2:a2:ca:9f:84:41:
46:89:cd:64:2a:dd:32:fc:0d:3b:c8:59:14:4f:74:a4:fb:ae:
f9:d8:a4:a5:92:3b:12:13:57:63:64:2f:2b:b0:a2:59:a1:fd:
81:1d:0c:71:f5:5f:33:5c:b9:5a:88:ee:cd:2d:6a:54:47:13:
9f:5c:50:13:f5:a5:48:d5:18:1b:a2:b3:ab:f4:b2:4b:a0:01:
fa:e1:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:41:04 2026 by rpki-client