
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: 427EQSfWTutX8dXJWmb3laai+p2AKGgrEHwCdQYPPns=
Subject key identifier: 27:79:E4:5D:7A:64:38:D7:F9:7D:AA:DB:7C:F1:68:9B:25:ED:3C:F8
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 35D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 35A6
Signing time: Thu 24 Sep 2026 15:13:37 +0000
Manifest this update: Thu 24 Sep 2026 15:13:36 +0000
Manifest next update: Thu 01 Oct 2026 15:13:36 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: XYhrJz9dsP3Md8Pi4xfFzCIET+pO6Hafyrhl8i+Ylaw=)
2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
3: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13776 (0x35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Sep 24 15:13:36 2026 GMT
Not After : Oct 1 15:13:36 2026 GMT
Subject: CN=6ab53e21-b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:ed:d8:f2:e4:36:39:ca:b2:a8:a8:7f:36:
2d:fe:c1:1c:f1:46:fb:d1:57:4a:b9:76:00:ca:01:
d7:8f:6e:80:01:b9:aa:9a:a5:46:40:fe:1b:8e:62:
d0:d6:07:f9:ea:1c:b3:f9:5f:40:d2:27:f8:14:d3:
64:22:aa:f6:aa:ce:80:c4:50:bb:bb:7f:ab:96:07:
35:57:21:50:5b:f9:9b:d2:77:d9:7b:20:1f:c4:0e:
e9:ec:9e:43:7a:3a:d4:44:64:b8:d4:05:e0:d2:bc:
4d:82:36:f4:e5:07:11:33:a7:46:82:70:c9:74:08:
0f:fa:01:7e:20:26:e3:08:cb:a3:85:ef:05:b2:ba:
21:1f:8f:f5:f4:aa:53:97:2a:33:56:b1:a1:db:50:
9e:29:64:01:08:f4:c3:21:ae:b4:07:79:ff:4e:aa:
cc:ee:c9:6d:4e:23:4b:78:4c:cd:3f:fe:67:1a:68:
9a:db:f5:00:32:cb:32:9a:8b:79:96:02:9e:c4:b6:
d6:c5:d1:e9:54:42:b5:02:81:5e:19:6e:1d:37:7c:
ae:3d:2a:bd:fe:b6:c2:8f:ca:f7:93:d4:5e:88:94:
18:e6:8a:e2:74:31:32:14:f0:53:35:94:cf:d1:24:
a2:64:e7:1e:cd:79:2a:6b:68:5f:2c:3a:e8:58:62:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:E4:5D:7A:64:38:D7:F9:7D:AA:DB:7C:F1:68:9B:25:ED:3C:F8
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:42:d6:f6:7f:40:ef:90:22:44:48:1b:e4:45:da:42:9e:19:
e1:89:f9:1b:30:7f:fb:2d:ff:f3:79:88:45:2a:8c:1f:d4:a6:
f0:b2:9a:f2:65:ac:fe:ed:6d:59:53:ea:40:30:a3:0e:30:47:
3d:ad:06:df:e8:ce:d8:26:29:fd:7d:f1:2d:88:0a:bd:5e:8f:
06:bb:6d:84:19:1f:5f:4f:91:44:d8:f1:8c:11:7e:2a:7d:b2:
9a:18:c6:8b:8f:2a:18:dc:3e:1a:c3:6d:ea:31:aa:07:53:72:
c0:a6:0b:b4:4d:f0:aa:94:70:8f:0b:85:f8:19:42:95:5c:6f:
bd:9c:67:39:04:c6:6f:d9:67:5d:3e:1a:5d:95:e5:5f:a7:54:
87:ce:b1:65:e1:23:18:7f:ac:eb:79:2a:78:6d:0a:a7:71:fd:
ee:8c:31:5b:af:c3:19:63:62:c1:90:1e:3f:92:0d:3f:c0:17:
07:cd:7c:08:cd:a7:58:8a:4c:a4:c8:ca:6a:ce:f0:15:dc:ce:
79:4f:3b:3b:1a:a8:e0:1f:7d:53:a1:cf:09:4a:54:eb:d5:79:
25:e0:83:61:8a:16:52:32:03:c9:d1:4d:a1:2b:0d:35:8b:23:
e5:e3:95:7d:26:0e:3b:71:54:c4:45:ed:b2:85:ee:9a:80:6f:
8f:31:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:06:32 2026 by rpki-client