
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier: CSGmD7ujt7FTdeXSfXlDjb8b+eMr/+187sowJSGaNV0=
Subject key identifier: 61:CF:1F:56:82:F0:3C:C7:81:22:E4:8B:7A:41:DF:06:4A:A2:92:40
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial: 3598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number: 358B
Signing time: Thu 24 Sep 2026 15:05:23 +0000
Manifest this update: Thu 24 Sep 2026 15:05:22 +0000
Manifest next update: Thu 01 Oct 2026 15:05:22 +0000
Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: C/tM55At+pvGvQHgaD9nqDXOehtXrXALpPlIldrXlm4=)
2: QZtxquwpYDoRbsQozqbgPWRGMhc.asa (hash: oV6xv1MVqgozeeJElPGU8MdoVN6LRwbSdSusktILKpU=)
3: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: rcFyozuFtBU24Fj/puD3Y3gAMLE1tFWBMfsBdsY0Lgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13720 (0x3598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Validity
Not Before: Sep 24 15:05:22 2026 GMT
Not After : Oct 1 15:05:22 2026 GMT
Subject: CN=6ab53c33-acbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:3a:6d:2f:e0:4e:94:09:6f:73:85:46:8b:
d8:9d:0c:c7:04:1e:50:9a:92:be:76:6a:8d:a7:85:
54:72:8d:5b:c8:f3:e4:99:48:4e:2d:ef:b2:65:54:
c8:cc:9f:3b:12:00:97:e8:f6:eb:a9:76:3e:3b:f8:
be:2a:63:c3:02:b1:87:c9:7c:57:d0:8c:56:b2:a7:
c1:fe:36:3c:6a:e8:fa:e4:c0:b0:f8:7d:36:31:e9:
ef:f4:b1:b8:b7:9b:fb:bd:2e:bc:84:68:42:f7:36:
c1:be:4a:b9:38:57:aa:25:07:cf:3a:08:9e:21:78:
87:93:f9:ee:00:c5:7f:ea:5e:27:04:d5:43:e3:7f:
cc:6f:7f:59:bc:67:8b:b4:a6:ea:c7:62:a0:6d:55:
c5:fd:d0:91:04:3a:77:fb:02:da:85:4b:4d:90:32:
7d:ad:b2:fd:df:d5:c4:74:e0:3b:aa:a9:12:6b:41:
c8:4b:b9:a8:58:86:14:2e:ff:4e:93:43:9c:6a:e7:
56:0e:42:11:90:3f:b6:d2:ae:e3:66:2f:5f:0d:67:
d9:06:b7:ac:05:90:2b:a0:80:4e:51:c9:54:c3:c2:
29:92:e7:52:32:01:96:d9:42:b9:af:be:85:87:62:
2d:cf:23:4a:0c:7d:8f:06:eb:8e:9e:6f:86:08:ec:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:1F:56:82:F0:3C:C7:81:22:E4:8B:7A:41:DF:06:4A:A2:92:40
X509v3 Authority Key Identifier:
keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:6e:93:2f:39:8b:37:ef:ae:00:41:51:f4:e8:02:c9:81:de:
fc:84:66:88:46:da:4e:75:14:0e:c6:d5:19:73:27:5f:1f:e6:
02:82:93:71:59:42:af:e1:73:10:f4:67:01:2c:c1:04:7f:24:
64:55:89:ae:1f:b1:2d:20:43:de:a6:d5:67:fd:7c:26:58:db:
1e:72:96:9c:7c:37:03:1b:9a:ef:41:e1:f5:fe:57:d9:c2:6e:
98:5a:1f:e4:0c:03:18:84:b2:f6:43:76:a5:7f:9b:6d:23:c7:
ec:e0:62:81:74:08:66:b3:f6:2a:3f:3e:aa:df:39:d1:8c:2a:
aa:23:b7:34:03:3b:6f:78:8a:1b:d6:d9:6e:13:f5:b5:b8:a2:
ca:ab:75:75:95:d7:e2:0d:c3:e8:62:eb:b4:5b:80:46:e6:ec:
8b:0d:e1:7c:cb:28:e3:48:ae:f9:b9:26:22:cf:44:31:99:73:
d6:68:e7:4c:92:83:c0:99:b9:b3:fd:68:23:0d:16:e2:2c:dd:
07:59:ad:f6:de:61:97:16:90:12:ba:2f:92:a9:d0:6e:62:87:
f8:1f:62:78:0d:81:d1:4e:0c:7a:c4:38:5f:62:89:81:f9:d7:
52:70:1c:51:9b:88:ec:2f:c4:be:d6:e2:37:6b:e9:93:86:0b:
a3:76:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:17:20 2026 by rpki-client