
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier: /I3Alc7uoRMDAv0HEML2SRZ7pvVJgsQ58STn2Pho100=
Subject key identifier: CB:1D:1D:CD:7B:04:88:05:21:FE:A4:03:76:FE:E9:87:99:E5:24:92
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0308
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number: 02F7
Signing time: Thu 01 Oct 2026 01:36:58 +0000
Manifest this update: Thu 01 Oct 2026 01:36:57 +0000
Manifest next update: Thu 08 Oct 2026 01:36:57 +0000
Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: mxywS2Zs5DE+4RGBJr2bQN2XjUZkYHxDi2YCynJU2fs=)
2: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: zhtgaYOP2t9BTocwcz6jeVnShJg9nciVYPAVq1zX9xk=)
3: 5ABA49EA40A611F1BD23BD8A94833773.roa (hash: NVzcrGSt+ddrTM0Iko1VtvfoHHrjPUpF32Wu/tFHIdI=)
4: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: wF4QZyfLj/lu9oPTV1o0DkfBCR57vW77Xsm6jbQbIuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 01:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Oct 1 01:36:57 2026 GMT
Not After : Oct 8 01:36:57 2026 GMT
Subject: CN=6abdb93a-642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:80:eb:14:df:2c:b4:f6:1a:03:03:46:6f:
70:32:99:4f:ad:99:d0:50:0c:0c:b6:02:69:09:9c:
6e:0e:25:87:59:b6:45:9a:96:dc:82:db:85:52:9f:
a3:e3:e5:3f:1f:36:27:31:3f:55:b7:a4:21:3e:04:
58:ed:8f:ae:f1:3c:0b:c8:eb:ac:bf:59:c6:63:79:
cc:62:c9:6d:c4:5b:27:4b:e8:84:c1:9b:4b:2f:ce:
d5:65:de:90:6b:34:c6:1e:97:38:a0:54:e7:45:b5:
c8:d8:1a:c1:12:d8:09:d6:99:3c:d0:e5:81:89:8d:
fd:ab:d5:c0:91:95:54:0f:0f:d3:64:28:cc:a4:c6:
cc:06:ed:61:63:2b:42:7b:f7:09:92:b0:af:a1:0b:
9d:55:11:98:3f:db:13:50:9f:b2:30:8b:6f:9a:54:
45:02:e1:d2:b1:07:8c:ef:07:76:c8:d0:ec:44:1c:
da:98:02:5b:79:7f:c0:60:16:79:1b:d1:98:f6:f1:
2e:0f:19:78:05:05:3f:47:67:b4:ba:61:3d:c2:21:
b3:18:f1:cd:cb:ef:87:b4:74:ca:27:81:9f:88:f6:
e8:28:5a:36:68:e4:6f:43:b4:98:1f:ca:e3:da:5f:
be:f1:71:ee:58:f2:8e:5a:c2:81:e9:4c:4b:ca:e4:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:1D:CD:7B:04:88:05:21:FE:A4:03:76:FE:E9:87:99:E5:24:92
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:61:5b:79:b3:c2:fa:90:ba:fd:c5:dd:bf:7e:25:c6:56:
a2:80:8b:c0:ac:d4:31:a8:12:8a:d2:f7:b9:b6:2e:f6:e9:19:
cb:da:5d:e4:47:01:4d:4a:62:c6:26:a1:73:ee:ea:30:7b:d4:
4a:ef:ba:7a:ff:9e:5f:5a:66:32:21:56:4e:5e:62:b5:24:d7:
db:39:9c:77:38:9d:56:80:84:11:60:03:af:16:fb:25:5b:d8:
ce:52:65:7d:cb:a3:35:06:c3:5a:ef:20:af:2d:91:83:95:b2:
46:57:e4:04:d6:22:7c:c4:03:82:3f:a6:0a:b3:50:71:ef:5d:
95:b6:88:48:69:4b:fc:0d:ac:e8:56:a0:4b:9d:35:13:d5:c9:
9d:04:92:f6:8c:dc:ca:7e:e1:a8:4a:66:3c:89:83:6d:9d:86:
a3:d0:24:3f:e1:04:77:ab:a3:ad:ad:fe:f8:36:39:98:ad:b6:
c3:c6:a3:ea:c4:39:78:f6:23:29:3c:77:5c:7b:bd:72:c4:7c:
93:8b:4d:6a:49:24:83:f1:12:57:39:73:16:4d:69:b9:f3:3a:
9f:87:73:5f:77:38:f8:36:ef:6b:13:6e:0b:aa:93:7e:ac:bc:
4b:e6:86:b5:6e:04:72:9e:96:0f:f1:78:2b:94:9a:56:3c:ef:
9a:80:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 09:03:57 2026 by rpki-client