
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier: 8EYk44MAasg88exaqhLsMfN/SCzXOEOhx009IRb+JRM=
Subject key identifier: 66:B8:FB:0C:4C:64:B7:24:62:E2:16:4C:0E:6D:75:10:88:4F:DB:9A
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number: 019F
Signing time: Wed 23 Sep 2026 04:22:00 +0000
Manifest this update: Wed 23 Sep 2026 04:22:00 +0000
Manifest next update: Wed 30 Sep 2026 04:22:00 +0000
Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: rUdOjIl2abQP7sDKdpMGqsL+Ye802EacyigxVTIcaJI=)
2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: LLzDHWFeR7YGgtQNekPvZqfbxMpDLnmmSQTfiW3fryQ=)
3: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: aBUOBXMTWZ/Y7J/bfOJPKGZIcDfm4L0bUXS0vlJaRmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Sep 23 04:22:00 2026 GMT
Not After : Sep 30 04:22:00 2026 GMT
Subject: CN=6ab353e8-c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:db:01:a2:7a:13:9c:87:8a:53:a9:f4:70:
b4:65:7b:9e:f7:a8:a1:59:94:a4:30:46:aa:39:31:
f7:11:4a:ce:15:a2:4c:d5:1e:4d:2c:d8:98:78:6d:
ba:5b:5b:b4:36:d4:b9:02:4f:c9:2a:8d:6b:dd:92:
36:50:bb:69:27:65:40:93:14:d2:e1:61:70:5f:0b:
dc:8c:f7:80:47:86:21:1e:17:d1:91:30:49:e2:53:
7f:ce:bb:15:06:76:24:22:a2:6b:d9:b0:ce:be:02:
fb:4b:f2:cf:cd:1f:81:12:fc:23:63:1b:b6:88:1d:
57:b5:fa:d2:af:5c:ac:70:7b:3c:8c:e8:02:d9:63:
47:36:99:00:53:c5:37:58:8f:f3:b5:e0:b8:4d:c1:
12:6f:e2:ad:17:ac:e6:9e:b9:96:16:88:e2:6d:e8:
11:d0:ad:dd:04:61:bb:70:ec:21:7d:cd:94:8a:86:
90:ba:df:c8:e4:19:17:0e:48:64:08:89:af:29:44:
f9:40:80:66:15:07:9b:96:72:3b:bb:ef:36:e3:3c:
b1:76:71:e9:97:6d:78:b8:31:65:c9:be:47:5b:b9:
12:0a:da:d9:1c:a0:fb:9e:20:84:3f:96:f7:6e:ca:
09:36:16:8e:dc:9d:3c:94:54:05:97:22:9d:05:d5:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:FB:0C:4C:64:B7:24:62:E2:16:4C:0E:6D:75:10:88:4F:DB:9A
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5e:06:a1:22:64:3e:d6:a8:93:dc:c1:a4:0a:ab:25:d4:9d:
4c:59:c5:76:5d:fe:2f:77:0b:a9:74:00:28:62:e8:3c:9e:9b:
a6:b8:1f:68:fe:32:14:19:e8:91:7a:27:cf:2f:28:41:f2:ec:
29:53:14:16:b3:52:21:30:53:bb:a1:29:2d:de:b9:fe:7d:67:
01:df:f1:6f:90:51:fa:71:b9:cb:95:0a:08:46:66:11:0a:22:
71:b7:5d:6b:0d:79:a2:43:d5:b3:aa:17:d3:15:a1:27:21:5b:
69:e5:14:18:6d:33:3d:3e:49:3c:0d:34:e5:60:e2:d9:a5:cd:
95:bd:b9:e0:e1:45:e9:3c:16:57:80:c8:a6:1e:93:83:21:a9:
f4:7c:3c:00:c9:c6:7b:d1:e3:71:16:d2:1c:ee:35:22:a7:22:
32:85:93:ad:40:b1:2e:b4:eb:4f:dd:80:67:16:86:60:e5:33:
cf:99:ad:44:5e:e8:b0:aa:12:a2:f2:c3:23:67:e8:04:f3:8d:
b9:b7:61:f2:28:e4:63:ea:69:47:b1:11:24:f1:f3:6a:ed:e6:
81:13:24:50:76:68:71:75:05:4f:73:c8:e8:2f:74:8d:7d:99:
c3:2d:67:14:57:af:7d:63:3a:99:64:76:58:8e:7f:bb:b6:15:
68:df:11:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD
MTRDQ0ZFM0IwHhcNMjYwOTIzMDQyMjAwWhcNMjYwOTMwMDQyMjAwWjAYMRYwFAYD
VQQDEw02YWIzNTNlOC1jNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVHbAaJ6E5yHilOp9HC0ZXue96ihWZSkMEaqOTH3EUrOFaJM1R5NLNiYeG26
W1u0NtS5Ak/JKo1r3ZI2ULtpJ2VAkxTS4WFwXwvcjPeAR4YhHhfRkTBJ4lN/zrsV
BnYkIqJr2bDOvgL7S/LPzR+BEvwjYxu2iB1XtfrSr1yscHs8jOgC2WNHNpkAU8U3
WI/zteC4TcESb+KtF6zmnrmWFojibegR0K3dBGG7cOwhfc2UioaQut/I5BkXDkhk
CImvKUT5QIBmFQeblnI7u+824zyxdnHpl214uDFlyb5HW7kSCtrZHKD7niCEP5b3
bsoJNhaO3J08lFQFlyKdBdVwRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa4+wxM
ZLckYuIWTA5tdRCIT9uaMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy
NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2
Q09sN0l1VzJDYXZCVE1fanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu14GoSJkPtaok9zBpAqrJdSdTFnFdl3+L3cLqXQAKGLoPJ6bprgfaP4yFBno
kXonzy8oQfLsKVMUFrNSITBTu6EpLd65/n1nAd/xb5BR+nG5y5UKCEZmEQoicbdd
aw15okPVs6oX0xWhJyFbaeUUGG0zPT5JPA005WDi2aXNlb254OFF6TwWV4DIph6T
gyGp9Hw8AMnGe9HjcRbSHO41IqciMoWTrUCxLrTrT92AZxaGYOUzz5mtRF7osKoS
ovLDI2foBPONubdh8ijkY+ppR7ERJPHzau3mgRMkUHZocXUFT3PI6C90jX2Zwy1n
FFevfWM6mWR2WI5/u7YVaN8RJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:29:22 2026 by rpki-client