
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier: V/yTwvBrHEXaPBoQjFBTFGdm2VSoTT5sv6dE+nLE0QU=
Subject key identifier: FC:C1:BB:E5:4D:34:A8:53:8F:EB:C3:D9:49:D9:E2:4E:72:6B:05:AC
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number: 01C2
Signing time: Fri 25 Sep 2026 04:02:12 +0000
Manifest this update: Fri 25 Sep 2026 04:02:11 +0000
Manifest next update: Fri 02 Oct 2026 04:02:11 +0000
Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: MD3lAoTcH3H4JmYzeBviRBvsApB7OWa/p/pwBhDeT8k=)
2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: b6508MSXVyNaUe4p4vgfVTolfpDsTV9uysiL+YPvW8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Sep 25 04:02:11 2026 GMT
Not After : Oct 2 04:02:11 2026 GMT
Subject: CN=6ab5f244-c39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:8c:6a:61:ca:21:15:9b:18:bb:84:d5:01:
24:52:6d:1f:c8:4f:32:2a:6a:02:53:01:31:37:86:
97:70:84:f1:7e:e9:39:17:d8:3d:8d:1c:2e:f9:98:
00:c7:8b:cb:64:cd:23:40:7c:49:7e:0b:99:b6:44:
7f:c9:de:f9:dc:74:9b:cf:e5:c7:16:d4:e1:b7:e9:
84:9f:a2:a8:b2:63:f8:a3:e3:c3:fe:37:31:97:4f:
13:a4:6e:66:34:53:bc:6f:0c:af:71:0f:3e:f2:4c:
a9:8d:a8:fc:12:86:9c:c8:d5:f2:54:77:ca:c1:23:
11:6b:1c:fa:5e:3c:7f:8c:64:29:5e:46:71:90:f8:
bc:36:9c:d1:4d:db:0a:dc:37:a6:be:7e:d4:86:43:
57:93:6b:fc:01:9f:b7:ab:ce:74:3b:72:fb:85:0b:
ca:2b:86:5f:73:18:1e:44:e8:a3:05:82:b0:c8:54:
a0:c7:1f:f9:3f:19:bb:95:f9:71:55:45:30:74:cd:
6f:9a:c5:1b:d4:7c:b1:6e:37:5d:6a:f5:c7:42:cc:
b5:3e:02:66:37:f9:f2:90:2a:4c:21:29:f4:03:8f:
70:38:6c:e1:d6:94:55:2a:6b:c8:f6:48:75:8d:32:
bf:76:2c:80:6a:69:ed:c3:18:3d:13:d8:13:a8:f8:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:BB:E5:4D:34:A8:53:8F:EB:C3:D9:49:D9:E2:4E:72:6B:05:AC
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0e:74:b6:e4:d0:25:7f:29:5a:91:34:c4:c9:86:80:18:eb:
f8:53:59:11:66:23:90:a5:c0:a5:fc:ed:80:f1:83:72:c6:6b:
7e:bf:e5:eb:73:87:69:0c:46:c2:ad:be:ec:50:8c:85:13:19:
f1:65:97:6f:9f:db:24:2b:13:a1:42:97:35:8f:1a:cc:c9:4b:
95:3f:92:de:08:4e:c8:f1:88:54:7e:e3:b1:03:8a:e6:1d:19:
e0:19:73:c2:b4:3b:52:93:0c:c2:88:cf:06:6c:c8:e2:da:86:
52:ab:ca:43:a1:18:8b:cd:ba:b0:84:d4:e8:78:13:84:bd:53:
3e:86:e0:dd:b8:fd:ab:f4:45:a3:fa:76:6f:5a:7e:15:5f:83:
09:4f:ed:71:a4:3c:85:48:86:c3:c9:fd:42:bc:57:bb:ec:ec:
13:4c:4f:14:40:34:ab:3c:c0:44:56:40:38:b5:27:f2:83:a3:
05:58:0c:c7:40:9d:f6:fd:20:20:76:52:6f:d8:09:e8:37:9d:
48:bb:af:6d:2f:69:98:e9:b8:21:3c:90:eb:d5:0b:08:da:16:
36:35:0f:d7:c7:f5:5e:b5:ad:d3:eb:a3:d0:7f:59:eb:e7:b3:
87:9d:55:2a:62:8d:b6:4c:98:0d:c5:71:c3:52:3f:27:a7:f5:
0a:1e:ca:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw
QTYxRUU4NkQwHhcNMjYwOTI1MDQwMjExWhcNMjYxMDAyMDQwMjExWjAYMRYwFAYD
VQQDEw02YWI1ZjI0NC1jMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0yMamHKIRWbGLuE1QEkUm0fyE8yKmoCUwExN4aXcITxfuk5F9g9jRwu+ZgA
x4vLZM0jQHxJfguZtkR/yd753HSbz+XHFtTht+mEn6KosmP4o+PD/jcxl08TpG5m
NFO8bwyvcQ8+8kypjaj8EoacyNXyVHfKwSMRaxz6Xjx/jGQpXkZxkPi8NpzRTdsK
3Demvn7UhkNXk2v8AZ+3q850O3L7hQvKK4ZfcxgeROijBYKwyFSgxx/5Pxm7lflx
VUUwdM1vmsUb1HyxbjddavXHQsy1PgJmN/nykCpMISn0A49wOGzh1pRVKmvI9kh1
jTK/diyAamntwxg9E9gTqPgziQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzBu+VN
NKhTj+vD2UnZ4k5yawWsMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG
MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT
Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsQ50tuTQJX8pWpE0xMmGgBjr+FNZEWYjkKXApfztgPGDcsZrfr/l63OHaQxG
wq2+7FCMhRMZ8WWXb5/bJCsToUKXNY8azMlLlT+S3ghOyPGIVH7jsQOK5h0Z4Blz
wrQ7UpMMwojPBmzI4tqGUqvKQ6EYi826sITU6HgThL1TPobg3bj9q/RFo/p2b1p+
FV+DCU/tcaQ8hUiGw8n9QrxXu+zsE0xPFEA0qzzARFZAOLUn8oOjBVgMx0Cd9v0g
IHZSb9gJ6DedSLuvbS9pmOm4ITyQ69ULCNoWNjUP18f1XrWt0+uj0H9Z6+ezh51V
KmKNtkyYDcVxw1I/J6f1Ch7K3g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:36:03 2026 by rpki-client