
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
File: JfzCC3gzseILvBM0UQqTrh1obMA.mft (raw, json)
Hash identifier: vZW7Ssrfby9KQXFqmHidNlX8wGk/gQaPBQF2Nr1sx14=
Subject key identifier: 04:DD:99:44:52:AF:7D:D9:96:0E:5E:85:F7:98:30:18:9C:8C:48:97
Authority key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
Certificate issuer: /CN=A918AA54/serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
Manifest number: 0402
Signing time: Wed 23 Sep 2026 00:04:46 +0000
Manifest this update: Wed 23 Sep 2026 00:04:46 +0000
Manifest next update: Wed 30 Sep 2026 00:04:46 +0000
Files and hashes: 1: JfzCC3gzseILvBM0UQqTrh1obMA.crl (hash: Km2P0GB7Cn/6rmRn6j0MZrRPHpXNILGMTotvct/1MQo=)
2: FD8683B6AB2F11F199111181AFEE528E.roa (hash: nj7zpHhdZPeAnSuqqiBAFC350E8Xly3tDniLk5HF2SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Validity
Not Before: Sep 23 00:04:46 2026 GMT
Not After : Sep 30 00:04:46 2026 GMT
Subject: CN=6ab3179e-ce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:a2:d2:ed:14:c0:60:f8:e5:59:d6:f9:67:
20:2f:fc:ea:22:3b:59:b1:4c:e8:f8:dc:0c:23:c2:
8a:5e:b3:cc:85:fd:0e:14:5c:cd:59:1d:e3:4d:d7:
0c:a5:44:bc:8d:e0:d4:32:d0:55:db:56:6d:e4:8c:
71:58:bf:5b:fe:be:df:01:72:b3:c3:66:c8:60:e7:
7d:2b:73:1f:ce:94:71:1d:f5:58:9d:da:52:c4:59:
f4:16:86:7f:ce:e9:da:43:1d:d5:1d:fe:01:1c:75:
1b:ab:19:88:ba:9f:af:65:ce:e2:fb:76:f1:0b:44:
c6:4c:c3:8b:91:63:7d:cf:94:2f:14:c4:ce:98:13:
23:a9:51:c7:d3:b0:ce:54:2f:f3:fc:33:63:29:d0:
da:7e:46:0e:cf:cd:b9:3e:a1:f3:95:51:f1:78:84:
6b:a9:f8:62:bd:3b:d7:b7:f6:ad:6e:fe:89:7c:da:
6d:54:65:35:20:aa:6c:bf:1a:20:9f:8e:6d:2b:df:
e1:b4:58:b3:36:06:75:e7:59:b3:fb:95:b1:7f:a3:
42:af:bf:d7:23:7b:9e:41:fe:9c:44:31:60:0c:51:
b3:aa:47:b1:ce:fc:dc:c3:d4:db:21:f8:8e:8b:78:
8b:73:a5:2e:30:aa:c9:dc:7f:64:05:6c:ae:ff:d8:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:99:44:52:AF:7D:D9:96:0E:5E:85:F7:98:30:18:9C:8C:48:97
X509v3 Authority Key Identifier:
keyid:25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:f4:f7:0e:cc:07:96:21:a9:8b:72:3f:9a:35:e5:42:59:
f6:d5:b6:45:4b:a8:c5:b1:85:29:ce:9f:a5:ca:1b:68:4e:35:
d3:b6:1f:e0:87:b5:85:d4:42:5a:05:f9:47:85:27:7d:4a:99:
3f:b5:be:06:33:40:99:7c:a5:46:16:d8:49:2a:79:5b:50:85:
83:dc:51:3d:a2:f1:14:3a:72:fc:28:b4:00:84:9d:6f:da:16:
bf:cc:fd:47:eb:fe:da:88:53:d5:9e:3c:74:c8:1f:ee:8c:8f:
41:37:c8:5d:c6:4b:33:47:8e:d0:c4:4f:d8:87:f2:3d:af:cf:
43:12:0f:58:c7:12:5e:94:99:e7:07:ff:fe:ff:d4:63:da:cd:
bd:e7:32:90:a1:5c:9f:e0:51:11:16:e3:c0:2c:e7:1e:c6:6e:
47:83:cb:bf:d6:a3:45:57:48:bd:f7:42:b4:5e:a9:9a:3f:b7:
04:a6:67:9a:94:1d:a3:7e:d5:f7:3c:3f:9d:a6:0f:69:6a:48:
bc:6f:9f:7a:95:01:97:21:c0:8e:fd:e5:95:11:75:d2:69:60:
c3:82:f3:67:8f:aa:c1:a6:df:4d:21:e7:d1:4c:7b:15:51:f7:
41:fe:ab:f6:38:6f:0e:c8:9f:bd:28:2d:74:9e:01:a1:66:9f:
d1:63:19:25
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QUE1NDExMC8GA1UEBRMoMjVGQ0MyMEI3ODMzQjFFMjBCQkMxMzM0NTEwQTkzQUUx
RDY4NkNDMDAeFw0yNjA5MjMwMDA0NDZaFw0yNjA5MzAwMDA0NDZaMBgxFjAUBgNV
BAMTDTZhYjMxNzllLWNlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDShqLS7RTAYPjlWdb5ZyAv/OoiO1mxTOj43Awjwopes8yF/Q4UXM1ZHeNN1wyl
RLyN4NQy0FXbVm3kjHFYv1v+vt8BcrPDZshg530rcx/OlHEd9Vid2lLEWfQWhn/O
6dpDHdUd/gEcdRurGYi6n69lzuL7dvELRMZMw4uRY33PlC8UxM6YEyOpUcfTsM5U
L/P8M2Mp0Np+Rg7Pzbk+ofOVUfF4hGup+GK9O9e39q1u/ol82m1UZTUgqmy/GiCf
jm0r3+G0WLM2BnXnWbP7lbF/o0Kvv9cje55B/pxEMWAMUbOqR7HO/NzD1Nsh+I6L
eItzpS4wqsncf2QFbK7/2KMFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBN2ZRFKv
fdmWDl6F95gwGJyMSJcwHwYDVR0jBBgwFoAUJfzCC3gzseILvBM0UQqTrh1obMAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQTU0L0Q4OENEOUQ2REMz
ODExRUM5MzkxMEI2OEM0RjlBRTAyL0pmekNDM2d6c2VJTHZCTTBVUXFUcmgxb2JN
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmZ6Q0MzZ3pzZUlMdkJNMFVRcVRyaDFvYk1BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB
QTU0L0Q4OENEOUQ2REMzODExRUM5MzkxMEI2OEM0RjlBRTAyL0pmekNDM2d6c2VJ
THZCTTBVUXFUcmgxb2JNQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCM4fT3DswHliGpi3I/mjXlQln21bZFS6jFsYUpzp+lyhtoTjXTth/gh7WF1EJa
BflHhSd9Spk/tb4GM0CZfKVGFthJKnlbUIWD3FE9ovEUOnL8KLQAhJ1v2ha/zP1H
6/7aiFPVnjx0yB/ujI9BN8hdxkszR47QxE/Yh/I9r89DEg9YxxJelJnnB//+/9Rj
2s295zKQoVyf4FERFuPALOcexm5Hg8u/1qNFV0i990K0XqmaP7cEpmealB2jftX3
PD+dpg9paki8b596lQGXIcCO/eWVEXXSaWDDgvNnj6rBpt9NIefRTHsVUfdB/qv2
OG8OyJ+9KC10ngGhZp/RYxkl
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:00 2026 by rpki-client