
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json)
Hash identifier: N6Q3bNRfUjDgaGZdKlARtfrQQUZVrayyFumLJQKHRxk=
Subject key identifier: 05:B9:0D:5D:07:C5:65:EB:4C:51:A0:40:26:F0:38:77:EE:17:F0:3F
Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
Manifest number: 0102
Signing time: Fri 25 Sep 2026 06:14:05 +0000
Manifest this update: Fri 25 Sep 2026 06:14:05 +0000
Manifest next update: Fri 02 Oct 2026 06:14:05 +0000
Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: j1rF/+gfW/DtcCKmVgcfOLUI0vTQu/tTlssHtVeiFTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Validity
Not Before: Sep 25 06:14:05 2026 GMT
Not After : Oct 2 06:14:05 2026 GMT
Subject: CN=6ab6112d-cc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:c1:76:76:fe:aa:ce:bd:38:f1:bb:1b:b9:
24:69:ca:1e:f2:4a:07:cb:48:b1:ef:55:4b:0b:8c:
1e:18:78:79:d8:5f:24:ec:9f:95:7c:70:bc:63:14:
93:47:8d:60:88:5e:fe:01:98:d4:c5:32:e5:88:8a:
d5:f9:a9:aa:da:ec:97:79:f0:ce:b2:9d:8c:bb:fc:
c8:9c:1c:c4:44:ea:7f:b4:34:ed:28:f5:96:d8:20:
fb:c4:e3:49:04:e6:15:7b:91:36:ed:c9:e3:0f:c3:
a2:e4:dc:b4:fa:25:c4:7f:81:31:86:50:ac:11:67:
55:48:51:27:41:0c:8a:56:60:be:23:0a:62:9f:9f:
41:d1:a7:12:30:df:19:b5:63:98:ac:f5:cd:04:19:
35:01:ba:b9:af:b7:af:d7:41:41:b3:9b:53:15:d5:
74:2c:0e:be:14:d3:a9:63:49:a6:d5:81:6a:81:26:
a1:95:99:7e:3f:ff:38:0c:e0:49:18:bc:44:9d:a9:
1d:74:5b:6c:6b:cd:c3:d9:5d:02:99:10:78:ee:d3:
9b:c6:61:ec:87:dc:1f:c5:ae:02:17:5a:bb:69:bd:
fd:cb:8d:39:30:b7:ec:0d:5a:d8:c1:e9:85:eb:88:
d7:74:b4:f1:ce:13:1a:89:8c:26:4e:8d:f6:fd:ec:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B9:0D:5D:07:C5:65:EB:4C:51:A0:40:26:F0:38:77:EE:17:F0:3F
X509v3 Authority Key Identifier:
keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d7:b8:16:1e:a1:7e:37:2d:21:63:84:66:32:8d:f9:37:14:
b0:f7:96:38:66:38:17:72:9f:61:f8:47:ef:ef:00:24:9d:0c:
dc:8a:24:be:5a:a4:8b:39:4e:d7:1a:2f:2f:35:e0:80:03:9b:
73:20:e2:e3:0f:a4:6a:f8:37:e5:a3:b7:be:f1:15:dc:d1:3b:
3b:42:6e:78:94:42:d8:4f:ec:54:ea:b5:8f:28:42:1d:db:82:
6c:a2:b2:86:64:a9:85:c6:84:ac:c1:16:f1:43:cb:4e:11:76:
8a:0b:bd:ab:78:d9:3d:8b:a3:66:9b:ae:8c:c8:b6:c2:da:a2:
1d:08:17:cd:6f:b6:cf:d2:c4:a3:8c:3b:41:af:04:a4:70:e8:
b8:99:e2:21:b1:97:05:58:e9:29:27:fb:04:12:19:58:ba:08:
83:05:4a:d9:cb:d4:4b:f2:28:fc:3a:8b:5f:3c:a6:66:f2:d4:
f5:2d:8d:be:43:5c:43:2d:13:82:18:35:43:ea:d1:ad:f5:36:
3c:63:b4:d4:ef:99:58:a6:df:bb:bc:80:ac:5e:05:3f:70:34:
7f:0b:fc:2f:d7:50:4e:95:9d:d8:bf:7d:b6:c6:4c:3d:7c:33:
af:4c:e3:76:0b:74:ef:61:d9:32:69:50:6f:49:64:60:24:6a:
94:bd:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:45:02 2026 by rpki-client