
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
File: 0jiibFh9qtyxeoIbBRJMIzggPdY.mft (raw, json)
Hash identifier: nWTtHJYnL8cnXH4hpBWPW7UKkv5tjf0rkTSMVwmsBjk=
Subject key identifier: 21:FF:FF:C8:80:DB:45:5D:14:A7:FD:52:85:29:13:63:94:E4:C2:7D
Authority key identifier: D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6
Certificate issuer: /CN=A919B7F7/serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
Manifest number: 0F
Signing time: Sun 27 Sep 2026 09:43:37 +0000
Manifest this update: Sun 27 Sep 2026 09:43:36 +0000
Manifest next update: Sun 04 Oct 2026 09:43:36 +0000
Files and hashes: 1: 0jiibFh9qtyxeoIbBRJMIzggPdY.crl (hash: FkhxqEbBCREPhl41fYHL+HX8xy06+xNmJhEdIzZVkmg=)
2: FDA07E56A6A711F1BB23BA9A3811F970.roa (hash: jZsj6REmCguThaGYpbr8i0ORTeXH0I3L+SklubXql44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl
rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B7F7, serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6
Validity
Not Before: Sep 27 09:43:36 2026 GMT
Not After : Oct 4 09:43:36 2026 GMT
Subject: CN=6ab8e548-4639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:08:7f:ef:9f:3e:50:ce:d1:3b:da:ff:b3:
e2:4e:63:02:03:c0:58:11:6b:de:5b:c2:3a:3e:5a:
74:a4:de:a7:ff:e1:8d:af:82:de:01:5a:df:6a:1a:
4a:69:65:c1:57:8c:b0:1f:cd:3c:b4:18:cf:4a:92:
c6:fb:6b:75:ec:e8:9e:ef:b0:f5:42:f5:ac:5c:19:
42:77:cb:03:e5:f6:b3:9d:d7:59:57:3d:0a:be:4c:
7a:7e:00:9c:ff:80:21:15:71:ab:1b:28:dd:11:4c:
d7:84:ac:04:5c:47:d9:98:e7:4e:45:f8:77:81:d8:
54:8f:e7:9d:db:0c:9e:f9:78:11:57:a5:23:70:c7:
e3:ec:21:3a:f5:5e:6e:b1:c9:9b:0b:c6:54:e7:3d:
dd:4f:66:9c:69:06:c3:39:ff:cd:7c:9a:5a:b3:80:
b2:f3:f3:52:99:e0:15:a6:88:19:47:2b:45:5f:4d:
8b:84:9e:33:d7:9a:4f:39:47:14:d8:bf:ae:6e:d2:
a7:b8:ef:70:85:e4:97:93:6d:4d:84:16:fd:df:78:
4e:81:1b:01:2f:c9:56:ec:61:e7:f6:94:96:d4:9a:
a7:3a:38:ea:97:c0:c7:61:6f:31:a0:52:fa:e3:99:
cb:45:4a:43:3e:7c:da:b7:a1:ee:b7:88:eb:cb:ed:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:FF:C8:80:DB:45:5D:14:A7:FD:52:85:29:13:63:94:E4:C2:7D
X509v3 Authority Key Identifier:
keyid:D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:e0:4b:fa:23:93:91:5f:a4:b5:00:ad:f1:8b:c3:e7:f1:de:
21:c1:c3:f7:1d:ee:1f:ae:de:4f:49:70:6b:2e:e1:12:7f:a4:
76:11:fb:2c:16:12:20:fa:d9:91:a7:07:8c:16:0a:95:99:7f:
45:95:b7:9b:a9:a6:cf:04:70:e1:f0:e6:37:3d:59:1d:11:45:
31:4f:e3:f9:d7:e3:4e:8d:e8:b3:10:7f:43:34:ff:8a:33:7d:
f6:a0:3f:50:bf:b9:cc:36:27:2e:87:02:e2:1c:18:65:8d:5c:
fa:19:04:b7:90:a2:ea:81:cd:4e:97:df:b3:8f:7c:7e:ec:c5:
e4:07:76:83:8c:c7:23:21:ee:87:c3:88:18:51:31:52:b5:65:
d7:8f:32:a1:23:4c:f7:c4:0b:9d:c6:d5:2b:b0:ba:af:68:c2:
d4:cf:86:91:64:ac:12:67:5d:e6:29:f2:9f:db:f8:f6:71:bf:
e1:17:d6:8f:e2:ee:d3:cd:b7:d8:b0:85:07:ff:4e:3a:63:da:
2b:88:5a:e0:d0:35:45:94:f9:0d:b4:e5:af:ab:ea:bf:54:9e:
cf:dc:14:cc:d4:e2:23:ef:5b:15:c4:e1:44:e3:4a:a5:ff:b3:
4b:7b:b5:00:43:b6:7a:6d:b3:2d:53:44:23:d4:ab:43:3c:bf:
67:f2:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:30:04 2026 by rpki-client