
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier: taFLegtb4ihILJrv2DOTUXgisL9oDWkWZfedmqtfFxY=
Subject key identifier: 48:1E:B1:39:79:F7:66:01:55:1E:D7:09:D6:05:A8:D4:88:7A:9D:D3
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number: 77
Signing time: Wed 23 Sep 2026 07:40:52 +0000
Manifest this update: Wed 23 Sep 2026 07:40:51 +0000
Manifest next update: Wed 30 Sep 2026 07:40:51 +0000
Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: QOCDJHOGugz4zsRV6pO8c+g0jt0wEpE0RIZUt1P+YRo=)
2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Validity
Not Before: Sep 23 07:40:51 2026 GMT
Not After : Sep 30 07:40:51 2026 GMT
Subject: CN=6ab38284-7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:8c:57:43:72:b2:7f:2a:18:fd:66:e7:6b:
a0:53:7c:e2:33:57:e6:ac:43:65:da:00:ae:0b:b2:
05:ad:91:dc:3e:16:15:64:44:8d:07:ae:1b:27:8e:
1b:dd:d8:9d:16:b0:f2:83:81:8c:92:de:13:89:4b:
d9:7a:8c:98:95:a4:45:f1:09:80:55:54:b2:7c:8d:
46:1d:a7:53:35:85:08:fa:c7:49:77:9e:9a:9b:6f:
d4:84:62:fc:eb:37:c4:99:8f:28:5b:d8:8f:77:98:
05:36:fc:c5:e9:cf:92:7c:61:f4:e6:81:87:3e:49:
27:a8:d5:e3:1c:1b:fc:18:95:06:7b:c0:26:2c:5d:
06:1b:17:56:4b:42:21:62:1f:4f:9c:10:92:ec:e8:
87:7e:ba:66:c2:31:7d:fb:2f:68:4d:50:c1:08:f3:
32:81:6a:bf:35:5e:63:13:0d:b4:fe:29:68:f0:d8:
31:65:54:54:22:36:2f:34:67:1a:f5:9f:2b:5b:07:
15:d3:02:da:59:29:4c:44:f2:37:77:5e:4a:f0:f3:
36:c6:95:f0:40:f8:ee:fa:b6:a7:90:14:35:a3:dd:
28:1c:a5:42:e0:e4:42:20:79:ea:f1:8e:c2:19:22:
51:f3:46:bb:53:5f:6b:1f:0b:2d:6a:ce:cf:12:7b:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:B1:39:79:F7:66:01:55:1E:D7:09:D6:05:A8:D4:88:7A:9D:D3
X509v3 Authority Key Identifier:
keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:8f:1b:af:96:ec:ac:94:24:be:dd:20:03:5e:30:f0:d6:aa:
c0:9b:dd:0e:3d:2b:33:96:0f:d0:e6:74:5f:48:0e:45:48:f7:
a8:e6:02:76:49:b8:1c:fa:e8:a4:96:db:50:74:ab:81:72:6c:
bb:38:c1:99:af:9c:99:fa:64:e7:6d:f3:72:a7:bd:76:76:5f:
35:9f:c9:1e:32:b6:0a:4f:e2:ef:86:cd:8c:2f:64:e7:6f:e5:
e2:54:f5:95:cf:7c:ff:8f:79:ff:09:2b:57:cf:b3:ae:6d:ac:
09:a7:84:7f:83:ac:35:29:16:11:c4:e3:19:9a:45:57:9d:db:
62:57:bb:c5:e1:9d:e4:a4:ef:a0:0d:17:f1:84:21:e1:75:bb:
cc:bb:7b:b3:fd:92:65:4b:94:41:df:30:fc:a3:69:9a:4b:fc:
f8:6d:7a:b4:34:9d:5b:76:18:a0:8f:b7:f6:b7:2a:33:f4:48:
4d:9c:f0:8b:fe:bc:50:f2:50:42:a3:6e:8c:52:b5:90:cd:b7:
00:70:7c:d6:95:ed:25:09:52:4c:ad:56:c0:27:47:ce:f2:5a:
78:e7:6b:cb:e5:9f:97:b7:2a:a9:a7:4c:b2:48:44:24:e3:36:
61:3e:a5:45:51:85:05:f5:cc:61:c5:9f:e3:29:7e:ed:22:44:
da:3b:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:40:57 2026 by rpki-client