
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: wyHRXW9/BaslCPpT4ij3AY/1O9HS8O9tBLD+FWWLhRY=
Subject key identifier: 35:37:3E:37:F2:A7:53:17:E2:6E:53:31:24:81:3E:22:19:7B:61:9D
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 0246
Signing time: Fri 25 Sep 2026 02:35:22 +0000
Manifest this update: Fri 25 Sep 2026 02:35:22 +0000
Manifest next update: Fri 02 Oct 2026 02:35:22 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: Ha2ARJBSSiEi/Xy5LuZnVCclXM+W69pYklGorg2lBxM=)
2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
3: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
4: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Sep 25 02:35:22 2026 GMT
Not After : Oct 2 02:35:22 2026 GMT
Subject: CN=6ab5ddea-f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:6c:7d:dc:bf:0a:37:38:a2:2b:95:6e:89:
2d:18:4d:a8:e8:0f:f2:b2:19:3d:35:3d:e0:3b:49:
39:45:50:6f:f1:95:e3:e9:7d:fe:43:ea:89:ed:82:
65:ae:f7:42:7d:45:62:21:e6:d6:c6:f5:53:e9:2d:
43:c2:06:16:94:73:c5:97:c4:b2:f7:da:f0:af:7c:
71:f5:81:b4:d0:23:34:64:ec:b5:7b:74:07:cd:9b:
dd:09:a4:fd:fd:39:93:c2:c9:78:d1:47:2f:65:3e:
75:77:5f:ba:30:ca:32:3c:93:35:a8:43:39:4c:03:
eb:17:7e:8c:22:ed:2c:c9:eb:c9:bd:d6:96:f5:42:
ee:56:8c:3b:b8:b9:08:83:20:f7:ee:8a:1e:17:3e:
bd:7f:8f:91:bd:14:77:ee:9e:29:7d:1e:82:f2:a5:
4c:f8:55:9d:96:e9:7b:0e:8c:12:f0:54:e0:a4:51:
66:df:ae:85:15:3e:7c:80:7f:04:2d:25:fb:2d:3a:
f0:40:33:94:dd:eb:9b:96:e1:7c:90:0f:7f:40:f5:
bf:b8:6c:ae:14:35:92:6f:ca:4d:5f:72:6d:cd:35:
b1:fc:9b:46:1a:22:33:7a:b6:6d:bc:c7:94:eb:1c:
ac:d3:41:ec:66:22:f5:66:aa:07:9a:fa:55:91:79:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:3E:37:F2:A7:53:17:E2:6E:53:31:24:81:3E:22:19:7B:61:9D
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:6c:a3:88:2c:98:ae:37:5b:7e:8c:b6:9e:45:60:51:ff:
68:f9:c8:9e:0d:de:54:5f:6d:15:4d:bd:19:d2:42:d1:76:e4:
fe:48:f9:98:a7:99:37:d2:a3:5c:2e:83:3b:fc:2c:9a:b3:92:
61:40:6a:d3:f4:3c:d9:3a:79:81:03:31:f6:75:7b:26:2b:fb:
97:44:e5:c6:ae:36:f5:57:95:a5:af:8a:70:f1:8c:9b:26:a8:
83:b3:e5:4d:5f:5f:2d:f6:00:d8:f7:36:d6:b0:60:22:e9:6d:
0f:e0:80:6f:cb:f9:d4:e9:4f:eb:41:c7:cd:72:ee:18:59:43:
c1:9f:71:c2:da:b4:07:56:ef:e0:20:39:3a:77:b2:43:e5:cc:
68:be:79:f9:25:c7:fb:6b:77:73:bf:6f:8f:ae:42:af:d3:18:
cb:77:1b:81:60:04:f9:94:ab:7c:7c:af:6d:02:e4:55:98:88:
68:ed:a6:06:2b:60:f8:43:62:38:58:50:98:c2:9e:a8:ea:13:
70:cf:c1:e1:58:a7:d1:24:e3:6b:c6:13:cb:f9:29:d1:3f:b2:
55:86:cf:82:66:0a:2b:5e:0a:9c:db:1a:45:da:f9:72:84:7d:
45:49:7a:12:fc:fb:0b:1e:c9:90:fa:38:ac:2a:05:31:4d:90:
1e:93:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:43:05 2026 by rpki-client