
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
File: ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft (raw, json)
Hash identifier: W7U0i+GwqgF/+BHlQ5LJ7dZPqb/HnbnL6d5EGVPvQz4=
Subject key identifier: F4:81:E6:63:5F:9D:6B:40:BE:96:CF:48:28:CD:2E:05:42:1E:CD:38
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Certificate issuer: /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
Manifest number: 0D
Signing time: Fri 25 Sep 2026 09:20:37 +0000
Manifest this update: Fri 25 Sep 2026 09:20:37 +0000
Manifest next update: Fri 02 Oct 2026 09:20:37 +0000
Files and hashes: 1: ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl (hash: ma5vSibYX+sa7dsHxWzYrTqiH7qLRnWiQA4W6+p1+Yk=)
2: BCB00D18AA3411F199884E135211F970.roa (hash: ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Validity
Not Before: Sep 25 09:20:37 2026 GMT
Not After : Oct 2 09:20:37 2026 GMT
Subject: CN=6ab63ce5-1f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:03:d8:43:6f:bb:02:57:15:9b:f2:35:8d:
9a:c9:d9:52:2d:d8:03:15:af:8f:ad:10:b8:78:9a:
80:79:7a:4c:b9:4b:e2:1e:6e:d8:25:b2:f4:95:d6:
64:70:3a:63:10:54:2b:f3:e1:32:8f:41:6c:a4:6f:
7a:e8:d1:d8:d7:fd:53:ba:07:4b:8c:21:0b:45:6f:
e2:49:b7:8f:36:a7:27:a5:75:df:18:2b:08:c7:85:
24:d1:9f:1b:41:79:21:6b:be:99:f2:d9:11:39:92:
35:6c:5c:11:81:97:ae:c4:76:18:ec:da:e2:8a:d9:
5b:f6:e4:09:98:57:13:39:66:05:9a:30:50:8f:be:
9c:c9:87:95:3e:73:bb:0e:04:8f:c1:87:39:fa:b5:
8c:e4:f9:b5:bc:1a:b5:16:2d:b9:36:d2:89:81:68:
fb:23:92:8a:77:48:42:1e:25:bb:81:fb:1f:8f:c7:
ac:a7:57:e1:3a:0d:29:71:48:4b:59:fe:0c:b5:fb:
17:21:bd:fc:27:f9:78:98:34:1c:d5:05:eb:db:ba:
4a:80:3f:d0:61:6e:34:66:a1:6e:7c:b7:74:56:9d:
d2:e4:ae:42:c0:ef:63:74:99:26:3f:54:ce:eb:6b:
06:8f:33:c8:6c:71:16:3f:d9:71:f4:10:d9:61:cc:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:E6:63:5F:9D:6B:40:BE:96:CF:48:28:CD:2E:05:42:1E:CD:38
X509v3 Authority Key Identifier:
keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0b:fe:cd:08:3d:e6:85:b0:f3:01:85:fe:ef:4d:f1:93:0b:
4d:5f:fb:00:5f:19:f0:bb:97:5d:af:13:a8:2f:b4:84:1d:2f:
65:62:3f:83:5a:9a:c5:a4:66:e1:41:48:35:6c:84:7e:8b:0f:
30:c6:9a:eb:8f:e2:c2:2d:27:c7:08:57:6d:9d:a1:09:5a:b5:
fb:47:68:e2:e3:62:de:16:0a:eb:8f:83:91:35:00:13:e3:76:
06:03:3c:05:42:d6:90:70:90:29:a2:fb:8b:79:21:69:9b:51:
d4:3a:0d:54:32:d7:9f:5a:97:9b:13:53:00:b9:42:8a:c6:0f:
92:c2:7b:bf:15:7b:8c:a7:0c:f8:41:be:eb:47:c7:30:ff:15:
eb:95:43:75:54:fe:2b:fe:76:f0:02:4b:4e:ff:f6:1e:a2:03:
85:db:e5:dd:a2:10:71:ca:2e:aa:bb:66:0e:d4:d4:53:67:1a:
93:22:cc:fa:12:63:55:6a:4d:b0:64:ee:43:4f:10:2c:83:fd:
7f:fb:5a:ab:49:74:52:de:19:ae:47:ae:b8:6b:86:d8:a6:e9:
c8:f5:3b:3b:81:83:0c:dc:f6:30:09:e3:6f:71:c8:6e:99:15:
ba:bc:83:bf:f8:2b:cb:c3:51:29:1e:e1:a5:e0:ff:af:56:90:
c6:e0:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:19 2026 by rpki-client