
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier: Whx7K2MnbR++IQWHj81PXfm1e+lhL7WODT+iaohxEzM=
Subject key identifier: B9:03:C4:0A:33:AE:58:5D:2B:F9:58:45:83:23:13:52:8E:E3:AA:CA
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number: 0112
Signing time: Mon 05 Oct 2026 06:23:53 +0000
Manifest this update: Mon 05 Oct 2026 06:23:53 +0000
Manifest next update: Mon 12 Oct 2026 06:23:53 +0000
Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: o3EAj9TPXgGDf2RyU4qC4MMnibf2pWpf4+bAmSE3W1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Validity
Not Before: Oct 5 06:23:53 2026 GMT
Not After : Oct 12 06:23:53 2026 GMT
Subject: CN=6ac34279-e6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:a0:f7:7e:6a:84:6a:1e:2b:40:7f:d5:fe:
47:a4:ac:96:0b:a6:64:7d:53:6c:3e:95:37:70:3b:
a6:83:0d:14:c7:ad:d1:7a:28:a9:98:6a:51:bf:b1:
c7:70:36:ab:2e:4b:d3:0d:3c:81:b7:25:fe:cb:17:
2f:49:00:1d:45:09:b9:33:a6:3b:90:de:fc:f4:e3:
d3:47:d6:7a:71:15:6a:59:c6:7d:9e:26:7d:62:c0:
a2:e6:24:73:5d:3e:25:ac:20:de:f0:32:48:d7:93:
49:3d:27:b7:17:f6:37:ba:ae:9a:c9:49:f4:aa:ba:
3e:6c:b0:a0:40:21:f4:7b:58:42:a3:76:10:a5:25:
a5:a7:11:69:11:2e:9c:cd:84:52:10:9e:0c:e1:7d:
b1:73:62:da:58:95:b1:37:94:49:78:db:86:9d:96:
22:0e:69:00:00:60:e6:62:1c:16:12:08:8b:17:bd:
cf:40:dd:5f:3a:78:aa:9b:df:52:76:a2:d2:8d:3a:
90:14:43:e4:86:89:e1:b2:69:f8:f2:b2:69:c6:60:
3b:b6:05:49:85:0b:b4:7a:cd:77:a6:b2:9b:a2:16:
4b:75:89:ff:e6:d0:79:42:d3:de:05:5c:9a:2f:b9:
22:3e:00:39:18:1f:6c:83:b2:f9:30:52:89:38:39:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:C4:0A:33:AE:58:5D:2B:F9:58:45:83:23:13:52:8E:E3:AA:CA
X509v3 Authority Key Identifier:
keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:9f:ec:3b:f8:fc:d6:63:ec:ea:08:89:5d:82:1c:01:71:
1f:e6:44:c6:00:ec:b3:78:74:1b:91:08:68:31:a6:92:63:4e:
2a:70:a9:17:81:62:3f:f0:7c:0c:63:f1:7f:39:3d:87:e2:21:
2d:a1:d8:ff:4e:d9:1e:11:e3:bf:13:2c:bd:09:15:a1:bb:68:
72:dd:8f:b9:b0:ff:79:c4:ba:76:87:c2:19:a7:a1:04:da:b7:
0d:91:b4:3d:47:b9:be:d6:76:c0:5d:f1:33:80:c6:6e:3b:1a:
77:15:49:cd:66:1e:82:72:a8:37:07:21:89:7c:bd:f0:75:e8:
33:c1:97:f9:85:fe:ff:14:ba:a4:ce:5d:2e:46:29:8c:8b:c2:
e1:bb:b3:0b:b2:fe:cd:ee:73:f3:89:d4:d1:6b:8d:22:15:b4:
c3:da:19:07:b3:80:b7:19:0e:b7:c8:91:76:1e:1f:b4:b9:59:
19:99:dd:e1:fb:ca:69:97:48:5f:d5:14:d3:71:3f:cd:ea:3f:
5b:1d:87:f3:7c:e8:b2:9d:22:e4:84:9b:b3:c4:5a:01:54:c9:
21:09:9b:76:6f:e0:46:f6:f0:44:e6:d0:31:24:c4:db:91:93:
70:1b:ea:53:6a:6e:85:1f:1c:63:5e:99:92:f4:18:38:1a:c2:
9b:79:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:16:51 2026 by rpki-client