
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier: kJKFOfhncYMdCqGPieUBYyigYWUxRsbpy2Ply8IseJI=
Subject key identifier: 01:76:00:6A:15:51:90:90:4D:FC:F2:93:A4:3E:A4:A2:AC:AA:D2:F4
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0D32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number: 0D1A
Signing time: Thu 24 Sep 2026 18:21:40 +0000
Manifest this update: Thu 24 Sep 2026 18:21:39 +0000
Manifest next update: Thu 01 Oct 2026 18:21:39 +0000
Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: XC+08tHWLJUr+zRMqQKEGDe1IkHNnkqnBbzdmkI7+B8=)
2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Sep 24 18:21:39 2026 GMT
Not After : Oct 1 18:21:39 2026 GMT
Subject: CN=6ab56a34-f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:d8:e5:a6:77:e5:a0:38:39:f4:c3:39:9d:
5e:54:94:ed:30:fe:3b:b8:f0:27:64:bc:80:f7:c9:
6f:0c:0c:c5:48:cd:c3:46:65:f1:87:1c:1f:8b:a6:
d5:74:4e:36:35:f1:82:f1:a9:ef:ca:4a:96:67:8a:
e6:c4:b4:50:40:0a:71:2d:46:dd:92:04:68:9d:3e:
ee:41:cc:f9:82:b2:f5:3a:ad:8e:e4:9e:20:c9:aa:
05:ef:25:82:19:05:af:25:ed:12:5b:27:06:07:87:
cd:c3:76:03:d9:17:c4:bf:9a:ec:d2:a8:9d:e8:07:
e1:a0:9c:9e:ad:c6:92:60:e9:ca:ec:24:eb:c2:db:
26:0f:25:dc:f3:e8:5c:77:58:7a:c7:5a:70:6f:2d:
06:6a:ef:8d:0c:0b:47:3d:87:c8:87:0f:7e:ae:7e:
72:01:c9:26:03:18:5b:a6:8a:54:91:97:1c:c5:62:
c1:ff:6c:a4:05:a3:f2:59:f5:23:35:14:c9:51:87:
d5:fd:6e:f4:50:41:8e:6f:d7:8f:24:9c:ff:c9:01:
41:d1:f7:c0:c7:26:ea:bf:78:3b:37:8c:2b:e8:6f:
9a:35:21:5f:45:bb:a9:02:f9:0d:a3:9a:b2:b7:51:
d4:3d:fd:09:06:0c:33:9c:50:4b:b6:21:53:4e:5a:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:00:6A:15:51:90:90:4D:FC:F2:93:A4:3E:A4:A2:AC:AA:D2:F4
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:08:e6:0b:25:6a:d4:42:ea:d2:90:a7:bb:a4:1b:da:04:
b2:a7:43:ef:fa:ea:8e:59:71:c6:64:bf:a9:af:68:c5:79:19:
82:63:2a:0f:d4:b1:c3:e3:27:18:2d:b1:6d:8b:b3:75:4c:17:
21:ab:e5:4b:4e:2d:2a:07:07:08:ea:34:98:6f:dc:66:36:80:
a0:36:e3:c9:e4:c8:eb:ad:66:8f:76:31:d0:5f:1f:a1:fe:87:
ee:ab:b7:39:ba:ad:ad:a6:8f:ff:0b:e9:c6:51:84:83:30:0e:
0e:94:47:20:d0:a0:cf:a4:3b:8d:ea:24:67:2e:46:f8:40:95:
21:8d:78:86:c5:74:8d:55:7b:71:4d:91:8c:da:e1:62:ff:33:
1b:7e:01:1f:4c:46:46:2b:34:3a:4c:ef:03:70:5c:7d:1d:bf:
99:13:c3:3f:38:87:4c:b2:f6:f9:fc:dd:15:19:bf:ab:c3:1c:
60:c8:8f:2a:8e:60:f4:0c:4f:dd:11:14:16:cd:4a:21:99:63:
bd:20:f2:e2:ae:e6:55:e7:85:dd:81:d6:a7:6e:33:62:d6:36:
4d:90:48:10:20:70:80:4d:13:c8:2f:91:ff:0b:ea:5b:53:5a:
5d:1c:8c:0c:ca:74:02:16:0d:21:03:cc:86:e6:c9:9c:99:10:
eb:e1:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:39:33 2026 by rpki-client