
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier: gx9VKYE7QmqKpnNKlJsAzUBriSehv4B+BbNkTExMNQU=
Subject key identifier: 8A:9D:9B:0E:8E:84:1E:2A:86:A8:7E:B1:55:31:7C:A8:69:6B:18:10
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial: 03A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number: 039A
Signing time: Wed 23 Sep 2026 00:16:41 +0000
Manifest this update: Wed 23 Sep 2026 00:16:40 +0000
Manifest next update: Wed 30 Sep 2026 00:16:40 +0000
Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: RUHqSHoLmBqI1NdjsayQM/PKsVN9HPXegL88PGYeKtc=)
2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Validity
Not Before: Sep 23 00:16:40 2026 GMT
Not After : Sep 30 00:16:40 2026 GMT
Subject: CN=6ab31a68-5a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:5b:a8:c7:9e:1f:fe:60:81:95:32:b2:0e:
ee:81:ba:72:84:83:30:35:f3:66:40:41:4b:f2:91:
25:ae:94:01:11:43:0e:b5:91:aa:d4:33:47:26:0a:
57:e8:6e:66:56:f1:ac:ce:e2:d5:71:f3:2b:ab:48:
e9:4d:e5:00:50:df:9b:f2:7a:80:84:f5:51:39:32:
51:e4:19:8c:c8:47:76:ad:e7:55:1a:c3:83:91:79:
d4:ea:cd:12:0e:9f:37:95:37:5a:23:5f:57:82:e9:
41:06:7c:dc:e0:a8:9a:8a:06:17:ba:84:58:3d:e8:
b4:a0:58:1e:0b:f2:f5:d9:2c:46:2f:a0:b7:4a:6b:
b2:90:89:91:f4:09:77:79:4a:e5:22:b3:ba:36:25:
3f:13:6c:bd:d8:0a:73:08:bf:fc:b5:b3:3c:84:d4:
18:88:d0:a7:09:30:b5:84:ca:10:ba:79:87:d3:ac:
5d:68:64:f5:13:a4:e3:2a:f8:8f:96:47:49:3a:fe:
8b:69:09:26:b5:d5:27:dd:4a:0e:a5:a3:71:9a:0e:
2d:e6:2f:39:a5:73:f4:ec:ee:5f:9b:7c:51:73:b9:
27:40:5c:90:7f:7e:2d:ae:a6:7c:3c:31:e9:5f:19:
93:bb:d5:e1:8a:fc:71:2c:61:1a:f9:34:44:25:30:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:9B:0E:8E:84:1E:2A:86:A8:7E:B1:55:31:7C:A8:69:6B:18:10
X509v3 Authority Key Identifier:
keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:40:07:9d:47:72:73:28:f9:e0:0d:96:2a:40:06:88:a3:
39:49:02:9d:3d:29:e2:38:f7:22:7d:4c:6d:54:2d:d4:3a:ce:
e2:d1:a6:5e:5f:7b:62:d0:e6:70:f8:99:5e:97:7b:e0:5f:c1:
6c:f6:71:0a:84:07:ca:fb:25:71:35:d1:47:44:09:96:c5:8c:
6a:9a:47:2c:b0:89:cd:73:f8:54:c8:91:d9:77:dc:d9:c5:a0:
eb:2a:d9:57:6b:29:0c:a6:81:16:9a:6a:e7:b5:f8:9a:4b:93:
9f:16:61:58:48:5b:9c:c4:a4:3d:80:5f:de:30:a4:44:58:3f:
0a:f2:d8:f5:52:75:22:fd:f1:b6:1a:85:65:2a:5a:de:fb:03:
de:66:37:70:d9:02:fb:82:f2:86:48:aa:c2:39:84:f1:c9:9c:
5f:17:2f:ea:ab:57:37:e5:50:13:31:66:80:0a:29:94:3f:c2:
57:16:97:b5:08:62:1b:8c:c7:8e:80:67:04:fd:a3:e3:f5:df:
6e:f6:0e:b0:7c:5d:d2:e2:73:83:a5:43:f9:28:88:9c:c9:2f:
b9:e9:09:c5:30:13:8d:56:c0:0a:e3:86:86:1a:0b:17:6e:68:
b2:d8:05:6b:e7:fe:fb:23:4f:a5:80:11:77:10:b7:d5:16:52:
7a:82:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:19 2026 by rpki-client