
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json)
Hash identifier: CZKWpBrYQb+1Gy+PuwJL2bPnhtg5dLRMjEx9fSkmFyM=
Subject key identifier: 6D:CE:77:51:D7:F8:B2:E7:9C:38:7D:06:45:52:1B:19:A0:10:CC:C5
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
Manifest number: 04EA
Signing time: Thu 24 Sep 2026 23:34:08 +0000
Manifest this update: Thu 24 Sep 2026 23:34:08 +0000
Manifest next update: Thu 01 Oct 2026 23:34:08 +0000
Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: qvhmqXAy+va/30t+GTzYXBUmlISZsln+6fQlaJ7MLcM=)
2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: JfIAFCu2MeeRSwrWxSJdpgjG5VN2LpU2/LUPIGp49hg=)
3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: swlQZjAkWhXNW6074Sbt7r3gkxAfSn83J/kMG93FCcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Validity
Not Before: Sep 24 23:34:08 2026 GMT
Not After : Oct 1 23:34:08 2026 GMT
Subject: CN=6ab5b370-dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:81:45:70:1a:c0:d9:1f:4d:82:40:72:8b:
a2:05:a2:55:89:29:25:7c:e4:b2:bd:07:ce:2f:fc:
80:fc:93:ce:7d:b9:81:a7:1e:e3:dc:fa:9a:76:e1:
6a:70:13:cb:bd:dd:a0:c1:b3:90:df:6c:9e:21:2a:
66:4f:15:02:4c:75:f0:0d:2f:93:b9:d8:94:c2:9e:
9f:ea:90:95:16:de:fe:8e:57:5c:35:d5:fd:39:5f:
d1:69:3f:47:31:10:e4:60:b1:40:d8:b5:f3:78:8f:
d5:97:1e:d8:53:c2:5a:e9:0a:09:f9:76:fa:8c:a7:
07:3e:b0:cb:0c:73:65:1f:b9:9d:6b:72:61:ef:ae:
29:f4:e2:ff:fc:7b:92:15:e4:5d:a8:07:37:b3:4f:
d4:2d:2f:89:21:77:b1:8f:82:f2:af:50:f4:67:fb:
52:30:c1:9d:e8:d9:e2:1b:14:b9:35:45:e0:e4:8b:
14:ac:90:bb:92:60:1e:ca:6a:c8:7a:17:13:87:6a:
ea:eb:bd:bd:43:66:ed:51:ee:f8:6f:16:01:89:67:
4d:ca:9b:c8:6e:36:dc:dd:d8:e1:8f:f8:bf:a1:57:
74:48:93:e6:1e:12:c0:cf:c4:54:57:5e:bb:59:6c:
b7:f8:6f:2d:36:cc:13:60:57:06:2d:4c:d1:e1:37:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:77:51:D7:F8:B2:E7:9C:38:7D:06:45:52:1B:19:A0:10:CC:C5
X509v3 Authority Key Identifier:
keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:c3:51:5b:e1:ea:ad:df:1a:b4:1c:6a:c4:31:c3:39:6c:
4d:3a:da:f6:60:c4:ba:c5:80:0e:91:4d:98:55:7e:89:07:fc:
ad:cd:d6:f9:d8:ae:7e:06:bc:8c:f5:05:e3:c3:4f:cd:91:8c:
17:bb:3a:9f:99:c5:03:1a:82:4f:e6:44:fa:38:43:93:24:77:
ab:11:7f:d9:ed:c1:67:b1:2b:87:9a:e3:a8:08:c9:50:eb:36:
7e:78:1d:07:bb:86:b3:c4:6b:90:d4:a0:3e:d3:d9:15:68:0c:
1b:57:bc:28:5c:0b:f0:ca:9b:2c:13:18:95:d0:bd:bd:91:c1:
0d:f3:90:cd:ab:38:4d:ed:56:c5:14:7f:e1:3a:21:a3:ea:fc:
58:6b:cf:ef:f7:df:60:c8:3c:ac:9b:d9:4d:f2:e1:4b:3e:c4:
67:1c:c7:49:43:82:2a:9b:14:41:c6:62:6a:df:c8:49:08:64:
cc:5f:4c:79:ae:6a:fd:cc:30:52:5d:7c:41:48:32:b4:47:b0:
fc:f3:76:b4:d5:29:64:b9:01:68:2b:e5:4e:2a:d5:fc:0c:bb:
ff:4b:d2:10:48:67:13:8d:be:8e:a2:d6:5a:79:d0:21:c4:b8:
dc:21:24:17:84:6f:9b:c3:3d:a2:cb:36:c1:1b:8e:67:3e:fd:
26:c0:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:11:24 2026 by rpki-client