
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
File: JgCH2u-Rng2r-KLILwGF1RyYfFE.mft (raw, json)
Hash identifier: MppSU1p3QPXf0jXDSmxLIAXW/aB5sPsRWZlypyne8YM=
Subject key identifier: 7B:75:B5:08:8F:3A:A5:BA:54:00:12:48:24:0E:42:AA:E1:FB:3A:EE
Authority key identifier: 26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
Certificate issuer: /CN=A91B8782/serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
Manifest number: 18
Signing time: Wed 23 Sep 2026 08:44:05 +0000
Manifest this update: Wed 23 Sep 2026 08:44:05 +0000
Manifest next update: Wed 30 Sep 2026 08:44:05 +0000
Files and hashes: 1: JgCH2u-Rng2r-KLILwGF1RyYfFE.crl (hash: gTArPAELz/41GipXz2PmIVubF7Y91qAtFiX+j1W5P+c=)
2: F88E2564955211F19EAEED7D6411F970.roa (hash: pKiZMTH93sR7vU9mFLBYmtO9yBYDCzaSyoBxrPbbRDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8782, serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Validity
Not Before: Sep 23 08:44:05 2026 GMT
Not After : Sep 30 08:44:05 2026 GMT
Subject: CN=6ab39155-5683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:ec:fd:d1:bf:71:75:7f:0c:31:c4:98:c9:
13:57:73:82:4b:84:7b:a3:33:d7:f2:51:75:6b:cd:
db:7a:37:ea:6e:85:7f:cc:4e:76:82:cd:2e:0f:af:
cc:11:4e:d3:e2:90:5c:98:ab:c1:2f:ab:e2:f3:eb:
17:01:b9:6a:66:c1:98:75:b6:fa:a8:67:d8:98:e4:
62:6d:fa:74:12:0c:7d:b4:e4:2f:e6:df:97:a4:f7:
2d:13:ff:84:8f:d0:de:ce:3c:2e:9e:3d:9f:ed:42:
2b:14:f6:8c:0e:c9:df:ed:78:16:16:52:2e:35:ea:
18:e6:c3:a0:b3:9c:c3:15:b7:f6:26:6e:c4:3a:c1:
08:1a:ce:ce:89:73:e1:71:39:c0:b6:d5:1a:ec:bb:
ec:47:cb:ff:ba:41:98:0d:83:59:47:dd:68:f3:4d:
1b:4d:d5:e3:03:5f:e5:2b:8a:47:aa:32:d3:ee:68:
a0:04:b4:4b:6f:48:d6:c2:a5:9e:06:f1:24:10:6e:
2b:13:c2:66:ca:fb:91:92:8b:17:58:e3:b1:92:bf:
f7:20:df:f6:13:57:47:52:62:c3:39:2b:ea:51:21:
4a:71:ff:c7:30:1e:72:74:68:27:89:f2:c7:71:6b:
80:40:c6:0f:44:ee:35:4a:7f:da:91:a6:cd:96:45:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:B5:08:8F:3A:A5:BA:54:00:12:48:24:0E:42:AA:E1:FB:3A:EE
X509v3 Authority Key Identifier:
keyid:26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:7d:fb:ee:c6:2a:48:b9:3e:23:62:2f:88:19:60:e8:3f:
8f:e9:d3:60:7b:ea:2d:d9:07:a3:1d:00:5f:b9:68:68:94:0c:
ba:df:49:41:51:cb:c7:37:c2:0e:1a:35:1a:a4:c0:88:95:7b:
cd:a1:dc:4f:96:b5:5e:1c:07:fc:14:fb:66:1c:54:bc:0c:a2:
27:b1:f2:1a:8b:cd:f7:90:06:ac:13:04:60:99:d6:25:92:d8:
76:1c:80:0c:1c:6f:1b:90:50:9a:6e:ad:b6:b8:d3:e5:e8:41:
3d:6c:2e:5c:65:26:17:02:3f:a5:ec:94:f5:90:fa:cf:ef:d7:
48:cf:44:98:77:33:89:a8:95:3b:01:e2:03:40:97:8a:9f:98:
bf:6f:0f:82:d4:72:12:49:61:b6:05:d8:c4:fb:9b:bf:3f:90:
17:c9:4e:17:2e:43:49:d4:b3:71:17:32:2e:65:e4:d3:1c:58:
a3:2a:23:db:bd:cd:8c:63:d4:5a:e8:7c:2a:ce:66:48:f0:1c:
21:8f:8c:a6:7c:ab:39:3f:29:5c:b0:26:0d:0d:d3:b9:cd:f3:
51:2b:90:f7:28:68:41:15:70:55:7c:48:2e:bf:61:99:1f:5b:
80:82:40:b5:a8:e4:e5:84:d0:d2:a4:1c:08:17:49:36:20:7e:
e4:e3:30:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODc4MjExMC8GA1UEBRMoMjYwMDg3REFFRjkxOUUwREFCRjhBMkM4MkYwMTg1RDUx
Qzk4N0M1MTAeFw0yNjA5MjMwODQ0MDVaFw0yNjA5MzAwODQ0MDVaMBgxFjAUBgNV
BAMTDTZhYjM5MTU1LTU2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJhez90b9xdX8MMcSYyRNXc4JLhHujM9fyUXVrzdt6N+puhX/MTnaCzS4Pr8wR
TtPikFyYq8Evq+Lz6xcBuWpmwZh1tvqoZ9iY5GJt+nQSDH205C/m35ek9y0T/4SP
0N7OPC6ePZ/tQisU9owOyd/teBYWUi416hjmw6CznMMVt/YmbsQ6wQgazs6Jc+Fx
OcC21Rrsu+xHy/+6QZgNg1lH3WjzTRtN1eMDX+UrikeqMtPuaKAEtEtvSNbCpZ4G
8SQQbisTwmbK+5GSixdY47GSv/cg3/YTV0dSYsM5K+pRIUpx/8cwHnJ0aCeJ8sdx
a4BAxg9E7jVKf9qRps2WRY9zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe3W1CI86
pbpUABJIJA5CquH7Ou4wHwYDVR0jBBgwFoAUJgCH2u+Rng2r+KLILwGF1RyYfFEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4NzgyL0IyODlERUU2OTU1
MjExRjFCMkQxRDcxMzY0MTFGOTcwL0pnQ0gydS1Sbmcyci1LTElMd0dGMVJ5WWZG
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmdDSDJ1LVJuZzJyLUtMSUx3R0YxUnlZZkZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
NzgyL0IyODlERUU2OTU1MjExRjFCMkQxRDcxMzY0MTFGOTcwL0pnQ0gydS1Sbmcy
ci1LTElMd0dGMVJ5WWZGRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBnXH377sYqSLk+I2IviBlg6D+P6dNge+ot2QejHQBfuWholAy630lBUcvHN8IO
GjUapMCIlXvNodxPlrVeHAf8FPtmHFS8DKInsfIai833kAasEwRgmdYlkth2HIAM
HG8bkFCabq22uNPl6EE9bC5cZSYXAj+l7JT1kPrP79dIz0SYdzOJqJU7AeIDQJeK
n5i/bw+C1HISSWG2BdjE+5u/P5AXyU4XLkNJ1LNxFzIuZeTTHFijKiPbvc2MY9Ra
6HwqzmZI8Bwhj4ymfKs5PylcsCYNDdO5zfNRK5D3KGhBFXBVfEguv2GZH1uAgkC1
qOTlhNDSpBwIF0k2IH7k4zBb
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:49 2026 by rpki-client