
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier: 3QS/IrIYJlZ4ZkQV2BP6RclyU+MNqd8+C4n/q+wfHTU=
Subject key identifier: 9C:26:C2:AB:A4:8B:BA:AA:70:9C:99:C0:18:A0:A1:F4:04:29:D9:F7
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial: 0A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number: 0A17
Signing time: Tue 22 Sep 2026 19:35:33 +0000
Manifest this update: Tue 22 Sep 2026 19:35:33 +0000
Manifest next update: Tue 29 Sep 2026 19:35:33 +0000
Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: zatYELAKy+fNFyHoW2fK5EbilwbCrLC6SsjrxmO2U+k=)
2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: 8yXEK3UdGW0f6JZEFNyf+NFkgLqxurhMHMCZYu52FrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607 (0xa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Validity
Not Before: Sep 22 19:35:33 2026 GMT
Not After : Sep 29 19:35:33 2026 GMT
Subject: CN=6ab2d885-a289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:2d:fd:ee:91:8e:8c:97:bb:9e:46:34:ed:
65:38:83:40:cf:aa:79:db:00:d1:5e:d9:4a:5b:fe:
c9:7e:91:4d:b0:d8:55:b1:e6:03:d9:9b:eb:55:45:
66:6c:d4:d9:65:23:3a:ae:50:43:37:ba:7f:8b:7d:
69:af:55:a9:dc:5b:4d:54:54:cd:8c:58:ae:41:49:
26:b9:52:95:b7:71:73:0a:c0:6c:62:42:c0:f4:02:
be:33:38:2c:ec:61:e8:ae:f6:99:54:f8:6f:d6:3c:
55:25:ff:3a:d6:9c:29:e3:82:f3:cf:87:ca:1f:cb:
ac:b0:aa:69:9d:5c:fc:32:50:8d:a6:70:ae:6c:d2:
c2:49:48:8c:80:1f:c1:36:28:71:27:97:de:fb:36:
fb:42:79:4c:fa:14:63:68:b3:d7:a4:9e:41:8d:5b:
f5:3a:be:55:a8:f5:30:90:a0:0a:6e:e8:df:8a:35:
e1:39:4e:a9:0b:4a:fa:09:9f:c0:ae:9f:6c:31:7b:
db:d4:f5:b0:e5:88:bc:94:e5:8a:13:00:60:c8:b7:
b7:77:e1:02:36:bb:e7:41:14:8a:03:b0:f0:0b:63:
16:01:21:21:89:a0:20:0e:9f:f3:d7:86:28:26:8e:
2f:1e:fc:5e:07:2b:39:37:7f:59:d9:4b:71:62:a4:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:C2:AB:A4:8B:BA:AA:70:9C:99:C0:18:A0:A1:F4:04:29:D9:F7
X509v3 Authority Key Identifier:
keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:af:a7:98:c5:83:87:df:b8:ee:14:ed:37:8e:2e:27:57:
25:e1:94:be:77:23:71:86:2f:7b:41:8f:e3:c2:eb:03:4b:9e:
1e:85:d5:e8:ff:e0:39:aa:97:04:8c:42:ed:39:e6:d5:cb:96:
26:3b:b8:95:ee:2e:8c:59:d7:23:cd:de:db:d6:16:ab:3a:4e:
68:6e:d9:df:6e:f8:a5:ed:6e:50:05:6e:ad:e0:bd:4a:3f:03:
80:09:b6:93:39:50:34:a7:50:c8:bc:52:8d:df:b4:12:31:41:
29:52:8e:a2:e5:c1:87:5e:ec:70:91:c9:e3:54:3e:68:db:f8:
cb:1b:2a:a8:9b:19:25:6d:df:04:68:c3:92:9b:24:1f:1d:5b:
92:a4:d3:26:1c:fc:38:dd:82:3f:a1:b5:03:b4:2b:7f:38:65:
d3:b6:55:9c:d4:50:d2:77:08:e7:65:d8:c7:c3:75:f7:e2:bb:
ed:18:ef:8f:6e:52:83:47:34:bb:a4:79:33:51:34:5a:01:51:
92:4a:91:bd:f7:f0:4c:75:28:e9:e8:78:14:e8:36:53:cb:dc:
21:33:db:a1:70:ed:cd:2e:d2:4c:a3:f7:b5:d8:87:49:75:9b:
b0:92:aa:dd:da:5e:95:66:e4:5d:5d:f4:3d:a1:33:ae:42:1f:
ac:c6:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:15:15 2026 by rpki-client