
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
File: jIdTtwqo02LsUz6Sfxlv62mbGF0.mft (raw, json)
Hash identifier: /M5Ob0RKQKWLJvqMuIVUWDjtK1IjMAcuYRr3xFPjllI=
Subject key identifier: DD:B1:C9:9E:D7:13:CA:CD:64:8E:2A:4D:75:65:F1:34:C0:C6:B3:22
Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
Certificate issuer: /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Certificate serial: 0393
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
Manifest number: 0389
Signing time: Fri 25 Sep 2026 00:33:36 +0000
Manifest this update: Fri 25 Sep 2026 00:33:36 +0000
Manifest next update: Fri 02 Oct 2026 00:33:36 +0000
Files and hashes: 1: jIdTtwqo02LsUz6Sfxlv62mbGF0.crl (hash: ZhFccUUwNzD4ZV2X3VmLt4rXdsERCnz0u2xEg/TOcKY=)
2: 15920FC8380111F08B5A444DC4F9AE02.roa (hash: 5aEKBN8i30USt9km6EoxkvVpsF/KERHDBrC2udIjD38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl
rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BD5, serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Validity
Not Before: Sep 25 00:33:36 2026 GMT
Not After : Oct 2 00:33:36 2026 GMT
Subject: CN=6ab5c160-e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:fa:1a:d6:be:eb:01:99:7e:66:9f:c7:89:
6a:28:38:c2:6d:d2:6d:1b:2d:8e:89:e3:3c:04:73:
02:1e:9b:c1:8b:d3:25:cd:2a:30:00:dc:92:af:be:
03:9d:4c:24:58:95:82:6c:9c:96:2e:b4:8e:52:28:
39:d4:53:73:ba:23:f7:03:0c:1e:ff:7a:90:ea:54:
36:15:a9:9d:6c:60:db:19:8c:8a:da:20:93:30:54:
ec:4d:6f:4e:98:1e:93:95:bd:70:29:3f:8d:42:fc:
32:43:72:b7:7e:20:5f:f4:54:22:c7:69:a4:ba:47:
a5:b5:5a:2b:8a:f6:d2:ea:12:e8:be:e0:8f:f3:7f:
eb:83:0a:70:3c:c2:7a:b6:c0:16:3d:83:2e:b3:8c:
97:a9:5f:cc:7f:ad:1e:3c:59:68:ea:10:23:a7:44:
92:cb:86:62:c8:c0:5c:fd:ab:44:20:81:9e:f0:9a:
e8:fb:72:19:7d:18:ec:70:4a:f9:02:af:99:89:b1:
21:e2:a2:61:de:07:07:0c:d6:66:c5:dd:2e:27:f5:
0e:cb:3d:88:2b:c1:43:89:3e:38:38:44:bb:2b:97:
24:8c:1d:03:cf:2b:e8:11:0a:b8:94:a9:ba:cb:6c:
8e:79:80:e5:74:dc:fd:ae:b6:5d:e0:dd:09:0c:db:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:C9:9E:D7:13:CA:CD:64:8E:2A:4D:75:65:F1:34:C0:C6:B3:22
X509v3 Authority Key Identifier:
keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:54:8e:ed:40:e8:a8:c8:d1:8d:9b:5b:f4:18:ae:ca:f3:
13:9a:d5:c2:c4:58:38:03:93:27:5d:3b:c7:52:fd:0e:26:13:
3c:8b:d4:a7:75:2e:5e:a7:23:53:83:a9:d9:85:8f:e0:1f:57:
8b:4a:4a:c4:5b:17:ad:ee:32:c4:70:81:72:4b:e2:1c:68:84:
3c:84:9a:b8:89:9b:bf:dc:a2:66:69:9d:e1:c0:36:11:3a:43:
be:96:e5:2c:46:a8:c7:2b:d8:b2:96:c6:56:4c:6f:d5:ec:2e:
e8:f1:1a:9f:21:1e:34:77:7e:ae:25:6b:7a:47:30:1e:9f:d7:
5b:d5:28:52:57:ea:22:5a:55:80:23:99:95:01:46:56:fd:ef:
61:6f:d2:13:66:65:b3:9d:3a:26:4d:ae:6f:fa:ef:44:7c:29:
a0:cf:bc:47:36:be:54:73:1e:24:28:61:33:b2:29:4e:dc:78:
5b:c2:08:2e:15:41:43:b6:77:1c:64:b8:6c:8f:e1:7f:0b:41:
59:20:5f:95:4a:a1:be:38:21:78:c7:e8:4a:41:9f:54:44:50:
b6:bf:97:eb:15:8e:fc:50:0d:7f:ea:5e:d4:e4:3f:ed:5c:fb:
ff:38:66:2d:23:31:f2:7f:76:67:d5:0a:97:01:49:91:14:e1:
45:ca:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:05:59 2026 by rpki-client