
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: kVgVFA9oHrcfI1XLMOZmxORd0d5C3y+0EFUcgdRAu/E=
Subject key identifier: E4:FC:3C:C8:EA:AA:E4:37:15:15:8C:18:5C:A6:12:D9:D3:98:5F:A2
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 35B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 359A
Signing time: Mon 12 Oct 2026 15:18:12 +0000
Manifest this update: Mon 12 Oct 2026 15:18:12 +0000
Manifest next update: Mon 19 Oct 2026 15:18:12 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: cKDzHnL42H0cEBB1vzsILITZ83k3KWYLfjjPzE673Zo=)
2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ip48wthcZQj2yzO90ZC3ETY+zndLk/B6YcMLzIWEh4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: Oct 12 15:18:12 2026 GMT
Not After : Oct 19 15:18:12 2026 GMT
Subject: CN=6accfa34-88da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ed:af:72:c5:68:6f:43:34:47:46:1c:79:b7:
fc:f3:78:76:34:d9:19:3e:17:cc:1a:0d:dc:4a:62:
e1:f9:ce:47:ed:de:89:bf:c0:21:5a:f3:98:e3:3c:
2c:1e:f2:74:59:6e:72:c1:a1:bc:09:16:5d:c4:44:
b8:ae:e0:74:d9:0c:86:2b:29:25:24:b3:f9:9a:63:
98:84:49:da:c3:7f:fa:ee:df:f3:40:3c:17:ff:50:
f9:61:69:45:26:9e:8a:3f:c1:f6:53:e1:78:56:ca:
de:32:6b:e9:b8:40:e1:23:aa:cf:ee:58:29:f5:98:
a1:c0:ab:16:c8:fe:5b:4f:0e:5b:e4:ff:58:4b:d9:
de:9f:93:11:97:23:d7:0b:c9:dd:6a:d8:43:52:df:
9b:63:65:78:83:bd:ed:b0:38:23:92:e7:48:47:ef:
03:d7:39:40:a3:d0:7e:52:06:1e:2e:2b:f5:c0:25:
5f:16:4d:2a:db:bc:50:67:24:e4:cd:2f:73:c9:bc:
02:e9:4c:70:fb:a7:df:69:0f:dd:c5:a0:b3:f4:62:
b9:e3:b9:56:7e:b8:f8:5f:5f:c3:6a:66:9a:e8:5e:
d1:26:48:29:a5:52:e7:94:4a:0e:7b:71:fc:09:0d:
30:22:42:d4:7c:89:84:46:91:de:fe:59:44:c9:39:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:3C:C8:EA:AA:E4:37:15:15:8C:18:5C:A6:12:D9:D3:98:5F:A2
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:50:99:33:99:d3:eb:87:9e:ef:5a:1f:14:33:29:b7:8a:fe:
b7:51:c7:4d:85:bf:5c:04:c2:37:c5:bf:d9:1e:0a:d4:37:23:
fa:43:a9:84:14:06:48:92:34:75:ab:d0:dc:bc:48:01:f3:db:
cf:65:88:b3:77:83:be:0d:9e:7b:0d:a3:80:44:7f:e8:44:4d:
04:56:7e:d9:8e:4b:04:8a:f0:2e:d6:af:4d:e0:31:d0:5f:bb:
d7:a6:fd:80:f1:37:96:7a:f3:0f:5a:3f:0f:30:e4:c1:e4:d9:
e4:01:0d:0f:30:2c:a4:d3:5c:6b:42:9f:5b:d1:7b:67:f1:2e:
d1:66:d4:65:b0:c1:86:21:5d:59:30:9d:4c:8e:21:76:7b:3e:
aa:89:a1:45:63:49:3f:a8:5a:2b:59:ae:77:e2:f5:43:93:ec:
05:77:a9:9e:4a:5d:01:39:11:bf:b2:b2:f2:b0:aa:94:d7:b1:
10:33:2e:ea:aa:89:94:53:e6:49:2b:eb:57:f1:ff:f0:63:9c:
84:c1:a5:7c:48:ea:bf:eb:f5:88:10:e1:08:91:2a:d5:54:ad:
98:23:dd:8b:41:0e:17:14:85:20:7f:65:8e:fe:3d:dc:1e:2d:
9d:43:39:02:02:89:09:b0:51:c3:7e:39:99:c3:b8:19:de:04:
42:d8:ce:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND
QUU4QkY5MEQwHhcNMjYxMDEyMTUxODEyWhcNMjYxMDE5MTUxODEyWjAYMRYwFAYD
VQQDEw02YWNjZmEzNC04OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+e2vcsVob0M0R0Ycebf883h2NNkZPhfMGg3cSmLh+c5H7d6Jv8AhWvOY4zws
HvJ0WW5ywaG8CRZdxES4ruB02QyGKyklJLP5mmOYhEnaw3/67t/zQDwX/1D5YWlF
Jp6KP8H2U+F4VsreMmvpuEDhI6rP7lgp9ZihwKsWyP5bTw5b5P9YS9nen5MRlyPX
C8ndathDUt+bY2V4g73tsDgjkudIR+8D1zlAo9B+UgYeLiv1wCVfFk0q27xQZyTk
zS9zybwC6Uxw+6ffaQ/dxaCz9GK547lWfrj4X1/Damaa6F7RJkgppVLnlEoOe3H8
CQ0wIkLUfImERpHe/llEyTnK0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT8PMjq
quQ3FRWMGFymEtnTmF+iMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE
QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ
cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvlCZM5nT64ee71ofFDMpt4r+t1HHTYW/XATCN8W/2R4K1Dcj+kOphBQGSJI0
davQ3LxIAfPbz2WIs3eDvg2eew2jgER/6ERNBFZ+2Y5LBIrwLtavTeAx0F+716b9
gPE3lnrzD1o/DzDkweTZ5AENDzAspNNca0KfW9F7Z/Eu0WbUZbDBhiFdWTCdTI4h
dns+qomhRWNJP6haK1mud+L1Q5PsBXepnkpdATkRv7Ky8rCqlNexEDMu6qqJlFPm
SSvrV/H/8GOchMGlfEjqv+v1iBDhCJEq1VStmCPdi0EOFxSFIH9ljv493B4tnUM5
AgKJCbBRw345mcO4Gd4EQtjOqA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:56:50 2026 by rpki-client