
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json)
Hash identifier: CHWbK/GwJ+pzA60N7dW/3/CpLElti5NJhxyTev3MvmA=
Subject key identifier: CF:74:96:BA:2A:04:DD:CC:03:E8:93:E5:3B:EB:AC:B7:A6:18:66:D3
Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
Manifest number: CF
Signing time: Fri 25 Sep 2026 06:49:42 +0000
Manifest this update: Fri 25 Sep 2026 06:49:41 +0000
Manifest next update: Fri 02 Oct 2026 06:49:41 +0000
Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: eExjG5owFi2hc84FnTENiFrdDhc5FK+Vss/rtRuN6Ac=)
2: 707D9934829811F094DDE01BC4F9AE02.roa (hash: CSZOMRZBf4O/F9lGvp4ZRd14pRaIwd7jDkVp7MtH1TE=)
3: 7007614C829811F094DDE01BC4F9AE02.roa (hash: Y/urDtvmoxrvI9RD7nRWTtIwBS0chKb7wOu16fjLwtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Validity
Not Before: Sep 25 06:49:41 2026 GMT
Not After : Oct 2 06:49:41 2026 GMT
Subject: CN=6ab61985-afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:fd:3e:e4:00:8f:1a:fb:76:75:b9:d7:bb:
55:21:e4:74:cb:d6:79:c4:e4:01:3f:d0:3f:c4:1c:
a7:55:e6:20:8a:59:62:7c:2b:df:82:84:55:21:fd:
4d:2f:bf:9d:e8:39:24:b4:0d:88:30:0b:62:5a:f5:
0d:4d:ae:6e:dd:09:1f:5f:dc:c6:68:21:90:0a:04:
00:ef:a3:25:e2:d0:e9:b5:f1:df:ef:3a:da:58:05:
85:c9:47:7f:07:a5:64:70:fa:57:61:aa:e3:23:87:
21:b6:1c:1a:06:1d:55:f4:78:f5:51:43:75:c0:73:
d1:c3:e0:2d:21:93:d3:c5:0b:29:02:f1:cb:dd:ca:
22:35:8f:50:19:e9:cd:ad:66:b9:f1:2d:f2:be:45:
c8:0a:2a:53:2e:e8:8a:3d:0c:34:f0:e7:f8:78:ff:
12:d8:8f:b0:a3:6d:11:24:67:12:7f:3c:47:b2:e4:
4d:18:1f:95:a0:1b:69:43:2c:34:ec:e1:cf:6d:84:
ef:3b:f5:6d:26:ee:0c:30:2f:fb:86:59:63:22:76:
c5:ae:fb:3c:64:52:31:e4:0d:34:96:50:1d:2c:99:
a2:fc:43:46:74:4c:47:6e:43:2c:c2:33:35:2f:0e:
80:fa:ea:cc:9a:b2:74:bb:82:60:23:f4:14:60:99:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:96:BA:2A:04:DD:CC:03:E8:93:E5:3B:EB:AC:B7:A6:18:66:D3
X509v3 Authority Key Identifier:
keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:5a:d6:fc:cc:31:a5:17:6f:a8:d2:9f:d8:9d:4b:b3:40:
ef:c3:0f:ba:af:16:b2:70:47:81:f1:83:b4:de:69:b6:c0:75:
b1:f0:33:84:73:40:d0:4f:a8:d6:cb:76:0b:74:b2:61:63:e4:
dd:f9:4e:56:ff:a9:e5:63:40:cf:5a:ff:94:35:b0:32:59:07:
b4:a8:15:0b:cd:50:be:b0:15:41:e5:8a:73:9f:a1:7b:ec:cb:
65:a0:62:28:ba:ab:9f:92:61:04:69:80:9c:37:2d:cd:ea:13:
fd:03:51:f5:03:67:28:cb:f1:08:28:b2:32:10:1b:b5:ad:70:
4c:76:94:ac:70:fe:49:d5:e3:62:3e:78:78:4e:50:c1:09:f4:
6a:95:19:0f:f3:dd:6f:51:5f:f1:73:64:89:82:0c:33:75:5e:
98:4f:e2:db:10:d4:d2:1d:ab:5c:84:35:9b:ea:1c:9e:ac:3b:
53:f0:14:b6:ec:b4:69:e8:1e:c0:4d:71:65:43:c1:c9:c2:b0:
a5:47:45:7e:fa:ea:6e:b1:c4:18:f7:fe:34:e5:42:ff:a2:67:
53:93:96:0c:44:37:be:07:b2:b4:8b:c2:e8:74:91:26:67:0d:
ea:4c:c2:98:b6:67:09:9d:c2:64:80:f2:32:60:8e:33:e7:cb:
67:10:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:02:41 2026 by rpki-client