
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json)
Hash identifier: 18cK/Bzb9LemEf3dWk6hdparbmMD8qePlbgLQ8lg/5A=
Subject key identifier: 6D:52:D3:0B:1E:C6:C9:B6:21:5C:C6:09:B5:FC:83:04:C4:DF:08:7F
Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
Manifest number: 01E0
Signing time: Fri 25 Sep 2026 03:46:29 +0000
Manifest this update: Fri 25 Sep 2026 03:46:29 +0000
Manifest next update: Fri 02 Oct 2026 03:46:29 +0000
Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: svqsV6dF6F6U31PKrM+U6Jl8bcPnuQlvk4dd52C5a3k=)
2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: usejeAbfaCrnya4BmIxpNANwrvKrHGDPWrTfazFyZ+A=)
3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: rIc4xpour7cATeZsp1B1Ry8Mz3CLrgcG3IJVLB+LmQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl
rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Validity
Not Before: Sep 25 03:46:29 2026 GMT
Not After : Oct 2 03:46:29 2026 GMT
Subject: CN=6ab5ee95-7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:b8:15:db:71:d7:f4:96:50:a9:c2:bb:33:
49:da:4f:49:11:3a:82:82:22:13:19:4e:19:ac:78:
f9:1c:d7:b5:28:4f:d5:52:88:3f:4b:21:fe:53:6c:
7b:09:f6:0c:cd:ae:66:4b:f6:a1:d0:f3:73:09:df:
06:4f:dc:fd:a9:fc:28:e9:72:28:29:7d:ca:c7:40:
2d:ef:e7:53:ec:3b:4a:24:1c:5c:b5:2d:a4:72:11:
93:d0:0b:25:9b:4e:3b:75:01:8f:a6:b4:e6:07:30:
ef:81:6e:28:41:4c:09:04:67:ab:f1:68:0f:3b:89:
56:fa:31:64:19:22:a5:67:b3:ee:b3:da:e4:1c:7d:
4b:90:6c:f2:a3:3c:4b:ce:4f:e1:04:64:69:8b:12:
a0:a3:aa:94:29:e6:e1:a2:22:22:37:c8:c8:fd:b1:
6a:bf:ed:9a:69:94:a0:9b:81:49:3f:39:95:43:82:
63:9b:75:c9:5e:c2:71:bf:54:58:4e:97:90:0e:42:
88:42:d3:a1:91:93:49:32:9a:7b:51:5b:53:ec:fa:
20:ff:0b:e0:c9:55:8d:de:9a:d9:3b:fc:51:2a:57:
26:42:2b:5d:c7:e0:fa:79:01:ec:1d:2f:d1:cf:fe:
e6:fe:8f:42:8b:27:44:fe:66:b5:b7:01:f7:96:c6:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:D3:0B:1E:C6:C9:B6:21:5C:C6:09:B5:FC:83:04:C4:DF:08:7F
X509v3 Authority Key Identifier:
keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:42:59:e4:12:f8:7f:9c:79:81:20:ec:f9:3e:83:7a:23:28:
c1:b1:95:de:13:b3:58:5e:e4:6e:12:11:ff:20:88:72:80:cf:
79:d2:42:d2:84:77:6f:80:e7:d6:44:a2:19:37:53:61:74:d4:
58:1c:7f:3c:ca:52:f0:c7:b3:86:5d:2b:35:8b:d0:87:04:6e:
da:dd:a7:0b:83:c6:03:14:65:74:46:59:d8:38:54:f8:13:af:
27:57:4b:63:ad:b9:dd:fb:6f:36:de:82:da:d9:c7:e8:d3:fb:
f7:a7:2a:c1:47:b7:a9:34:3b:bf:47:90:3a:61:38:e5:bf:c2:
ab:8b:40:d8:86:f8:77:c4:02:10:cb:bc:43:e9:5d:1d:cd:a3:
8f:58:75:98:b2:04:7a:27:03:23:ad:0a:d8:21:7e:42:6f:00:
4e:ec:56:c2:7d:05:d1:12:9e:fa:1c:af:c6:a2:6e:35:3e:d5:
5d:b3:96:cd:f3:fe:7a:6c:c4:14:22:31:72:cb:70:e7:e0:71:
8f:b3:78:67:2a:e0:0c:05:45:b9:84:fc:72:38:fb:4b:29:8c:
66:2e:60:60:1c:e0:98:79:08:3e:5f:7a:6a:33:91:04:bb:1a:
8f:5d:d1:5a:1a:ef:e5:46:7f:37:46:32:64:75:b1:77:84:ee:
15:84:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:41:16 2026 by rpki-client