
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
File: J-T9QcOzZMXkROYutxgZklg5M2k.mft (raw, json)
Hash identifier: zTKJwinVjOMHhNQc9n2cUg7JR+YG3y7WvgAAlNIt0vQ=
Subject key identifier: 5D:79:81:84:1A:F0:BC:BD:D6:B3:F8:A5:03:72:E1:0B:C2:7B:78:A9
Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
Manifest number: 0867
Signing time: Mon 02 Nov 2026 21:08:47 +0000
Manifest this update: Mon 02 Nov 2026 21:08:47 +0000
Manifest next update: Mon 09 Nov 2026 21:08:47 +0000
Files and hashes: 1: J-T9QcOzZMXkROYutxgZklg5M2k.crl (hash: Y5xrjx3MfRHcYgnYLr/DDt37WGDNUGNYiwWtlZp3uso=)
2: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (hash: AbiEFWDmyWXRLlKJFgCMae7B/6XGcm0crIONj1lzEc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 21:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Validity
Not Before: Nov 2 21:08:47 2026 GMT
Not After : Nov 9 21:08:47 2026 GMT
Subject: CN=6ae8fbdf-2395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:18:c8:54:25:f2:d3:56:1e:28:3d:fa:f2:
e1:bc:04:fe:b2:8b:39:70:1c:0e:99:1f:cf:02:e7:
b5:3d:c9:30:3c:b4:15:0c:0b:74:36:b0:1e:c8:c9:
29:f6:2e:bf:f9:4a:f6:46:ef:3a:4f:ab:75:5e:42:
f0:33:c6:77:87:e1:41:06:a6:cd:5a:d5:17:ed:80:
4f:9e:6c:cd:ac:5a:13:ae:04:3f:ce:0d:bc:ef:66:
d2:00:a3:91:61:03:2d:54:28:52:8b:86:bb:96:17:
99:0f:36:e1:1d:13:2a:6e:da:16:8e:f6:6d:14:02:
a7:07:b5:a4:61:3e:02:38:14:7c:ec:14:cd:4a:21:
24:41:3b:49:fd:a8:74:a5:d6:cd:41:63:12:b6:7a:
a9:b7:24:15:36:76:61:28:c9:cd:80:c7:1e:ee:fa:
56:ac:23:f6:44:4a:9f:2e:e4:04:2d:93:25:19:48:
e9:1c:fd:0f:4e:94:2d:19:d4:19:9e:a3:96:13:0f:
0b:77:7f:6c:23:5d:3f:0b:9b:06:d3:4c:08:61:41:
84:c1:f1:65:11:85:d6:f8:ea:2c:a2:54:ba:42:12:
26:83:06:5d:7b:fd:dd:7e:05:e7:b0:76:bf:c9:70:
df:75:4a:5a:2c:11:ba:3c:8e:bd:03:8f:b3:ca:f0:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:81:84:1A:F0:BC:BD:D6:B3:F8:A5:03:72:E1:0B:C2:7B:78:A9
X509v3 Authority Key Identifier:
keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c3:d8:db:90:6e:b2:24:e2:8a:e4:af:7d:ed:5c:4a:03:d5:
56:a9:65:a3:1d:8b:43:2b:8e:69:ee:ef:53:31:de:3c:1c:fa:
9a:60:68:3c:95:fa:aa:32:bd:6e:51:d7:fd:19:57:fc:b4:f3:
84:4c:62:38:2e:15:0e:bd:45:2e:bc:9a:f1:64:8a:2d:14:a5:
e7:87:77:18:0a:35:6e:f4:fa:fe:65:cd:a1:99:b2:3f:b0:4a:
0d:f2:fd:62:a0:ad:17:fc:1e:9e:9a:17:0c:97:58:87:32:1d:
57:d0:db:8c:df:77:ed:7f:ec:eb:83:ff:e4:ab:1b:0d:17:b1:
70:61:11:15:b3:45:8c:41:c0:c2:d4:2c:13:9a:0b:96:ed:bc:
1a:b6:09:c1:95:0b:d7:21:99:80:c2:d9:d6:3f:34:40:65:68:
42:74:6f:63:be:8d:87:a8:63:64:04:6f:fe:2a:e2:d4:70:26:
e4:ee:d2:33:2f:4a:f3:a3:b2:73:15:ed:fc:bb:0f:21:12:9c:
b5:74:3e:c4:33:00:bf:c7:02:ea:03:dc:67:1c:54:60:44:ea:
bc:39:69:74:31:68:21:98:90:57:9a:f8:1c:2b:bb:ef:b4:17:
43:a7:33:7d:07:4d:c9:57:b3:ff:5e:ca:2a:5b:85:69:d4:9d:
20:54:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:32:41 2026 by rpki-client