
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
File: mjx3F7MXcbj9SW70NsRcXAXxN0w.mft (raw, json)
Hash identifier: NJpFZAr5ApKSxzFuQ01XR966lMWXzvyF5fai/1nJ+jg=
Subject key identifier: 4F:F2:9F:5A:68:52:A0:1A:04:6B:64:74:5E:98:76:29:D5:55:15:AA
Authority key identifier: 9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C
Certificate issuer: /CN=A911AA05/serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
Manifest number: 0120
Signing time: Mon 05 Oct 2026 06:24:12 +0000
Manifest this update: Mon 05 Oct 2026 06:24:11 +0000
Manifest next update: Mon 12 Oct 2026 06:24:11 +0000
Files and hashes: 1: mjx3F7MXcbj9SW70NsRcXAXxN0w.crl (hash: t/NwnZy3+3lhDcyIVWbA6SN7wmdnYajSmfXlsfOBgLo=)
2: 5047DAFCACDC11F1AC905F28B2EE528E.roa (hash: FS54yN/i/7kq4bVcWcoEs3xvL36ntbwzBWFR7NsFhMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl
rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AA05, serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
Validity
Not Before: Oct 5 06:24:11 2026 GMT
Not After : Oct 12 06:24:11 2026 GMT
Subject: CN=6ac3428c-74ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:5c:13:eb:0a:a7:80:12:5e:97:45:9f:fc:
d3:c6:29:ef:16:38:44:cf:ea:49:b1:53:cd:cb:b2:
5c:5e:48:ae:fe:39:62:bc:91:86:a5:f9:b4:c2:53:
9f:7b:94:e3:3f:d0:f0:27:a0:7e:ff:ad:3f:35:80:
5f:99:a2:1d:87:87:d7:36:44:c0:57:82:b3:73:b0:
b6:5e:5c:32:c9:b3:bf:81:16:d5:dd:af:f8:c6:88:
38:96:a6:4c:60:f0:71:11:07:1f:8d:7d:f9:24:7d:
84:2e:c5:d5:1f:86:ad:0c:97:04:0d:a8:6a:18:61:
30:24:4e:f3:c8:69:7c:ce:b8:0c:7b:9e:3f:c2:03:
ad:8f:fc:28:c6:13:f4:7b:3c:bb:33:c6:7a:b7:69:
5b:d2:97:47:84:2d:4c:8b:42:70:ee:c3:53:97:c8:
a7:64:5b:27:67:62:94:a0:56:e2:0e:bf:a6:12:e2:
1e:4e:8f:03:3f:19:85:0b:77:de:ee:c9:93:18:ab:
f5:0a:9d:b7:c8:eb:58:2a:2b:b4:08:91:7c:69:a1:
de:a0:44:df:ce:b5:3a:29:da:c0:e8:8f:f2:f6:92:
6a:d5:9c:a8:80:76:cd:28:ff:45:55:ff:8c:74:c3:
36:27:f5:8a:fe:df:82:ab:dd:68:4f:14:fb:6a:c3:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:9F:5A:68:52:A0:1A:04:6B:64:74:5E:98:76:29:D5:55:15:AA
X509v3 Authority Key Identifier:
keyid:9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:4d:2a:07:75:04:77:3d:61:c0:b5:f3:b1:7c:29:ce:a8:73:
2f:05:33:cd:8d:9e:a1:bf:08:9c:0e:eb:6a:bd:e8:24:8e:c3:
23:6b:9d:25:98:23:4e:e3:3d:79:8c:0a:03:5f:e1:e6:c0:6c:
c6:9a:ed:61:5b:e9:06:1d:d0:15:1b:1c:26:ea:72:f2:4f:f8:
ab:59:25:7e:c9:d1:25:3d:8f:7f:50:7c:ec:25:59:45:ec:e3:
9c:7c:8f:f0:dc:4f:4d:8e:eb:69:8d:7e:76:cc:5e:32:54:6d:
43:13:25:6a:57:86:b8:ad:86:48:42:ed:2d:f0:6c:aa:0f:bc:
24:0f:65:cd:75:85:07:5c:71:46:1a:d1:a1:84:2f:fa:35:ab:
37:0d:b2:b1:43:a8:97:98:44:e1:95:fd:a1:37:8e:89:22:20:
36:30:eb:d5:52:d0:dd:57:60:e2:97:a7:3f:fe:56:aa:50:dc:
e6:63:28:aa:fd:ad:ca:73:d9:49:1b:03:e5:a2:79:22:c0:78:
e6:ed:a6:89:97:29:28:47:27:29:28:e0:e0:41:1c:aa:2d:24:
d0:cc:c8:f8:4b:57:23:d9:d8:b9:26:99:33:76:ce:62:fc:06:
2a:a7:4b:c9:c4:51:1e:3c:06:6f:51:1f:71:c3:ff:0c:e5:5d:
3c:67:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:26 2026 by rpki-client