
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier: mn22gMaD97i2LqU3QU5PApPL0xnUTPGS/PQawYkogEU=
Subject key identifier: E8:A3:77:DD:11:6F:1F:9E:EC:5A:16:FB:A2:51:7F:8A:AF:58:F9:B8
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial: 0BA7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number: 0BA3
Signing time: Fri 04 Sep 2026 16:33:46 +0000
Manifest this update: Fri 04 Sep 2026 16:33:45 +0000
Manifest next update: Fri 11 Sep 2026 16:33:45 +0000
Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: +30WqTn8MurQWbOtwTCcw2pwizWbHKYXxm9tf8vf98k=)
2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Validity
Not Before: Sep 4 16:33:45 2026 GMT
Not After : Sep 11 16:33:45 2026 GMT
Subject: CN=6a9af2ea-ea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:92:46:65:a1:9f:29:f7:89:bc:83:e5:0f:
19:8b:11:d2:1a:5a:de:ac:ec:58:d3:f8:62:fe:6e:
7a:64:82:3b:9c:29:a3:4f:f0:cc:70:18:99:28:c3:
19:3a:af:4d:0d:49:fb:62:8b:75:fb:9f:06:8a:04:
18:04:8d:56:e5:b0:f8:69:a3:90:42:c5:eb:46:61:
23:c2:0c:2c:ab:68:ae:b4:63:36:06:9a:e0:41:1e:
43:ea:5c:6d:6c:7e:fd:5a:19:5a:ef:b2:5f:19:2b:
08:a6:3d:74:85:06:03:d2:93:b0:f5:e7:9f:48:7f:
93:76:b3:df:9e:bf:34:24:82:b9:87:34:a9:0e:d0:
76:94:0e:c0:81:f4:c0:fe:09:5f:c6:23:47:8f:b3:
39:87:17:1f:f9:8e:f6:66:5e:43:96:a2:a4:7e:cb:
d2:fd:2a:c8:94:6a:48:24:f1:71:35:38:c1:93:c3:
fc:ad:54:5a:6e:92:94:2e:63:db:90:63:b6:92:24:
5d:63:9b:7a:04:db:e6:2e:76:dc:01:21:4a:65:60:
42:8e:ac:f1:5e:ff:df:a5:71:a4:14:fd:84:e4:70:
8e:41:a6:90:42:eb:a1:dc:3f:fa:4c:d6:72:1a:fb:
b5:c2:ce:08:50:98:ce:4a:df:a7:ee:6a:35:1d:4c:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:77:DD:11:6F:1F:9E:EC:5A:16:FB:A2:51:7F:8A:AF:58:F9:B8
X509v3 Authority Key Identifier:
keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:aa:04:55:cb:64:8a:e4:f9:1f:19:ba:2e:99:01:81:b0:04:
a2:e5:38:9c:43:d1:00:20:c8:51:af:5b:75:10:9b:f5:09:4c:
db:41:04:11:2f:e2:e5:74:69:b8:25:39:d5:30:67:55:5d:2d:
d1:d7:49:fe:6c:af:ac:2f:31:9a:4f:d0:1d:8b:ea:b7:f7:37:
64:09:88:ce:6f:dc:3b:6a:0a:16:35:ba:09:ce:54:ef:57:08:
6b:72:c1:4d:53:a9:98:7c:1f:3b:30:db:50:e8:1f:e7:a0:2e:
d3:cc:6e:bc:54:29:79:c1:ff:8d:8a:9d:ca:be:e4:3e:72:ae:
cc:4c:44:d4:d7:92:4d:a6:3c:4e:91:ab:66:4d:60:75:54:3e:
d8:81:ad:06:cf:64:7f:fc:a7:49:be:f1:09:40:c0:f5:e4:d6:
28:d3:de:eb:48:cd:92:40:fc:6a:41:2d:cb:09:2f:2a:94:f4:
29:49:1a:12:e5:91:81:20:0e:b9:17:8f:df:fc:6c:e7:1d:98:
2d:47:49:bd:44:ca:95:25:05:79:49:0d:2b:48:45:a7:96:b7:
83:22:b7:65:3e:29:ee:fa:47:1c:cd:a6:5a:d7:a4:fe:1d:26:
65:b0:a9:2c:4f:b1:d0:44:a7:dd:5c:93:70:2a:28:db:03:69:
af:55:4c:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3
QkM2QUM4OTAwHhcNMjYwOTA0MTYzMzQ1WhcNMjYwOTExMTYzMzQ1WjAYMRYwFAYD
VQQDEw02YTlhZjJlYS1lYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6KSRmWhnyn3ibyD5Q8ZixHSGlrerOxY0/hi/m56ZII7nCmjT/DMcBiZKMMZ
Oq9NDUn7Yot1+58GigQYBI1W5bD4aaOQQsXrRmEjwgwsq2iutGM2BprgQR5D6lxt
bH79Whla77JfGSsIpj10hQYD0pOw9eefSH+TdrPfnr80JIK5hzSpDtB2lA7AgfTA
/glfxiNHj7M5hxcf+Y72Zl5DlqKkfsvS/SrIlGpIJPFxNTjBk8P8rVRabpKULmPb
kGO2kiRdY5t6BNvmLnbcASFKZWBCjqzxXv/fpXGkFP2E5HCOQaaQQuuh3D/6TNZy
Gvu1ws4IUJjOSt+n7mo1HUzFCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOijd90R
bx+e7FoW+6JRf4qvWPm4MB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz
NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn
NjgwX2lDZFNNb0o3eHF5SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkaoEVctkiuT5Hxm6LpkBgbAEouU4nEPRACDIUa9bdRCb9QlM20EEES/i5XRp
uCU51TBnVV0t0ddJ/myvrC8xmk/QHYvqt/c3ZAmIzm/cO2oKFjW6Cc5U71cIa3LB
TVOpmHwfOzDbUOgf56Au08xuvFQpecH/jYqdyr7kPnKuzExE1NeSTaY8TpGrZk1g
dVQ+2IGtBs9kf/ynSb7xCUDA9eTWKNPe60jNkkD8akEtywkvKpT0KUkaEuWRgSAO
uReP3/xs5x2YLUdJvUTKlSUFeUkNK0hFp5a3gyK3ZT4p7vpHHM2mWtek/h0mZbCp
LE+x0ESn3VyTcCoo2wNpr1VMjA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:18:52 2026 by rpki-client