
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier: HO++WlqNYtY9aqMyP59RYB8W/+Um6W2tWACIhY7oMIw=
Subject key identifier: 7A:BA:0F:60:86:95:4B:DD:86:6D:AB:BE:4D:7C:CA:18:63:15:2C:01
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial: 1E81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number: 1E73
Signing time: Fri 04 Sep 2026 16:01:56 +0000
Manifest this update: Fri 04 Sep 2026 16:01:56 +0000
Manifest next update: Fri 11 Sep 2026 16:01:56 +0000
Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: nilP7dI5JhorZAEv4s4oy/rrVtVrl3ESpScRofVzFTQ=)
2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7809 (0x1e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Validity
Not Before: Sep 4 16:01:56 2026 GMT
Not After : Sep 11 16:01:56 2026 GMT
Subject: CN=6a9aeb74-8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:9e:c3:23:b6:e1:39:dc:08:f4:a4:43:cd:
5b:95:ff:9c:19:5b:e7:26:2a:73:b5:7a:7c:24:9e:
60:47:bc:2d:68:1b:08:38:d1:ab:27:33:d5:89:a8:
62:7a:c7:35:04:9b:5d:e7:bb:35:ac:7c:f9:c9:15:
78:1e:81:6d:8a:7c:8f:99:b1:03:23:37:b3:d0:58:
78:58:35:03:8b:bf:95:c6:8c:f4:b5:c0:8c:a9:55:
62:b5:99:83:35:51:71:75:0f:ad:32:71:57:c8:13:
59:ac:08:6b:88:84:db:47:d0:6c:ba:eb:cc:a5:2d:
3e:39:46:c2:d3:25:33:e9:e8:59:da:1d:cf:55:fe:
cd:b1:d4:fb:8e:a3:ae:d9:66:82:82:dc:60:d5:c7:
54:c5:11:9f:6d:b2:05:d7:f2:e9:e8:98:79:ba:78:
bc:dd:72:2e:c1:ef:ed:eb:06:7e:8a:6d:76:0e:50:
06:71:0d:b2:f8:eb:54:98:d3:29:51:03:bf:de:8e:
2e:88:c0:22:78:1a:b0:09:77:9e:55:11:53:e6:27:
22:86:6f:17:c2:32:bf:e9:d3:ab:3d:74:8e:ab:e9:
fa:30:60:21:da:f1:86:3f:6f:a7:9f:da:8c:63:da:
79:42:c6:7b:0d:2f:23:53:13:d8:da:23:30:da:5b:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:0F:60:86:95:4B:DD:86:6D:AB:BE:4D:7C:CA:18:63:15:2C:01
X509v3 Authority Key Identifier:
keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1e:87:74:26:97:0b:1d:fe:74:1f:9b:f4:c5:81:5a:2d:68:
ba:bc:b5:00:31:0a:2d:7d:20:5e:8b:33:f6:b5:c1:8c:57:44:
03:eb:d9:ec:95:3d:ff:f8:54:7e:54:97:1f:a5:54:ce:cb:15:
64:55:17:b0:c3:8d:d1:b7:e2:cb:55:9c:67:e8:5d:0b:15:2d:
ff:7d:72:41:e6:a6:d7:ba:75:81:15:73:90:14:cc:ec:66:66:
7d:ac:dd:00:0e:01:85:56:1c:c0:71:ee:5c:93:11:03:f1:65:
5e:db:b2:0e:ba:2f:9b:d9:0d:b7:74:20:f0:80:30:40:1b:ab:
bf:f6:5c:44:33:4d:8f:3d:8f:f2:25:81:9b:ec:f8:b9:ee:13:
d9:48:ae:31:7f:d1:11:9e:04:33:92:bd:23:bf:e8:21:50:05:
81:11:ec:3b:c2:36:d1:42:b5:b7:66:ab:84:32:be:ae:c6:1f:
ba:b3:0f:17:05:7c:c0:af:ae:55:01:f1:83:8f:2c:2c:82:8d:
0d:fb:c3:e4:00:46:cf:04:df:92:df:e5:53:da:3f:b8:02:8a:
44:6b:f9:9f:fd:50:e2:76:eb:98:d1:e2:e2:b1:41:b9:6c:25:
59:e4:0b:55:3e:08:4e:c3:97:b4:89:f7:20:51:b0:8c:31:41:
7a:bb:11:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw
N0ZBQTkwNzIwHhcNMjYwOTA0MTYwMTU2WhcNMjYwOTExMTYwMTU2WjAYMRYwFAYD
VQQDEw02YTlhZWI3NC04Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuB+ewyO24TncCPSkQ81blf+cGVvnJipztXp8JJ5gR7wtaBsIONGrJzPViahi
esc1BJtd57s1rHz5yRV4HoFtinyPmbEDIzez0Fh4WDUDi7+Vxoz0tcCMqVVitZmD
NVFxdQ+tMnFXyBNZrAhriITbR9BsuuvMpS0+OUbC0yUz6ehZ2h3PVf7NsdT7jqOu
2WaCgtxg1cdUxRGfbbIF1/Lp6Jh5uni83XIuwe/t6wZ+im12DlAGcQ2y+OtUmNMp
UQO/3o4uiMAieBqwCXeeVRFT5icihm8XwjK/6dOrPXSOq+n6MGAh2vGGP2+nn9qM
Y9p5QsZ7DS8jUxPY2iMw2luX4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHq6D2CG
lUvdhm2rvk18yhhjFSwBMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy
NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV
OTZMNVVmc1NoSDRILXFrSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbx6HdCaXCx3+dB+b9MWBWi1oury1ADEKLX0gXosz9rXBjFdEA+vZ7JU9//hU
flSXH6VUzssVZFUXsMON0bfiy1WcZ+hdCxUt/31yQeam17p1gRVzkBTM7GZmfazd
AA4BhVYcwHHuXJMRA/FlXtuyDrovm9kNt3Qg8IAwQBurv/ZcRDNNjz2P8iWBm+z4
ue4T2UiuMX/REZ4EM5K9I7/oIVAFgRHsO8I20UK1t2arhDK+rsYfurMPFwV8wK+u
VQHxg48sLIKNDfvD5ABGzwTfkt/lU9o/uAKKRGv5n/1Q4nbrmNHi4rFBuWwlWeQL
VT4ITsOXtIn3IFGwjDFBersRkg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:22:01 2026 by rpki-client