
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json)
Hash identifier: DsLQPBSCaFZl3anU0ORnsDhpeSfbKI6cC+qvFGH+t98=
Subject key identifier: 83:30:A9:F4:1F:54:80:51:AD:A5:D7:23:D7:25:59:81:D5:59:04:F4
Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Certificate serial: 0E18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
Manifest number: 0E09
Signing time: Mon 02 Nov 2026 17:56:47 +0000
Manifest this update: Mon 02 Nov 2026 17:56:46 +0000
Manifest next update: Mon 09 Nov 2026 17:56:46 +0000
Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: vO67eKlgDHpT95oftdO3FJePfU8qir4OVAsfSLU0J3g=)
2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: ABnDbZoZojBUQu35CjV1jd43+w0MxvPnVTJmIUx6ThQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl
rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 17:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3608 (0xe18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Validity
Not Before: Nov 2 17:56:46 2026 GMT
Not After : Nov 9 17:56:46 2026 GMT
Subject: CN=6ae8cedf-d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:41:7a:08:26:5e:12:f1:fd:01:ba:b3:9a:
a3:3e:93:83:2f:ae:8b:f1:d7:88:c1:9e:d7:90:a1:
e1:b0:ba:2d:8c:4c:32:27:d5:e9:89:12:53:28:13:
7d:00:53:20:55:73:46:43:bc:36:91:97:6c:aa:43:
92:95:f4:c2:9d:e9:56:61:5d:78:14:11:67:35:0d:
29:ae:45:bf:05:99:0e:ea:9d:eb:0b:ca:11:98:68:
30:fa:e8:77:3f:c1:03:e7:cc:dd:38:f6:7f:9b:e2:
a4:4c:34:a5:22:df:82:97:06:9e:67:b2:39:e9:98:
62:3b:36:66:5b:1b:b6:c3:b6:5f:3e:e3:6f:d2:8a:
89:e2:8d:61:e5:3f:00:7b:86:98:0d:90:a3:c8:d2:
e9:5e:c2:04:e5:9b:6c:ec:d5:0a:56:f7:9c:d0:f5:
75:9d:e2:c8:23:df:12:17:a5:cb:e4:be:3a:e3:e9:
b3:6f:c8:03:02:20:56:05:a2:1e:7e:89:40:d3:76:
b0:11:07:d5:4e:32:c6:ab:65:1a:d6:81:89:df:5c:
27:18:4e:df:a9:8b:10:f0:e5:a2:e4:d1:32:56:b6:
9b:af:3f:ce:a7:83:fb:af:2c:65:d0:a5:78:28:6d:
88:0a:3f:02:da:ab:e4:cd:e9:76:12:f9:97:22:ef:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:A9:F4:1F:54:80:51:AD:A5:D7:23:D7:25:59:81:D5:59:04:F4
X509v3 Authority Key Identifier:
keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:e1:ff:89:6d:a6:50:a8:a4:2e:c4:06:bd:c7:a4:4a:f5:
51:e8:e3:13:7f:9d:e0:d7:e2:80:1f:78:b9:8f:45:fd:38:4e:
1a:22:29:ca:d7:c8:bd:35:2a:79:31:4f:2f:78:2f:97:df:55:
11:f7:9f:35:93:fc:5c:23:a1:ef:2f:08:f9:f1:50:a0:21:ca:
90:e1:78:76:ea:c7:42:24:e5:40:21:81:98:1e:b4:6a:79:3a:
fa:b6:1b:b8:9f:67:86:07:e4:94:e5:93:f6:c5:0c:bd:8e:41:
cc:ab:ab:62:d0:5a:5c:5c:4f:09:7e:63:31:be:06:78:9b:91:
23:30:89:d6:ae:9d:7e:14:5d:73:87:08:bd:0e:f9:3d:a4:cb:
4e:5c:2b:b6:d2:e9:79:d9:18:fb:0a:62:48:1f:f1:0f:10:de:
6f:1b:cd:df:b2:c8:bc:a2:c5:44:7e:a5:cf:c6:28:d2:76:06:
da:99:32:a9:c7:80:db:b1:b9:c1:d6:e1:ba:d4:05:bd:01:88:
cc:e2:5d:ed:98:43:dc:2b:2d:15:f7:4a:9d:98:09:ef:ea:26:
ea:d2:6a:ca:3a:61:e3:d9:42:92:8e:22:fe:1b:be:d8:ba:6e:
4c:4e:a0:5f:95:17:d0:c4:9d:f1:f3:04:26:9a:33:9a:72:b9:
c2:e8:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:50:39 2026 by rpki-client