
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
File: JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json)
Hash identifier: Kc+ecmv/rR4gfIeBTCL7Vr2iRpmRnJj19X9ZJjHph5U=
Subject key identifier: 1C:87:AC:EA:AB:ED:FB:3F:67:0F:05:CE:AC:B2:00:F0:AC:58:17:0B
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial: 0DDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
Manifest number: 0DB3
Signing time: Sun 04 Oct 2026 18:35:32 +0000
Manifest this update: Sun 04 Oct 2026 18:35:32 +0000
Manifest next update: Sun 11 Oct 2026 18:35:32 +0000
Files and hashes: 1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: TwLmyIH2KiMYyxONqV4VqeQRBkOwjZMfSpi2U6xlsUQ=)
2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: XeXtEW/KsiEzC5r/caIgiJO4VXTpipHESNAQNUm+mxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Validity
Not Before: Oct 4 18:35:32 2026 GMT
Not After : Oct 11 18:35:32 2026 GMT
Subject: CN=6ac29c74-93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:8a:c6:41:f9:9c:9a:d1:64:50:e0:f0:58:
16:b0:d0:e5:ce:de:a7:b1:50:b2:fa:fa:0b:23:86:
1d:48:14:bf:f1:4a:76:21:b1:d2:ff:27:43:d1:11:
aa:bd:5d:c1:25:5b:3d:0d:fc:8a:82:0a:6f:50:5c:
aa:a2:c4:c7:7c:a0:d0:30:a3:0d:80:92:76:54:8d:
0f:ad:51:38:2c:5e:eb:63:a4:66:92:f0:60:c5:96:
3b:7c:c8:38:cc:cb:08:d4:60:a5:31:0a:96:db:ab:
36:de:bf:be:e7:a9:c1:56:9e:88:bd:78:1d:2d:73:
2f:69:be:c0:ee:b6:77:aa:5b:c0:7a:26:43:cb:86:
a3:e5:5a:1e:81:c9:68:71:00:b5:fa:19:e0:46:2a:
88:82:20:08:16:98:71:fd:cf:d3:b0:47:22:9f:cf:
6f:ff:08:e1:f8:f6:97:8f:e3:29:da:36:83:98:4b:
60:82:00:25:41:90:4b:aa:4d:d1:e6:77:bc:b8:95:
e2:de:ac:18:a5:47:5d:eb:c4:9d:35:16:3d:7d:c0:
36:4e:0f:ad:68:34:4e:36:7f:8d:f3:03:9e:c4:22:
d5:7e:da:98:0c:d4:7f:cc:a0:11:b0:4d:94:3e:a7:
86:06:38:09:bd:96:37:03:69:43:db:f0:8e:3f:b9:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:AC:EA:AB:ED:FB:3F:67:0F:05:CE:AC:B2:00:F0:AC:58:17:0B
X509v3 Authority Key Identifier:
keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:5b:49:cf:85:38:a4:7e:31:4e:d7:8b:23:09:b0:7a:63:
9a:0c:18:03:ca:cd:05:e0:55:f2:bd:06:9c:0d:fc:94:63:ec:
87:72:ad:07:15:bd:51:19:8d:dd:47:11:b8:0f:ed:8a:99:ac:
4a:a6:ab:fd:20:d0:e5:64:94:54:e7:ac:be:1c:ea:6e:04:12:
0d:77:db:77:27:50:f3:ac:f3:cc:5d:4e:fe:aa:fb:69:0f:45:
49:6f:e7:dd:9d:a2:37:9e:3e:b6:00:d0:28:2b:c9:eb:21:27:
d1:26:35:2f:19:dc:c2:49:d8:75:46:54:73:5b:9b:48:2d:69:
3a:62:fe:6d:b5:e0:ab:e2:ec:87:e2:86:eb:f2:47:c3:c3:11:
0c:8a:42:e7:ae:c4:bc:e0:9c:9f:8f:21:25:72:a3:f4:3c:dd:
07:30:92:d2:e7:b0:fc:9a:a3:c4:b5:08:20:e9:b3:21:55:30:
85:62:ad:43:d9:47:c0:4d:67:ca:b9:18:78:aa:ec:81:e2:37:
f4:26:76:31:8d:52:64:6a:a4:1e:ce:20:01:19:08:b4:04:dc:
94:70:3c:e1:37:5c:d9:39:13:42:45:cd:a6:e5:4b:67:93:69:
0d:9e:34:be:36:48:04:42:1d:62:ff:02:86:5d:3c:46:7e:43:
28:8a:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:34:56 2026 by rpki-client