
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier: nC5P742sTkApSEBERK/77b8Z8HLJBBFazsmofgGvXVA=
Subject key identifier: 01:E3:FB:01:5A:D1:4F:5F:5A:FE:02:57:FC:EE:2B:EE:8D:06:85:54
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number: 02A1
Signing time: Thu 17 Sep 2026 01:46:09 +0000
Manifest this update: Thu 17 Sep 2026 01:46:08 +0000
Manifest next update: Thu 24 Sep 2026 01:46:08 +0000
Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: NUhYeYrk9X5MDoXZHhhGlsRQJiDTnCZCv6UhBfS7gao=)
2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: QTF3ES2D2Qx8q3gy7vrfGGN+D9+IJxfQn8XNpdqSONA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 01:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Validity
Not Before: Sep 17 01:46:08 2026 GMT
Not After : Sep 24 01:46:08 2026 GMT
Subject: CN=6aab4660-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:8a:38:65:25:3e:32:81:24:b8:07:b0:58:
96:5c:08:76:04:51:f9:48:25:31:5f:21:51:96:31:
9c:80:b7:eb:6f:f0:03:c0:73:9a:23:14:a6:fd:37:
dd:93:52:dc:e6:c2:6e:05:f3:67:ec:b4:16:c0:39:
6a:95:25:23:dc:16:12:24:ac:ba:5f:92:6e:32:fe:
f5:6d:62:fa:06:4d:ef:84:31:3f:0a:3f:64:10:7b:
1a:4e:ac:c4:3a:74:97:c7:d4:4d:05:99:8c:3e:ee:
21:71:6b:2c:6a:19:a9:c2:35:24:2f:5d:8c:db:e2:
32:3b:18:62:e7:1d:2c:54:f6:a8:9d:49:f2:99:48:
09:c7:12:40:46:8a:e9:00:31:fa:8b:3c:38:e0:0c:
7c:83:0c:4f:fc:03:0a:23:ba:45:2e:8c:1b:8b:da:
2b:88:7b:d3:d5:fd:c9:5f:ad:76:a1:a5:e8:12:ea:
5b:08:37:33:99:37:fe:32:97:1b:2a:d9:02:b5:52:
8c:75:b3:f9:86:02:4f:c5:f6:13:5a:cf:53:60:3c:
dc:f3:b8:2c:42:f0:49:9b:54:19:6d:d4:24:5c:6d:
c3:e2:3d:b9:94:8a:41:31:e9:00:18:db:99:11:43:
92:00:e2:9a:3f:cd:01:1c:99:b5:32:13:df:86:66:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:FB:01:5A:D1:4F:5F:5A:FE:02:57:FC:EE:2B:EE:8D:06:85:54
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:17:92:f6:1e:eb:d9:c8:02:9f:0e:fe:69:0b:68:07:ea:
8f:07:d3:2d:39:92:d2:aa:24:56:d4:79:3b:21:66:07:48:36:
5e:cf:be:16:04:10:5d:9d:fb:b2:04:f8:eb:90:5d:c0:bb:76:
1b:8c:4e:8c:4c:9b:f9:59:bf:81:f5:09:66:34:b9:b4:d2:97:
80:24:11:ad:c1:eb:9b:47:91:10:eb:69:9c:d4:ac:16:14:db:
89:34:6b:0d:02:4e:63:9b:f8:74:f9:c3:3a:ab:d7:e9:9b:a2:
13:b8:85:89:33:e8:13:b2:3f:15:27:33:a8:b2:71:d8:e9:bc:
6c:30:dc:6e:95:02:fa:0f:a4:f3:bc:6d:a6:a9:34:77:dc:1c:
e8:a0:21:1f:34:a7:1f:cf:32:38:45:a8:07:00:bb:5e:0d:27:
77:6e:da:9b:1d:2f:5f:06:1d:ac:51:8e:fd:b4:34:fd:d6:90:
f2:7f:ce:90:94:b9:91:13:a0:c5:ab:0c:7d:28:23:a2:c5:02:
c2:68:9a:c4:e6:88:ba:c0:89:76:74:5e:08:9f:b3:8c:14:73:
f5:35:32:92:2d:14:48:18:5f:eb:21:21:74:14:ab:51:e2:b3:
5e:99:28:ab:8b:64:42:1e:b0:1d:cb:1a:b7:52:e2:75:1f:15:
85:3a:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:08 2026 by rpki-client