
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier: 3RWrF0OlWEupEqxovX+W4C7roUyRJfKNOhDN7dYAaO8=
Subject key identifier: 63:DE:59:D9:8B:D7:61:4E:69:97:17:D9:8F:10:6C:0F:63:0B:F3:2A
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 0BC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number: 0BA8
Signing time: Fri 02 Oct 2026 19:20:30 +0000
Manifest this update: Fri 02 Oct 2026 19:20:30 +0000
Manifest next update: Fri 09 Oct 2026 19:20:30 +0000
Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: khAtZSJeQzVRtYg+Aje/i+vmf1YEorTIDa+lKHZ/VgA=)
2: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=)
3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=)
4: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: Oct 2 19:20:30 2026 GMT
Not After : Oct 9 19:20:30 2026 GMT
Subject: CN=6ac003fe-76ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:9e:c2:fb:e7:f4:ab:56:40:4b:a5:0a:bc:
b0:b9:aa:bb:42:65:38:65:e8:ed:a1:36:b0:21:ac:
c6:9b:75:46:d4:25:af:a0:ca:0e:6e:aa:9d:7d:6f:
49:93:4f:6a:2b:b9:f0:f8:b0:63:fb:0a:d3:bd:31:
a4:bf:43:73:12:93:4d:0f:e0:13:8f:7e:c4:5b:d9:
06:53:c2:6a:01:17:1c:a8:df:b3:90:c1:27:44:ac:
62:31:56:58:14:a4:b8:90:e3:57:0d:57:05:ed:d5:
e4:35:4a:33:0e:e5:66:95:2f:23:75:c1:7c:a6:57:
25:c9:64:41:07:17:37:70:27:05:cb:9e:31:96:38:
98:d2:99:01:68:9f:ba:ee:04:ef:15:46:a7:68:01:
de:7e:03:8b:5b:7c:a4:be:d3:e3:5e:46:6c:d7:a1:
0f:c6:f2:2e:87:a6:f6:8d:ca:c2:60:90:be:ef:5d:
4b:f1:68:e2:1c:6e:0f:33:f6:1d:cb:fc:78:c6:08:
57:07:fd:95:2d:63:dc:c2:94:86:20:cb:42:49:08:
c0:e1:47:14:aa:e3:f2:78:aa:78:d1:0c:b3:2c:98:
02:68:d0:17:16:75:96:b5:5a:36:4d:c2:8a:39:9e:
d0:97:88:e3:14:5e:06:03:de:a0:7c:d5:26:65:89:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:59:D9:8B:D7:61:4E:69:97:17:D9:8F:10:6C:0F:63:0B:F3:2A
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:ea:9a:93:bb:b8:5b:c6:a7:da:9e:83:35:de:65:15:0e:
32:f7:c8:4e:ea:8c:96:37:83:24:d8:69:00:99:eb:fc:05:d2:
f6:83:7c:6b:c9:ba:e8:39:22:6b:83:2c:bf:ee:59:e4:21:25:
53:33:b5:2f:79:01:7b:35:b3:91:99:d9:d1:81:a9:5c:2d:91:
96:28:57:ab:95:17:31:cf:55:07:f0:7c:a3:b9:6e:93:83:25:
d5:e5:a7:f6:65:0f:21:50:e2:91:8a:75:c9:08:55:ea:22:a0:
7c:af:d7:9b:cd:19:7f:bc:0c:a1:29:e5:1b:98:e7:d9:98:54:
23:89:80:21:d7:05:45:24:2e:93:ae:97:12:2c:46:35:7f:b4:
f4:3f:33:ac:80:e6:f7:43:64:05:1b:fe:45:56:c8:cf:a1:5c:
a2:52:9a:38:b4:a7:33:48:0d:71:62:ec:5b:2b:82:29:da:e1:
1d:67:95:f5:15:ad:3d:bc:15:7b:89:86:14:08:72:3a:a5:51:
71:f2:4d:25:a1:60:44:58:bb:ae:20:57:34:6e:23:44:a2:28:
69:85:2f:ea:f1:1f:8e:b9:1a:d6:5d:2a:1b:07:0d:23:57:76:
c2:7a:7d:59:9a:c4:49:7a:ff:d5:60:e3:02:b6:14:d7:66:47:
f7:86:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:42 2026 by rpki-client