
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json)
Hash identifier: pTgaZPuoTKaN10XZJGHuOWd6JDc8J+GFkYdu+nY+CFY=
Subject key identifier: 35:C8:BE:86:8C:72:ED:34:24:FD:0B:74:28:FC:08:B0:0E:B4:D6:FD
Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Certificate serial: 0702
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
Manifest number: 06FA
Signing time: Mon 26 Oct 2026 18:33:15 +0000
Manifest this update: Mon 26 Oct 2026 18:33:15 +0000
Manifest next update: Mon 02 Nov 2026 18:33:15 +0000
Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: 59rE6kMo/HKOFQOls0U5FdG/CEajNm4hW/4yvi1APuM=)
2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: C9xOCAlI2ugXqr2LkeMuXjVj2fsjnMUChwzmuRA9WBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 18:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Validity
Not Before: Oct 26 18:33:15 2026 GMT
Not After : Nov 2 18:33:15 2026 GMT
Subject: CN=6adf9ceb-1e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:51:c3:b2:d5:cd:f1:75:62:78:10:c7:55:
87:f9:d1:4a:aa:ea:eb:f1:d4:b0:21:6d:35:15:79:
e2:10:28:95:4a:3f:dc:57:34:c6:82:48:3b:93:0d:
f4:8a:65:cb:35:8f:75:29:44:b2:3c:37:4a:05:77:
d4:bf:7e:85:e8:46:34:cf:f9:c2:95:9e:2f:2b:26:
e5:af:59:50:17:f9:29:f2:0d:bb:10:85:51:8f:c1:
9b:2e:2d:95:7a:d6:90:83:94:66:34:e0:9a:b4:cc:
23:2b:04:c2:b5:a5:23:01:58:be:31:66:da:9c:31:
6b:55:60:90:7c:30:45:b0:6a:83:13:28:6a:04:52:
c8:49:dd:64:69:f9:91:f2:00:9d:f1:e8:b2:b8:4d:
0e:52:66:68:81:3d:f8:89:a0:0a:0f:ab:58:84:11:
d2:4b:c6:9a:88:83:9c:d1:80:36:f7:63:9c:5f:9c:
c1:63:c1:1a:04:40:f8:cd:59:13:9c:e6:57:6c:54:
1d:00:9c:47:84:2c:c4:0f:7c:24:83:a8:88:60:c6:
36:29:ec:30:69:45:7d:5c:39:43:8b:3d:85:57:f7:
21:80:99:7c:bd:f9:da:87:7f:a0:de:22:33:c8:d9:
21:3a:c1:4b:99:bb:ac:31:b9:94:95:6b:55:e7:bd:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:BE:86:8C:72:ED:34:24:FD:0B:74:28:FC:08:B0:0E:B4:D6:FD
X509v3 Authority Key Identifier:
keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9c:cf:83:20:38:73:95:48:41:6f:95:05:bb:9d:69:a6:3a:
90:84:65:96:0c:78:af:e6:77:9f:2d:6e:b9:78:51:d3:41:fb:
27:88:ee:24:92:07:b2:c1:3a:72:6a:f4:fb:e0:1f:8e:28:16:
a2:ef:a0:d4:08:8d:d7:57:fc:90:f0:81:58:57:19:29:bb:2f:
0b:ad:da:f3:1d:98:ca:b0:05:20:4e:a2:66:ba:d9:41:cb:fa:
6e:7e:e7:3c:59:76:ab:0b:aa:1a:99:32:be:f8:4b:77:d5:53:
ee:d7:42:c7:f3:95:86:72:59:ac:1f:cb:ab:ca:5e:16:36:3d:
60:6d:8a:7e:64:01:ca:4b:13:a2:ec:d5:53:0c:79:b6:56:79:
50:3c:2b:e2:a2:2d:3e:83:29:5f:6c:bf:59:7b:42:3c:67:e9:
f2:17:d1:48:7d:a6:58:de:d7:d2:e5:c0:26:b8:55:5c:e6:c2:
52:b9:16:13:b1:7e:a4:2d:67:eb:f4:d0:d4:d8:9f:56:79:64:
2f:73:1e:b0:61:62:ea:59:16:d9:2a:2c:20:e8:4a:9d:f3:b9:
65:91:ab:fe:c0:9d:75:45:f0:31:d0:19:d5:6c:77:cf:6f:19:
4f:89:d3:e9:8a:55:5d:92:f4:04:29:9b:a9:be:9f:17:f4:87:
4e:6a:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:39:42 2026 by rpki-client