
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier: KNzQcGHhHLLXtDiP49tilb4DWyZGcYFjygHMNT2dV+g=
Subject key identifier: 45:8F:A3:42:CB:94:4B:D7:A7:57:76:31:E2:70:2E:23:83:70:5E:85
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number: F3
Signing time: Wed 07 Oct 2026 06:50:48 +0000
Manifest this update: Wed 07 Oct 2026 06:50:47 +0000
Manifest next update: Wed 14 Oct 2026 06:50:47 +0000
Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: ZEbe+vl1d5nWPXS5YtlJ3CMD9MIj3szKy6VTkKD77MQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Validity
Not Before: Oct 7 06:50:47 2026 GMT
Not After : Oct 14 06:50:47 2026 GMT
Subject: CN=6ac5ebc8-3b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:a6:27:29:4a:05:d4:9c:82:f9:61:1c:54:
11:87:54:3a:b0:b8:09:af:da:5f:63:53:e0:38:87:
07:f8:7b:d0:e8:22:50:f1:ec:5b:90:90:1e:3a:2f:
77:35:ab:bf:6f:ba:c4:df:f2:d2:e3:7c:28:d1:73:
b8:76:e2:a5:5a:a8:73:e6:01:ba:a6:44:79:39:91:
e6:fc:b8:1d:7c:6a:a4:67:13:6b:25:e6:06:0a:83:
8f:f3:76:0c:be:bb:08:5f:b3:d3:21:83:57:35:da:
a5:db:fb:a8:94:a0:96:59:d5:8d:d9:b9:c4:c8:1b:
2d:2e:0a:5a:57:36:16:11:a5:aa:95:e5:5a:13:91:
b8:e6:8d:48:25:24:df:b3:8e:2f:c7:c1:f9:1e:bd:
f7:c2:75:01:ba:4a:1f:30:1d:68:3c:ff:f2:9b:56:
06:19:56:2c:e4:f8:a5:c6:20:c6:47:00:ae:8e:b1:
ba:e1:39:59:f2:9a:e8:e4:b3:59:f1:13:70:f4:56:
ac:3d:3d:ee:5a:e2:f5:4f:b3:78:7f:85:00:64:3d:
12:c9:44:fe:c9:13:fa:68:a7:9e:89:4a:b3:0c:7d:
65:f5:2e:b6:30:26:54:2c:47:a6:15:16:1d:d3:8d:
06:55:b5:53:c2:de:6e:c3:d0:d0:a8:83:cf:9f:cb:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8F:A3:42:CB:94:4B:D7:A7:57:76:31:E2:70:2E:23:83:70:5E:85
X509v3 Authority Key Identifier:
keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:59:11:c7:42:d9:2f:69:ce:f5:cf:26:c3:fb:6d:83:f9:1d:
7f:1d:f2:72:c9:30:20:7a:e6:ab:ff:9e:5b:f4:ed:0a:87:f1:
33:d0:3b:ba:f8:c7:40:00:29:a0:2b:8f:93:90:d4:6f:1f:58:
32:73:f5:b4:89:10:1e:b8:78:54:50:fb:98:17:3d:0d:da:64:
21:de:87:af:cd:6d:52:29:13:b1:a8:c8:db:f4:e7:eb:7e:ce:
87:82:50:49:e6:69:e3:7b:ab:14:6e:1d:50:21:60:35:c3:1b:
ff:b2:3b:55:84:ed:93:43:28:20:be:26:e2:f9:67:c0:ea:57:
93:ef:a5:e5:8c:d0:2f:3f:bb:56:58:2d:97:f5:6b:40:41:68:
75:8e:b8:fe:22:b0:16:c3:c3:84:bd:dc:4f:90:50:ae:47:87:
83:c6:78:f5:79:f7:5a:88:00:1d:2d:21:04:a3:c1:27:e8:ad:
f8:2d:4e:c5:a8:a9:95:4d:50:50:f6:dd:5b:2d:03:b0:ef:ac:
39:29:b7:6f:0a:1e:87:88:87:13:b9:35:0c:21:c3:f8:0c:0f:
e0:35:f0:59:15:eb:02:7a:8d:06:be:21:ec:ed:f2:75:2e:61:
67:8f:b3:e2:a0:0f:84:0c:b7:28:99:e9:31:30:c0:e8:2f:b6:
76:60:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:03 2026 by rpki-client