
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier: u1tIut6ZtKdSJD4aOQOkwrrRpnh1OusN+1XV3CNWl6Y=
Subject key identifier: DC:D3:BD:1F:FF:6B:9D:38:05:42:19:60:09:D6:75:51:FD:49:49:B0
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number: D9
Signing time: Wed 19 Aug 2026 07:18:52 +0000
Manifest this update: Wed 19 Aug 2026 07:18:52 +0000
Manifest next update: Wed 26 Aug 2026 07:18:52 +0000
Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: bihwx3hFd3gZR11D4FA2lQScdu2N7i7XZi4WuS3V5So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Validity
Not Before: Aug 19 07:18:52 2026 GMT
Not After : Aug 26 07:18:52 2026 GMT
Subject: CN=6a8558dc-0532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:68:5b:27:54:77:14:30:2c:a9:47:9e:94:
93:1a:c9:d6:a8:f5:c0:5b:88:31:2a:29:31:b0:8e:
4e:f6:37:87:81:08:cf:91:9f:d1:19:16:01:6b:51:
b0:1b:b8:9b:95:68:d1:0d:c9:57:de:19:63:b7:6d:
a4:d7:73:88:b3:cf:cf:1b:c1:5b:81:69:9b:86:27:
b9:5b:aa:0d:60:46:07:b4:b4:0a:e7:c7:e4:00:56:
01:ed:39:e9:a7:c3:ac:69:8c:66:55:6d:f2:57:f3:
8e:f5:f1:33:fe:ba:bf:89:c5:9a:6a:d3:0c:6f:cf:
f0:42:2a:ab:05:40:6d:c0:a1:c0:e0:eb:c3:00:34:
88:fa:2e:ff:15:8b:52:f8:55:ee:88:34:92:5d:79:
92:16:9f:68:af:0c:00:7d:61:0c:a2:e2:3a:c2:7f:
7d:96:2c:1f:20:ef:66:54:f6:65:30:a5:53:30:9e:
2c:b9:d3:7a:b3:14:45:b8:12:7d:ff:57:02:d7:d0:
1c:96:4b:d6:e3:4e:e6:41:a8:32:6c:5d:3f:5f:3c:
03:4c:94:24:26:33:df:06:b6:71:85:cc:a3:98:44:
22:2e:fe:ed:4d:fe:cb:c4:f4:32:21:9d:05:7e:ed:
ec:4d:4d:7c:10:79:5a:0c:bf:85:b5:35:54:bf:30:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D3:BD:1F:FF:6B:9D:38:05:42:19:60:09:D6:75:51:FD:49:49:B0
X509v3 Authority Key Identifier:
keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d2:9c:20:7e:9e:99:d6:52:c0:85:71:14:3b:f1:c0:8c:76:
ff:a7:98:5f:d1:a3:c8:ff:20:66:8a:7f:3e:ba:cb:39:64:0c:
e2:10:eb:b5:e2:f3:32:fe:1a:08:06:d4:93:36:18:f5:13:a9:
f9:ea:c2:ec:57:5f:c3:30:75:e7:68:30:0a:32:ca:81:09:ff:
a4:58:bc:b9:2a:25:e9:e9:3a:43:dd:25:15:2b:13:2f:56:df:
0c:40:4e:d7:77:3a:f1:ee:1d:05:b6:74:2c:e1:83:5c:95:ef:
91:16:89:e6:f1:e4:42:76:f5:e9:a7:98:6d:77:bb:64:ba:68:
ae:2b:9c:62:fc:fc:5c:15:ca:94:10:5d:7f:52:10:5e:24:47:
90:5e:21:49:a6:2b:95:1f:a9:aa:10:03:a3:7d:0c:71:c5:1b:
a4:ba:d0:e0:8b:23:d3:5c:29:43:e3:65:82:27:53:d3:12:69:
49:e3:1e:2f:2c:56:88:28:4b:c7:4b:b9:3b:a1:0e:98:a6:43:
f9:42:3b:13:ae:b6:d0:e1:19:91:fa:44:2e:41:ba:f8:18:3a:
d0:ab:fe:65:fb:50:65:8b:ff:5e:4d:ce:da:c7:10:b9:ef:67:
3a:5f:93:e7:1a:0b:0f:76:2a:9b:4c:00:53:a2:98:c6:8e:fc:
58:ae:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:35 2026 by rpki-client