
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier: re06mrZjYZCrvuk3PJASUuQ+T36HgPJpLsgwk0+a7WE=
Subject key identifier: 39:78:44:01:6F:F5:04:AB:D5:50:EA:26:27:B7:9B:8C:63:BB:4A:39
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 17E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number: 17B8
Signing time: Sat 24 Oct 2026 16:32:45 +0000
Manifest this update: Sat 24 Oct 2026 16:32:45 +0000
Manifest next update: Sat 31 Oct 2026 16:32:45 +0000
Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: Ja5D5rcNVTmNGvauyQoqXuil3IstA/34rwamOUAh8ss=)
2: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=)
3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=)
4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6116 (0x17e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Validity
Not Before: Oct 24 16:32:45 2026 GMT
Not After : Oct 31 16:32:45 2026 GMT
Subject: CN=6adcddad-3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:0d:9d:17:29:3c:f6:53:6a:41:45:e0:b4:
88:ce:24:79:9d:42:09:2a:5e:e3:6b:28:1a:68:75:
a2:7e:d0:01:00:92:e8:cd:d0:48:d9:15:6a:b1:5a:
d5:4c:41:19:b8:54:75:fa:70:08:73:bb:b4:ff:68:
51:76:68:53:30:d0:16:7e:02:c1:94:d0:b1:63:e9:
cf:97:b0:04:4f:b3:73:42:df:83:d7:5a:22:31:00:
0f:1f:8e:59:cc:8b:5e:52:2c:34:30:3f:99:bb:01:
da:7c:33:ef:4b:17:d9:78:ac:78:15:36:a1:9e:56:
7e:02:43:8f:9c:bd:cf:4d:2d:37:ac:64:50:c1:4f:
d6:6a:79:8c:b6:9e:87:37:84:6c:02:f6:3f:78:8c:
c7:df:14:a5:9f:2a:05:74:75:c1:c5:be:52:41:6f:
d2:d6:8c:01:37:8e:52:8c:79:e1:68:1f:55:20:88:
ab:8f:64:64:e6:09:9e:82:7e:ae:92:98:d7:82:c8:
d4:57:ff:a5:c4:ef:f8:7e:83:6f:e7:fc:8b:40:71:
14:b9:a4:8c:65:17:c8:09:15:54:b8:c7:f3:d8:45:
ea:9b:a6:c7:69:4a:23:fa:f5:54:21:0b:c1:6e:50:
4a:4f:d3:48:8e:42:b5:1b:00:fe:0b:7a:1e:91:e7:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:78:44:01:6F:F5:04:AB:D5:50:EA:26:27:B7:9B:8C:63:BB:4A:39
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:1b:85:6a:7b:5f:be:7b:d4:7e:b3:04:1e:4c:88:b1:90:
c7:88:6c:b5:18:e6:ee:41:e1:77:2d:3a:96:45:c5:0e:85:80:
d6:21:02:0a:01:51:38:a6:e8:64:74:5e:c0:ef:57:33:43:e8:
2f:24:3b:11:21:d7:bc:18:a5:5c:e4:db:94:42:bf:50:78:80:
51:f6:b0:e3:ed:1c:83:98:2c:ef:fe:9d:fa:ac:9a:17:26:03:
70:6d:35:1c:26:05:fe:dd:10:4b:31:29:d6:61:0a:80:df:ef:
0b:d0:0b:2e:6a:93:63:22:c8:16:a7:1b:5f:3a:44:59:ae:24:
bc:6a:ef:f6:40:52:38:bf:82:da:98:77:80:0d:2f:1e:c2:a7:
e4:07:f2:96:e8:1c:66:05:05:da:61:fb:f3:15:ac:36:60:24:
17:3a:f0:e1:23:03:e7:f7:2a:24:d2:6f:bd:e4:f6:ba:a5:cf:
ba:c9:59:98:44:79:3e:13:c5:a5:dd:b4:e4:4e:b5:f7:45:0b:
ad:c3:fe:51:b4:7f:5b:41:c0:22:03:de:1d:d5:6a:60:4c:85:
25:5b:5e:eb:61:dd:34:51:ad:b7:da:bf:63:1a:20:3f:4b:1b:
0c:cb:02:d4:ff:ac:10:25:a0:f5:02:7d:9c:d4:33:b5:40:f5:
e0:f2:76:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey
Mzc2ODhERjIwHhcNMjYxMDI0MTYzMjQ1WhcNMjYxMDMxMTYzMjQ1WjAYMRYwFAYD
VQQDEw02YWRjZGRhZC0zYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGINnRcpPPZTakFF4LSIziR5nUIJKl7jaygaaHWiftABAJLozdBI2RVqsVrV
TEEZuFR1+nAIc7u0/2hRdmhTMNAWfgLBlNCxY+nPl7AET7NzQt+D11oiMQAPH45Z
zIteUiw0MD+ZuwHafDPvSxfZeKx4FTahnlZ+AkOPnL3PTS03rGRQwU/WanmMtp6H
N4RsAvY/eIzH3xSlnyoFdHXBxb5SQW/S1owBN45SjHnhaB9VIIirj2Rk5gmegn6u
kpjXgsjUV/+lxO/4foNv5/yLQHEUuaSMZRfICRVUuMfz2EXqm6bHaUoj+vVUIQvB
blBKT9NIjkK1GwD+C3oekefFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl4RAFv
9QSr1VDqJie3m4xju0o5MB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw
Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL
R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF0IbhWp7X7571H6zBB5MiLGQx4hstRjm7kHhdy06lkXFDoWA1iECCgFROKbo
ZHRewO9XM0PoLyQ7ESHXvBilXOTblEK/UHiAUfaw4+0cg5gs7/6d+qyaFyYDcG01
HCYF/t0QSzEp1mEKgN/vC9ALLmqTYyLIFqcbXzpEWa4kvGrv9kBSOL+C2ph3gA0v
HsKn5AfylugcZgUF2mH78xWsNmAkFzrw4SMD5/cqJNJvveT2uqXPuslZmER5PhPF
pd205E6190ULrcP+UbR/W0HAIgPeHdVqYEyFJVte62HdNFGtt9q/YxogP0sbDMsC
1P+sECWg9QJ9nNQztUD14PJ2Rg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 15:03:31 2026 by rpki-client