
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier: hCkWyvw8wARhCLlxaZMAZAyhOEf9+XWI2yuYkLNBvoA=
Subject key identifier: 2A:73:CE:13:41:ED:E5:9E:58:B2:35:B6:2C:87:8C:25:F2:A8:D1:E1
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number: 358D
Signing time: Mon 28 Sep 2026 15:07:22 +0000
Manifest this update: Mon 28 Sep 2026 15:07:21 +0000
Manifest next update: Mon 05 Oct 2026 15:07:21 +0000
Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: yKL143v3y/ikuF/zmsBtGoSLV886c/UE6yQqQ3wLKT4=)
2: QZtxquwpYDoRbsQozqbgPWRGMhc.asa (hash: oV6xv1MVqgozeeJElPGU8MdoVN6LRwbSdSusktILKpU=)
3: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: rcFyozuFtBU24Fj/puD3Y3gAMLE1tFWBMfsBdsY0Lgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Validity
Not Before: Sep 28 15:07:21 2026 GMT
Not After : Oct 5 15:07:21 2026 GMT
Subject: CN=6aba82aa-a675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:a4:df:b7:b7:f1:9a:22:19:04:90:66:01:
fb:01:37:13:05:48:00:93:46:4b:5a:5d:fe:d9:a1:
8e:35:7f:71:bc:e8:cf:a3:3a:32:1b:3d:79:4f:7f:
c3:a5:bc:fd:25:0e:7a:69:02:d5:81:1e:b5:88:11:
fc:d9:70:46:84:0c:ae:18:94:49:85:2f:39:e8:8a:
9f:15:eb:b0:7c:3b:99:0a:75:0d:00:44:e6:12:a3:
ea:c3:4e:1b:8e:fc:ea:36:f3:1c:56:b6:7a:e9:b7:
2f:12:e3:d2:a0:25:c4:a1:55:42:20:3d:f2:47:83:
63:c5:1f:b3:aa:58:3d:a7:22:33:94:92:46:ff:58:
7f:ac:d9:93:36:11:c4:fa:2f:00:0d:6a:6b:a4:53:
94:ec:2a:2a:f7:7d:b2:2a:ea:61:31:ef:ae:4c:b0:
ff:e9:70:95:dc:af:e7:20:f4:de:88:34:29:3e:f5:
28:cf:24:34:e5:af:ef:5f:f7:67:bb:1c:df:c8:be:
7d:3c:6a:d2:9a:cb:4b:da:a7:d3:ca:1a:0d:32:67:
a1:cb:19:dc:70:31:0a:10:3b:44:f4:50:fd:25:6d:
ce:28:3e:5c:96:5d:d1:e3:f7:16:af:0c:2e:9a:87:
3f:c6:9a:d4:65:1c:11:28:56:dc:7e:a5:57:99:c0:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:CE:13:41:ED:E5:9E:58:B2:35:B6:2C:87:8C:25:F2:A8:D1:E1
X509v3 Authority Key Identifier:
keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:14:5a:cd:29:41:e2:92:d5:f2:78:e5:34:35:9e:3b:27:
3f:73:00:37:a2:c9:40:61:54:1a:62:6c:d8:53:d4:b9:05:72:
46:31:c6:5a:d9:75:d8:f8:46:bf:35:20:c3:b2:8e:82:52:4a:
07:00:17:6c:3e:eb:b3:ea:31:d7:3e:e3:27:33:0c:8f:c0:0a:
d4:14:2d:74:04:21:db:d2:46:f8:bd:fe:21:c3:70:ff:db:28:
2e:13:cf:4d:d0:23:ff:c4:5c:9f:89:df:43:3d:72:d4:01:f9:
cf:7a:ae:b1:82:51:76:7f:8d:02:12:9a:e6:52:ac:d5:0e:c6:
c2:6c:4e:81:18:62:2c:95:d6:e8:a4:42:7c:44:3b:01:13:5e:
e6:83:eb:40:2d:32:45:8f:db:99:c1:78:45:84:c0:b0:f0:3d:
fe:7d:64:21:9f:52:1a:78:7e:8d:3f:f1:21:b1:c8:c2:2a:d1:
96:c1:65:d3:28:48:c1:8d:ff:6e:99:64:63:26:0b:df:05:83:
db:fe:3d:81:f0:5f:e1:37:43:35:07:f0:3e:94:7d:dc:dd:3d:
cd:26:13:f0:ed:ad:0b:3e:c9:9c:ba:10:b6:68:7c:83:61:4a:
00:18:1c:08:e1:ae:ea:88:ee:51:1e:bc:15:24:b3:b8:98:51:
1a:69:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:55:37 2026 by rpki-client