
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier: 2jprRNab/cdEVeRCYBlB9pSWtvvMBf4pSLf+YJjNsZg=
Subject key identifier: 74:9B:2A:FB:18:7B:C0:15:9D:9F:7F:AB:32:6B:85:49:67:C3:63:20
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number: 07DF
Signing time: Mon 12 Oct 2026 21:28:20 +0000
Manifest this update: Mon 12 Oct 2026 21:28:20 +0000
Manifest next update: Mon 19 Oct 2026 21:28:20 +0000
Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: gXkbAeokggP8B+eFc9k8gkmsgrsbw0keUVWMbMGn3Xs=)
2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 21:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: Oct 12 21:28:20 2026 GMT
Not After : Oct 19 21:28:20 2026 GMT
Subject: CN=6acd50f4-f5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:cb:eb:93:b4:c9:bb:9a:15:db:de:f2:6c:
d4:49:74:7c:9a:90:03:b2:6b:9a:64:13:d0:4b:be:
46:6c:9c:82:dd:69:26:3b:4f:8d:ef:0b:1e:e2:ee:
74:0c:72:0e:5e:64:43:55:6d:43:24:b8:04:a4:26:
ff:b0:5f:5f:ed:b7:ac:ac:aa:18:75:71:33:a7:e0:
18:85:ca:03:ac:90:2b:4a:29:ac:db:a5:fb:9f:2d:
36:14:8b:f6:d1:20:b9:02:27:40:96:26:7e:70:9d:
55:29:a8:8e:22:0a:3a:85:42:ce:da:95:f6:48:76:
87:89:6a:f8:46:d8:19:f4:22:87:33:5a:bd:b5:04:
ed:60:37:7b:94:13:36:18:87:5b:49:6d:4f:cb:44:
9e:72:d3:f1:06:50:82:13:2b:6d:15:27:fd:b2:d0:
65:68:89:58:22:ae:82:e4:ba:22:d4:b3:b1:f8:6b:
ab:1e:c5:36:91:96:87:56:76:a0:28:24:cb:72:11:
8a:2f:dc:88:99:09:33:37:c5:c0:3b:0f:fe:8e:6f:
9a:4f:37:b2:5b:d5:77:62:4d:32:56:cc:1b:48:89:
05:72:90:72:80:d4:fd:63:83:f3:b2:44:1f:98:8b:
c9:13:04:b0:4b:6a:63:8d:cb:8f:00:60:65:8c:62:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:2A:FB:18:7B:C0:15:9D:9F:7F:AB:32:6B:85:49:67:C3:63:20
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:c1:88:1a:36:30:33:23:39:e0:83:f9:17:3e:0b:de:ea:
e8:15:4e:a8:fc:c0:4d:38:05:6e:8f:2e:19:c5:04:cf:d3:07:
27:d6:62:cf:40:ef:68:a3:e7:f5:9f:5d:d9:f9:6a:34:1e:b5:
95:e8:29:67:1d:1d:9a:be:50:be:06:21:7b:2a:a3:09:a0:65:
57:e3:be:cf:81:39:e4:f8:b5:2f:0f:3c:2a:b3:4b:43:6d:56:
2a:e4:14:d9:76:b1:b9:d3:fc:99:99:66:d6:ac:c8:c1:40:07:
04:98:44:b9:9d:64:3f:91:1e:70:19:f7:2d:bc:8a:4a:78:bb:
de:e5:f5:7a:6a:dd:66:a3:0d:38:cd:54:0a:7a:0b:57:55:5c:
29:31:10:6f:51:38:28:ae:80:90:b2:03:78:52:d2:7c:30:fd:
be:20:be:e3:c7:7d:60:e6:59:b3:8c:cf:67:58:e7:5a:29:6d:
67:ff:61:34:e2:16:67:c9:ba:62:55:6c:c3:7f:dc:e2:67:c3:
65:1b:fd:c5:7b:3c:88:0b:04:2e:aa:31:6d:c8:ab:65:12:38:
31:58:27:83:2f:01:78:b2:7c:89:b1:3d:ed:b7:89:c6:2f:49:
cf:ae:45:03:14:a1:0a:5a:f0:bc:ae:c8:bc:80:5c:3a:8a:ef:
de:96:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:13:17 2026 by rpki-client