
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
File: _jiW4ypTasqUGSZZYmVzarowoWA.mft (raw, json)
Hash identifier: uKLMPSoFTO3S9nsZrSmy1khH6DTLoHu4ZbW1Q7GY1FQ=
Subject key identifier: 5C:C2:6D:C3:C1:53:E2:77:76:E8:15:91:36:98:14:1F:25:3F:69:F3
Authority key identifier: FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60
Certificate issuer: /CN=A91629D4/serialNumber=FE3896E32A536ACA941926596265736ABA30A160
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
Manifest number: 2E
Signing time: Mon 05 Oct 2026 09:13:46 +0000
Manifest this update: Mon 05 Oct 2026 09:13:45 +0000
Manifest next update: Mon 12 Oct 2026 09:13:45 +0000
Files and hashes: 1: _jiW4ypTasqUGSZZYmVzarowoWA.crl (hash: qJ1O/xxY7Zmp/xcys6TGeNEV53LBOJKd1diQU6TiDgk=)
2: E89A614284AC11F1A2853A1C8EA30FBC.roa (hash: VPhwajy+N2wSuiXdOPatR57VMIgQE7fhTICmlszMMqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl
rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629D4, serialNumber=FE3896E32A536ACA941926596265736ABA30A160
Validity
Not Before: Oct 5 09:13:45 2026 GMT
Not After : Oct 12 09:13:45 2026 GMT
Subject: CN=6ac36a49-060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:9c:fd:ca:bf:25:ce:09:66:58:da:8a:25:
c0:04:50:05:ed:b1:6c:3c:a6:b2:a4:27:f1:03:fb:
b5:f7:88:ca:3e:1f:7d:02:2a:d0:4a:57:cf:1a:7d:
f6:2a:de:81:52:33:99:d5:65:bf:da:1c:a3:3c:e1:
a8:ac:fe:dc:25:8e:a7:69:1d:e7:4d:7e:5f:f0:76:
d0:26:78:9b:3f:c1:a7:22:b7:9d:16:e1:10:6d:c2:
eb:1c:38:60:29:2f:e1:76:cf:4b:71:4e:ab:4e:e3:
aa:dc:1e:fb:ef:33:c8:c4:20:cf:85:f6:b5:a2:4d:
ad:1f:b2:da:f3:6f:f8:54:76:5e:52:64:4d:0c:8c:
85:91:d6:98:06:5a:05:dd:4e:4e:75:11:fe:c8:14:
ed:5f:38:22:7a:55:c1:2e:a9:d6:e5:dd:57:62:91:
19:52:10:41:42:cd:af:27:d3:c4:cb:19:b4:7c:7c:
75:b9:30:8a:72:36:a2:b9:84:52:3e:49:cd:45:a6:
6a:82:d6:f9:64:c9:e9:ec:a5:97:09:ab:be:b1:3d:
83:4b:02:7d:a8:78:ec:6b:61:4b:fa:ad:53:cd:80:
c9:f5:a5:0b:a5:11:50:02:4d:e0:5a:99:e4:19:94:
62:9b:a5:61:95:62:92:fc:47:19:06:52:e9:61:83:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:6D:C3:C1:53:E2:77:76:E8:15:91:36:98:14:1F:25:3F:69:F3
X509v3 Authority Key Identifier:
keyid:FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:02:f4:5d:69:45:9a:cd:fe:c4:d8:e9:08:8f:13:56:43:
51:75:88:97:8d:da:1c:b3:d5:5b:f6:ba:ad:15:8b:42:fa:4c:
e6:ae:c3:5d:89:f6:6a:b3:7d:32:29:f5:0f:6a:e1:37:08:6e:
30:d9:99:be:6d:f3:67:06:1c:49:83:71:89:eb:62:d6:2c:52:
38:06:75:6a:a2:a8:45:f1:db:98:de:74:ef:42:44:95:db:f9:
25:00:73:9a:2f:99:bc:8c:6c:ee:df:2d:84:27:b7:67:9f:a8:
fb:67:6f:44:e4:51:5a:02:3a:d7:e8:d8:7c:20:ef:85:e9:39:
e1:33:1d:fe:52:9d:b6:62:0b:6b:ae:b9:a6:49:c4:e8:52:59:
9f:8f:ea:17:82:a7:ba:c0:eb:c1:35:19:75:25:fe:02:78:e9:
25:83:78:eb:cb:b7:83:94:d0:49:00:25:de:96:9e:ae:72:94:
d5:28:04:db:f1:61:0d:66:24:0b:30:ca:77:92:d0:ae:68:3a:
0c:55:a8:38:f7:86:4e:1b:52:9a:1c:cf:b3:78:ed:07:66:6d:
30:0f:0e:a4:bf:fc:40:8f:63:ae:2f:bf:34:2c:9d:aa:c8:db:
c4:3b:f6:a3:09:3b:6b:b3:9a:39:8c:58:f9:b2:4f:77:3b:9c:
dc:ea:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:33 2026 by rpki-client