
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier: IhDbyzdmeRE/0Sgy3i9smVzQh99NVHyc/1gnlv+NnZk=
Subject key identifier: C0:95:7A:83:0C:B8:EB:9A:2D:8F:2C:2C:D5:4D:19:CD:69:35:AE:7C
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number: 01D2
Signing time: Tue 27 Oct 2026 04:02:27 +0000
Manifest this update: Tue 27 Oct 2026 04:02:27 +0000
Manifest next update: Tue 03 Nov 2026 04:02:27 +0000
Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: M+Eg3636mihm944ic0NshYs4RXpwqshDk/uM8W8AO7o=)
2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: b6508MSXVyNaUe4p4vgfVTolfpDsTV9uysiL+YPvW8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Oct 27 04:02:27 2026 GMT
Not After : Nov 3 04:02:27 2026 GMT
Subject: CN=6ae02253-dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:12:b0:71:5e:96:d0:e7:87:a3:88:0f:9c:
71:a0:71:15:40:8d:26:1e:9b:b2:b8:55:5d:a5:1f:
ed:d6:b8:15:1f:f3:4c:9b:bd:40:12:ed:96:f2:a2:
2f:b8:1f:4b:62:92:a2:4e:96:5b:1b:d3:2c:c6:0f:
74:d6:78:b4:7c:f8:87:10:af:29:fe:1a:6f:c4:ec:
68:ec:97:ca:97:af:76:5a:3f:3f:49:9b:1d:3c:44:
58:67:8e:46:5e:3a:e7:90:52:cc:37:96:6c:8b:52:
a9:65:04:c4:ba:f1:a9:c3:83:5c:6a:71:49:67:33:
66:b6:a5:c8:cf:6b:cb:2c:21:d0:8c:4a:e8:81:c2:
7a:b5:a8:53:45:24:fa:65:24:a6:80:41:0a:c7:b7:
1d:c8:5b:d5:ae:33:85:c1:4b:93:69:46:d7:5e:13:
7a:f8:bf:bc:f5:1d:2a:68:e2:6f:b8:a4:ce:b2:3f:
5f:40:cd:63:31:c4:bd:ff:59:66:69:4d:a6:22:d6:
a5:6f:d6:b2:b9:fb:60:b4:07:95:b6:fc:88:88:24:
6d:bf:5d:e7:b1:65:b3:b4:ab:da:87:68:34:55:32:
c3:05:eb:a4:30:1f:3f:2c:3c:d5:9a:60:c2:64:a2:
25:e0:4e:c3:92:0d:50:4b:1b:c2:25:b5:f3:67:cd:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:7A:83:0C:B8:EB:9A:2D:8F:2C:2C:D5:4D:19:CD:69:35:AE:7C
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:10:7d:16:17:da:3b:21:92:a4:87:f2:92:5f:b4:79:c0:ae:
a5:81:cb:07:06:8c:a6:5b:6c:52:33:0c:74:81:a4:0f:5e:a3:
3b:ca:0a:89:66:a5:dd:e7:22:3b:ae:e0:22:20:86:a1:ca:6f:
b3:be:70:40:ec:7c:36:39:6d:8c:c8:02:f0:c1:b6:3b:0a:e3:
f9:20:cb:50:ca:d0:ea:b1:ad:13:82:98:17:64:2b:ae:f1:cb:
17:45:46:dc:af:ad:82:dd:c5:58:61:bd:0c:2a:3f:f5:31:99:
7b:cb:74:b6:06:cb:8b:09:df:0e:b6:86:74:86:ec:29:36:8d:
bd:e7:9d:0d:43:f5:86:c2:67:e7:71:5d:aa:a4:0d:f7:74:cc:
b3:77:92:b2:38:17:20:8b:0a:2d:4f:f6:0d:6a:10:69:b0:8f:
ff:11:3e:98:ce:e8:d4:36:e7:bb:0f:28:44:ad:5e:c1:54:d2:
88:99:57:a4:40:fa:75:5c:c4:6a:1d:03:26:57:68:59:ab:2a:
99:94:98:c4:7b:28:ca:62:7b:f3:11:8d:fa:b8:a0:cb:1c:e6:
8d:8b:59:a1:47:bb:25:f8:ab:dc:c5:21:f6:5a:73:ab:57:c3:
a0:d5:c3:e7:74:cc:3d:1d:86:f6:ec:c3:89:1a:fc:24:c5:87:
12:d9:35:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw
QTYxRUU4NkQwHhcNMjYxMDI3MDQwMjI3WhcNMjYxMTAzMDQwMjI3WjAYMRYwFAYD
VQQDEw02YWUwMjI1My1kYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj78SsHFeltDnh6OID5xxoHEVQI0mHpuyuFVdpR/t1rgVH/NMm71AEu2W8qIv
uB9LYpKiTpZbG9Msxg901ni0fPiHEK8p/hpvxOxo7JfKl692Wj8/SZsdPERYZ45G
XjrnkFLMN5Zsi1KpZQTEuvGpw4NcanFJZzNmtqXIz2vLLCHQjErogcJ6tahTRST6
ZSSmgEEKx7cdyFvVrjOFwUuTaUbXXhN6+L+89R0qaOJvuKTOsj9fQM1jMcS9/1lm
aU2mItalb9ayuftgtAeVtvyIiCRtv13nsWWztKvah2g0VTLDBeukMB8/LDzVmmDC
ZKIl4E7Dkg1QSxvCJbXzZ83R6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCVeoMM
uOuaLY8sLNVNGc1pNa58MB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG
MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT
Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiRB9FhfaOyGSpIfykl+0ecCupYHLBwaMpltsUjMMdIGkD16jO8oKiWal3eci
O67gIiCGocpvs75wQOx8NjltjMgC8MG2Owrj+SDLUMrQ6rGtE4KYF2QrrvHLF0VG
3K+tgt3FWGG9DCo/9TGZe8t0tgbLiwnfDraGdIbsKTaNveedDUP1hsJn53FdqqQN
93TMs3eSsjgXIIsKLU/2DWoQabCP/xE+mM7o1Dbnuw8oRK1ewVTSiJlXpED6dVzE
ah0DJldoWasqmZSYxHsoymJ78xGN+rigyxzmjYtZoUe7Jfir3MUh9lpzq1fDoNXD
53TMPR2G9uzDiRr8JMWHEtk1DQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 17:11:09 2026 by rpki-client