
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: FeyfS4d4dwhdFqkWYQAaSC/OWT40OoFsLx7N8r/NQvs=
Subject key identifier: 38:9F:44:60:88:33:B1:C0:CB:C2:76:71:34:FC:C9:1C:98:96:B2:DA
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 026D
Signing time: Mon 05 Oct 2026 02:25:06 +0000
Manifest this update: Mon 05 Oct 2026 02:25:05 +0000
Manifest next update: Mon 12 Oct 2026 02:25:05 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: mQdN8Zf7/Co6hwkQhKnlsftJz+wFEuoL5s6DJ+5+urw=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: ntXVrABTYDs7hsbPUUZm6yiRHJzXaf9fF6++buw87GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Oct 5 02:25:05 2026 GMT
Not After : Oct 12 02:25:05 2026 GMT
Subject: CN=6ac30a82-0ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:bf:51:96:8e:05:e4:b8:d8:a3:79:11:77:
24:ab:c0:59:f6:60:08:54:59:29:21:82:c1:9b:1a:
b8:f4:fd:86:77:65:73:a4:04:70:5a:77:44:82:46:
e4:5a:f0:3c:78:8e:93:b3:03:54:9e:b2:41:c3:6f:
0f:01:c9:65:11:19:93:33:85:de:cc:4e:91:8f:d7:
5e:d3:59:5b:2c:dc:5d:d2:00:2c:f0:49:68:b3:b1:
ff:8c:12:3b:f9:18:94:a5:a1:8d:89:77:ca:be:34:
c1:c5:08:49:09:7f:ef:d7:8d:de:4e:7c:cf:96:6d:
21:bd:23:9e:c6:cc:9a:d1:9a:f1:f6:82:77:eb:56:
e8:fd:ba:a1:c7:86:e1:3b:00:33:10:36:cd:6a:7e:
66:a7:c2:1d:b4:d8:bc:7e:9a:41:0c:33:c4:4a:3f:
da:e1:73:ac:1f:3a:72:2d:9a:9e:b1:cc:26:f4:33:
fb:27:72:69:f9:9b:ff:e7:52:52:56:c5:a6:3a:65:
75:57:eb:12:bc:eb:75:3b:57:6e:83:a0:f6:a9:1f:
0d:86:98:9d:27:d9:5d:4a:ac:09:a1:5a:ef:26:af:
0d:85:2a:cc:a3:b4:4f:16:fb:3a:6d:cb:ee:7b:d2:
7d:e6:ed:1f:c3:fc:4f:57:69:37:07:f6:1f:c3:41:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:44:60:88:33:B1:C0:CB:C2:76:71:34:FC:C9:1C:98:96:B2:DA
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7e:54:a7:5d:0c:13:ec:5e:8c:99:78:c9:9e:17:06:f1:94:
b1:b4:82:7a:7b:ac:37:b6:02:25:6b:16:e5:f6:35:e5:71:77:
05:07:c2:5f:4a:a4:e7:4f:0b:cd:71:24:53:15:bc:d7:6f:a3:
4f:35:6c:74:63:a0:37:f8:a9:dd:81:28:2c:d3:99:98:71:9b:
75:cf:7d:73:26:be:5c:c5:52:9c:4f:eb:bb:e1:78:31:2d:b2:
6a:43:e4:04:b3:22:a6:79:0d:bb:60:fc:64:5a:e5:38:2b:6c:
76:99:0d:fd:f1:0b:d0:9c:c5:8e:95:ad:24:e0:66:0b:57:ad:
49:5d:cb:ed:63:d3:4e:19:a8:e0:a6:97:65:f1:ad:4a:93:98:
be:5a:e1:bf:82:71:6a:5d:a4:86:ca:71:37:89:f7:11:75:5d:
79:ef:12:b6:2d:3c:d5:8b:ec:43:1c:25:3a:e3:9e:db:66:45:
81:86:08:13:8f:85:10:96:12:f4:55:c4:97:16:3f:87:35:cf:
9d:6e:25:b1:87:cb:fe:49:00:07:5f:1e:6a:7d:51:61:b8:37:
79:99:4f:68:ba:92:8e:aa:ad:3d:8c:94:1e:fd:02:6b:c2:ba:
ff:6f:ca:28:e0:1e:40:e3:ab:65:aa:3b:52:29:76:be:2f:35:
9c:25:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:22:49 2026 by rpki-client