
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: nLo1ORQZwRsc15dyn5NcklOU2O+Jm6CJoarZynVUzRg=
Subject key identifier: 17:64:21:D4:D8:19:AF:31:43:2D:3B:56:0A:9D:BE:35:AD:C1:67:9E
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 026E
Signing time: Wed 07 Oct 2026 02:32:21 +0000
Manifest this update: Wed 07 Oct 2026 02:32:21 +0000
Manifest next update: Wed 14 Oct 2026 02:32:21 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: w55JiFkFS83Ihpn3Rt/PeuH1Mu+xl2sGyJ++syCZVqA=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: ntXVrABTYDs7hsbPUUZm6yiRHJzXaf9fF6++buw87GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Oct 7 02:32:21 2026 GMT
Not After : Oct 14 02:32:21 2026 GMT
Subject: CN=6ac5af35-685a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:9b:3b:b1:26:3a:2e:66:3e:30:b7:3a:67:
e3:11:30:ac:19:46:05:c3:89:d7:28:63:31:b2:05:
dd:16:d8:0e:39:8d:b9:75:ad:da:00:b6:37:0c:1c:
c5:a6:48:5a:a4:2e:00:58:b6:53:2c:3f:6e:36:0c:
f2:90:5d:d0:4c:89:31:c6:61:42:1c:c5:7a:d1:8a:
e6:41:cb:ff:16:c9:cc:1f:aa:b5:71:19:73:a7:bf:
62:04:cf:fd:3d:3d:b5:48:4f:5c:d2:f7:3c:ee:9e:
22:ba:36:95:91:63:ab:13:7c:9f:b0:f3:92:e1:06:
12:9e:c6:9f:da:e1:fb:46:d2:da:71:ad:38:c5:1e:
a2:20:c6:6a:74:39:eb:26:e0:61:40:3b:77:cb:3e:
a2:d5:5a:bf:8f:f0:6c:6b:16:0f:21:48:95:58:23:
49:0c:50:d2:38:2a:24:d4:8e:7b:32:8c:4b:c0:34:
48:2e:be:07:48:08:83:76:ca:7d:76:14:d7:a5:9e:
f9:41:bd:0e:8a:14:a5:37:b1:0e:4c:c2:ab:49:98:
d6:32:73:4f:c4:08:77:b5:d0:29:ef:a6:6e:77:e9:
7b:c3:17:80:d6:03:4b:ab:dd:92:0c:79:6d:eb:12:
5a:7b:7c:be:86:87:e1:bc:e9:49:f8:48:df:26:6d:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:21:D4:D8:19:AF:31:43:2D:3B:56:0A:9D:BE:35:AD:C1:67:9E
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:3b:eb:16:51:67:c4:62:f3:d6:6f:b0:e7:ac:28:17:42:85:
e0:2c:8a:49:86:f4:21:b0:16:b2:40:14:10:7f:11:85:38:de:
b8:08:ab:d8:30:67:a7:a3:f6:35:33:de:34:09:5a:fa:48:d6:
1d:fe:b2:f5:0f:41:a2:79:4f:a4:09:86:10:12:2f:64:5f:70:
78:1a:44:e0:70:2b:04:07:dd:71:33:a3:71:a5:ce:44:03:48:
ba:b3:ac:9b:95:3e:e8:ee:5e:3a:23:bf:aa:5e:33:d3:0c:d8:
bf:a5:1c:bb:a1:1f:a6:47:2d:13:f7:48:ec:3a:23:b2:a5:b4:
45:f6:b9:65:c9:0c:d1:fd:6f:9e:a1:62:2f:88:10:ee:ad:25:
c3:72:c5:49:28:40:4f:c7:95:c2:19:29:c8:26:a6:a1:5c:90:
48:e3:99:b3:e7:ec:0c:0a:47:b5:76:1c:d8:65:28:d8:cf:a0:
3d:44:bf:c8:fb:e5:97:b6:f1:2c:ec:31:1c:ad:c8:3d:19:eb:
cc:12:11:93:85:cf:98:4c:c8:17:bf:07:3d:aa:e7:d9:95:ce:
ac:f7:67:36:c3:f2:1d:d6:a5:f4:20:18:ee:9d:f0:7e:f3:ba:
13:37:71:e3:68:ba:22:16:b3:9b:78:c7:b1:9e:69:43:67:a7:
dc:f3:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:26 2026 by rpki-client