
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
File: juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json)
Hash identifier: N3FyDk3tAsn8q6KsJ0tPaZxIvoUTvF4K+KzYIQyO8ug=
Subject key identifier: 99:97:1A:F2:83:3E:7A:9C:FF:A2:E8:6B:B6:47:3B:A0:C2:FB:26:A7
Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
Certificate issuer: /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
Manifest number: 9D
Signing time: Wed 28 Oct 2026 19:45:40 +0000
Manifest this update: Wed 28 Oct 2026 19:45:39 +0000
Manifest next update: Wed 04 Nov 2026 19:45:39 +0000
Files and hashes: 1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: 8UrLfhUlFBzztEx9UV8oH/HzGCCdxHL54221M5XQuvw=)
2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl
rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 19:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Validity
Not Before: Oct 28 19:45:39 2026 GMT
Not After : Nov 4 19:45:39 2026 GMT
Subject: CN=6ae250e4-9a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:76:0b:40:28:25:86:26:ad:d9:e9:06:c8:
fb:5c:2f:4d:51:a8:65:13:50:8c:3b:6d:2e:90:94:
20:75:28:e9:d0:51:15:95:6f:f0:1f:09:b3:35:ac:
fb:7a:5d:43:2a:bf:d6:8c:36:9c:32:03:da:7b:ef:
b6:52:51:38:65:27:24:93:4b:ff:1a:4b:45:10:11:
44:bd:74:70:59:1d:71:f7:9b:5b:e2:93:31:a1:44:
16:74:10:c2:a2:eb:4b:fb:0d:68:ac:cb:1d:51:22:
30:a1:59:e7:af:82:16:e4:19:eb:81:83:3f:0c:fe:
9b:31:20:a6:2f:23:a2:e0:de:50:c3:1f:0d:02:9a:
df:d5:c6:65:4b:aa:8c:5f:59:24:4d:27:8a:cc:0a:
96:9f:88:56:ab:b9:d4:5b:b8:f3:e4:45:fb:ac:06:
6a:fc:ed:62:59:11:ef:2b:2e:80:18:88:04:a1:78:
28:e2:54:c1:29:67:ad:45:c1:e8:0e:24:f0:58:ac:
56:e1:06:a1:a3:07:8c:c8:1e:0e:20:8a:99:d7:73:
3d:94:76:6a:fc:7c:8a:19:53:52:20:06:e1:1e:1e:
f1:d8:7a:a7:de:4f:80:df:12:ac:ce:97:3f:ac:dc:
ab:29:e8:a5:ce:6d:d9:31:5e:1d:2c:85:4c:b2:49:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:1A:F2:83:3E:7A:9C:FF:A2:E8:6B:B6:47:3B:A0:C2:FB:26:A7
X509v3 Authority Key Identifier:
keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bc:d4:97:2d:50:b1:90:53:01:ad:a1:74:44:c8:53:7f:93:
9b:c7:2f:81:cb:60:6e:84:92:16:0f:69:04:6d:ff:f9:44:a9:
54:86:6d:ae:90:b3:f4:a7:d4:0a:50:77:11:d7:80:df:3f:eb:
3c:c0:3a:66:be:74:53:12:f7:db:3c:06:cf:a8:77:12:ff:de:
9d:0e:b1:21:39:ea:57:57:08:f6:6f:7e:81:45:49:d9:af:0e:
41:f8:79:fe:ff:25:9a:57:34:4f:02:b2:b2:7e:d1:0e:de:b5:
85:70:8a:25:bb:98:8a:3e:45:54:96:cd:da:b6:a5:c7:19:2a:
15:9c:6b:f0:42:d0:f6:c5:e5:46:82:b3:e6:ef:87:56:ed:43:
b1:03:0f:a8:f6:1b:87:df:36:95:97:7e:5c:77:ea:62:60:c6:
9d:b7:36:a6:be:63:94:13:6a:55:bc:e8:74:af:c6:1e:0f:24:
da:48:25:04:6c:da:31:51:21:c0:4e:20:27:91:6f:2d:e1:5c:
da:21:a9:9e:fc:01:b8:aa:4d:1a:df:38:f6:29:5f:5d:d0:ec:
c3:c5:38:c4:93:f5:43:ca:14:75:58:65:e5:11:28:9b:77:b2:
ec:d9:62:00:92:3f:18:6f:a1:c7:2d:90:14:aa:da:39:60:5d:
01:83:9e:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFERTAxMTAvBgNVBAUTKDhFRUNCMTE5ODBFRDExNTM0RjQxOTJGNERFMDhEMUIy
Q0RCOTE2QzgwHhcNMjYxMDI4MTk0NTM5WhcNMjYxMTA0MTk0NTM5WjAYMRYwFAYD
VQQDEw02YWUyNTBlNC05YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjut2C0AoJYYmrdnpBsj7XC9NUahlE1CMO20ukJQgdSjp0FEVlW/wHwmzNaz7
el1DKr/WjDacMgPae++2UlE4ZSckk0v/GktFEBFEvXRwWR1x95tb4pMxoUQWdBDC
outL+w1orMsdUSIwoVnnr4IW5BnrgYM/DP6bMSCmLyOi4N5Qwx8NAprf1cZlS6qM
X1kkTSeKzAqWn4hWq7nUW7jz5EX7rAZq/O1iWRHvKy6AGIgEoXgo4lTBKWetRcHo
DiTwWKxW4QahoweMyB4OIIqZ13M9lHZq/HyKGVNSIAbhHh7x2Hqn3k+A3xKszpc/
rNyrKeilzm3ZMV4dLIVMsklFLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmXGvKD
Pnqc/6Loa7ZHO6DC+yanMB8GA1UdIwQYMBaAFI7ssRmA7RFTT0GS9N4I0bLNuRbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC9FQkE5OERGNEVD
MjIxMUYwQTUwMDVEQTAzRDZGNTZCQy9qdXl4R1lEdEVWTlBRWkwwM2dqUnNzMjVG
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2p1eXhHWUR0RVZOUFFaTDAzZ2pSc3MyNUZzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MURFMC9FQkE5OERGNEVDMjIxMUYwQTUwMDVEQTAzRDZGNTZCQy9qdXl4R1lEdEVW
TlBRWkwwM2dqUnNzMjVGc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACrzUly1QsZBTAa2hdETIU3+Tm8cvgctgboSSFg9pBG3/+USpVIZtrpCz9KfU
ClB3EdeA3z/rPMA6Zr50UxL32zwGz6h3Ev/enQ6xITnqV1cI9m9+gUVJ2a8OQfh5
/v8lmlc0TwKysn7RDt61hXCKJbuYij5FVJbN2ralxxkqFZxr8ELQ9sXlRoKz5u+H
Vu1DsQMPqPYbh982lZd+XHfqYmDGnbc2pr5jlBNqVbzodK/GHg8k2kglBGzaMVEh
wE4gJ5FvLeFc2iGpnvwBuKpNGt849ilfXdDsw8U4xJP1Q8oUdVhl5REom3ey7Nli
AJI/GG+hxy2QFKraOWBdAYOetg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:40 2026 by rpki-client