
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: Q+76umXYuxCSU6zc6pVNryLX35KuOBK7/G6tmwZS2lQ=
Subject key identifier: 92:93:7C:2A:A7:B2:06:F8:A1:5B:12:79:91:4E:52:0B:01:CC:5C:78
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 023F
Signing time: Fri 11 Sep 2026 02:39:33 +0000
Manifest this update: Fri 11 Sep 2026 02:39:32 +0000
Manifest next update: Fri 18 Sep 2026 02:39:32 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: o8jcSE/aSRMkGLveonMP5G2e5SuwgM91hvPwtCIcu2Q=)
2: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
3: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
4: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Sep 11 02:39:32 2026 GMT
Not After : Sep 18 02:39:32 2026 GMT
Subject: CN=6aa369e5-1756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:a1:1e:32:4c:b5:21:8b:61:a6:9e:a5:c5:
e3:df:b6:0d:aa:2f:c6:a5:c9:2e:9c:be:d3:88:32:
7b:ff:17:9a:6f:37:a8:34:1b:5b:51:28:65:34:53:
51:26:18:fb:b6:6d:52:13:18:28:2d:6e:33:68:3f:
13:02:b4:32:00:d2:19:87:ce:68:d6:fc:22:31:a9:
54:8a:88:55:8c:37:c3:fc:0f:57:fc:93:65:b9:b6:
97:99:a8:1b:d6:7e:d2:de:9d:29:d6:bb:ee:eb:f9:
87:67:f0:b4:de:1e:32:22:f7:25:4a:a0:d9:97:c8:
60:1f:83:bd:6b:67:6b:53:ce:aa:9f:88:b4:86:b4:
bc:01:95:70:e2:b1:fc:c5:02:58:72:97:ea:41:1a:
b0:dd:78:82:00:0b:af:44:44:fd:ff:73:1a:e9:b4:
19:b7:35:63:f4:95:eb:92:72:93:76:4a:9c:16:1f:
09:71:c8:8f:4f:cf:f2:24:59:c3:31:12:b3:e3:23:
52:92:a8:17:0c:81:57:9a:4e:25:ab:99:07:fa:79:
62:a1:58:17:79:20:e4:fd:cf:2d:07:2d:9d:4f:02:
06:40:5b:a8:86:76:fd:99:3a:42:70:bf:cb:51:95:
7c:a8:f9:0b:90:41:15:56:02:7a:e0:11:3f:62:3e:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:7C:2A:A7:B2:06:F8:A1:5B:12:79:91:4E:52:0B:01:CC:5C:78
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:fe:b3:d2:6f:b4:ab:22:4b:e4:53:a7:e0:39:77:ef:6d:
54:7a:84:0f:b2:82:d6:66:30:79:16:ed:85:80:35:ee:cc:e2:
fc:64:48:2e:d4:ee:42:bc:75:8c:e8:53:10:34:f7:db:cc:c7:
1e:4b:ac:37:be:57:c8:7b:e7:94:79:0d:d8:82:91:ab:26:42:
c1:14:9b:43:31:9d:d4:8c:3f:8d:7d:79:7b:e7:c6:7f:9d:cd:
e9:c1:71:2b:27:f6:d2:e8:f7:7f:8d:d7:2c:2c:d4:47:58:48:
ad:27:08:36:22:b8:3c:10:72:9c:a2:1f:e0:6c:6b:8e:99:48:
81:85:c8:fd:83:d1:32:dd:3b:3f:57:fb:29:04:c4:05:29:c7:
e4:b8:ac:86:32:99:1d:46:e6:90:78:32:22:b8:17:cc:90:ba:
85:73:21:3b:fe:2a:5f:5c:ff:ba:e3:7b:2b:39:d2:bf:6a:ba:
0a:a9:e1:6d:1e:c9:eb:d1:ec:e1:1b:ef:92:be:26:da:6c:6b:
3f:5c:94:ba:a6:e2:67:05:dc:1a:b0:b7:95:ad:9e:e7:a7:27:
d8:38:d5:ca:d3:6f:c5:89:78:d9:a0:74:00:91:73:5e:c6:a2:
6a:72:b6:0d:99:5f:ee:6b:4b:e3:1f:8b:ed:22:67:d0:f7:98:
9f:da:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:33 2026 by rpki-client