
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: mf4SdO1OF/1HtfrwBeboNsnXJSEF5y7Sv6z0jNpf9cc=
Subject key identifier: 70:C0:18:9B:7E:F0:43:19:5A:2F:33:FE:59:B1:CE:E5:CF:34:93:31
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 0258
Signing time: Sat 31 Oct 2026 02:44:17 +0000
Manifest this update: Sat 31 Oct 2026 02:44:16 +0000
Manifest next update: Sat 07 Nov 2026 02:44:16 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: iqsrqkazUSShimq0RL2laONJ2msuZnhabd19CXpNlXw=)
2: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
4: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 02:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Oct 31 02:44:16 2026 GMT
Not After : Nov 7 02:44:16 2026 GMT
Subject: CN=6ae55600-36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:2c:a7:06:ab:05:11:d1:1d:bc:7b:1a:ac:
c1:e9:e8:c5:39:65:a1:f6:d1:45:9b:c9:9a:50:e9:
f1:ab:02:64:eb:ce:52:db:5c:f5:bb:19:53:76:c4:
6b:f6:a7:6a:c4:63:c2:f3:3c:8d:ea:19:e0:2d:cf:
84:68:f7:d3:2b:f5:74:8c:e6:53:30:d4:a8:29:32:
62:e9:5d:41:3b:b6:81:35:25:ec:6b:26:7d:83:40:
be:14:ef:5e:13:4e:3c:11:3e:0b:46:b2:43:96:e1:
76:2a:f2:fc:06:e4:32:7a:44:5f:ea:4d:9c:ea:6f:
93:cd:d7:0e:89:77:01:3b:6b:8a:23:40:f6:ad:f2:
0a:2e:43:67:13:33:70:f1:8b:69:63:91:63:64:20:
c6:93:81:77:b0:a5:a7:8e:09:65:ce:cd:a1:d7:b0:
0e:7a:82:8a:9e:b8:f3:98:d9:86:fe:53:0b:57:36:
10:cf:2c:17:77:f3:0c:a0:fa:d0:ea:24:b1:2c:ee:
27:14:9b:3c:a5:fd:3e:dd:03:04:37:6b:10:c7:03:
f6:de:0f:84:e0:93:44:70:f7:26:3c:0e:ab:aa:54:
6f:55:e9:aa:f9:c3:a7:cc:92:75:8b:61:66:4e:fc:
b0:75:41:9f:b1:9a:7d:55:61:24:79:cb:69:f4:2c:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:18:9B:7E:F0:43:19:5A:2F:33:FE:59:B1:CE:E5:CF:34:93:31
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:02:2f:87:78:1e:87:fa:f2:b4:52:79:73:cd:19:0a:81:60:
a4:c6:85:02:5a:17:8f:72:71:a4:a8:39:a8:e8:54:7c:da:3d:
ed:7e:91:9e:2c:8d:8e:c7:ea:46:19:f7:c0:50:1c:50:f2:46:
b2:14:10:76:ea:a8:e1:a5:cb:81:92:fe:b8:72:4e:f0:fe:e3:
b9:c2:12:57:12:a7:76:77:7f:5b:b7:13:2e:9e:ab:6c:b7:e1:
1d:13:44:99:07:dd:5e:f8:3d:88:3c:f4:67:0e:5e:5b:60:d6:
61:0a:d7:a8:b9:5d:02:a4:99:df:8d:51:ff:85:b5:0d:36:35:
0e:ac:e5:61:ff:31:4a:32:dd:7a:e2:a4:47:84:09:49:0d:a9:
cb:4a:6f:82:6f:7d:94:c0:3f:b2:19:2f:f3:6c:dd:95:a2:96:
d0:ee:be:0f:f7:2b:ab:08:d5:42:01:e8:33:26:ea:71:61:d0:
3a:b5:4e:42:d6:47:6f:4d:97:eb:08:ce:0c:78:69:38:ce:0e:
95:06:91:44:e5:6d:b3:99:8c:5c:78:b7:b7:e5:96:c1:6a:e6:
7b:10:35:ad:c8:31:1b:1d:0a:f1:e4:a0:4e:fd:69:b8:3f:68:
3e:ed:de:db:37:a2:28:34:30:8d:d7:51:b2:8b:f7:20:3e:81:
c1:25:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:34:06 2026 by rpki-client