
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier: UOYyURYL09dK0lN7dDMF3O2l81ljMW7Pch5cJUaTo+8=
Subject key identifier: 9D:EC:8D:A7:0E:8A:82:13:2E:C9:8D:37:58:75:C0:7F:FE:DF:07:54
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0B49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number: 0B39
Signing time: Sat 24 Oct 2026 19:15:30 +0000
Manifest this update: Sat 24 Oct 2026 19:15:29 +0000
Manifest next update: Sat 31 Oct 2026 19:15:29 +0000
Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: XCE/UFWyFVfE/6FZCHoxZTjBc5oeD+20WEF+dH2nxZg=)
2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: QI3TTTsJntpzM6Jwiamem8N1Qiw1xr173Za9wXlnaQk=)
3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: Hl3Xyx26gpFtLsuBQgWv+ANMc2eZUQOg0WhN0n2+tFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Validity
Not Before: Oct 24 19:15:29 2026 GMT
Not After : Oct 31 19:15:29 2026 GMT
Subject: CN=6add03d1-a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:55:92:31:22:73:4b:ea:73:d2:80:3c:b7:
19:c1:b2:f4:d8:96:4b:60:cb:34:72:17:18:bb:cd:
ad:2c:9b:d0:af:1f:ef:81:33:b2:29:81:90:25:ef:
8a:c6:8a:03:cd:88:24:c1:cb:02:79:9f:4c:bb:6b:
c7:e5:0e:01:84:00:76:6a:88:bc:c6:94:88:d6:f4:
70:fc:07:9f:47:5a:4b:7e:43:00:48:9a:64:b4:ff:
02:fe:11:a0:42:02:3c:a0:38:06:a6:d9:77:ff:63:
79:cd:45:9e:02:fa:f0:cf:62:b2:63:ec:55:fa:77:
c1:b8:ce:31:69:ea:27:e7:a4:c7:84:16:7b:20:c8:
53:76:f8:20:ef:89:1f:a0:cf:43:8c:23:bc:e2:35:
6e:47:ca:f4:1c:1e:a1:76:f9:d4:33:0e:ff:f5:09:
5c:db:91:10:58:b1:b2:a6:c4:ac:0e:ab:14:99:f3:
c8:d7:e5:9c:b0:e4:7e:a4:55:cb:34:9a:39:5c:f6:
50:16:1c:97:cf:e5:7d:9c:5b:a0:d5:e4:c9:e4:fa:
61:37:cd:92:28:f5:3e:06:4d:0f:9e:5c:c9:83:60:
52:02:e2:2b:b4:70:fd:73:c6:e4:a6:d1:38:27:45:
58:a8:7f:75:c9:03:5a:66:0e:51:49:7a:29:df:a2:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:8D:A7:0E:8A:82:13:2E:C9:8D:37:58:75:C0:7F:FE:DF:07:54
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:eb:84:e2:0b:64:08:6b:70:0e:f5:b8:2d:9a:04:88:2c:
66:f6:e3:da:46:9a:3a:14:4c:d1:11:d8:22:e6:0f:95:e2:89:
95:51:f2:c7:84:15:91:c8:b9:f3:da:c3:91:05:50:07:07:2f:
b1:fd:99:79:99:32:8a:c6:d2:f9:64:f0:ba:17:28:11:da:46:
a2:5b:b7:b6:db:9a:15:b6:50:bc:38:bd:9e:0a:b3:a5:47:b9:
ab:f7:4b:21:91:f5:0a:66:46:c2:9d:3f:bc:de:2a:55:9b:f5:
fb:5d:3b:9c:6a:c5:32:73:6e:d9:bd:4c:0c:d0:24:cc:5b:69:
80:46:ac:eb:f6:95:63:78:11:70:85:ec:b2:fa:46:f2:1b:84:
3a:14:44:de:ec:1a:8e:06:a3:ba:c5:bc:bf:7c:b9:1b:8b:d4:
8b:bc:54:14:63:6f:f2:64:5d:1c:cb:2c:8b:ea:e3:c1:ef:58:
07:4b:b6:d7:b8:66:52:71:aa:f2:1c:04:4c:1f:9b:97:6c:14:
f3:a2:28:f8:85:59:6f:42:ff:82:28:2e:b4:70:26:8f:5e:1d:
dc:c8:9e:9c:88:e2:cd:3f:21:3f:d4:3f:de:5c:cb:e4:b2:63:
ae:73:1c:75:5a:0b:f9:64:e7:1a:16:11:52:8c:f9:46:8b:5d:
18:a6:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:59:44 2026 by rpki-client