
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier: 6bEjFaA1ltplT6C2ShQq1Eb7i12NZg+BAmw74SRilno=
Subject key identifier: 8C:AF:13:6F:83:F4:6C:7F:57:CC:C3:39:81:0B:AD:2C:D3:B6:FB:4E
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial: 13D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number: 13C0
Signing time: Tue 06 Oct 2026 16:59:25 +0000
Manifest this update: Tue 06 Oct 2026 16:59:25 +0000
Manifest next update: Tue 13 Oct 2026 16:59:25 +0000
Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: Rnpm60yI+Gs50zLH61+IAAlF0bQ9uZ6byI5ICMQ0lho=)
2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: JG3g9iT9w5QR/B1gPw603a4JI5sRtUQE35PEFNou9hM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Validity
Not Before: Oct 6 16:59:25 2026 GMT
Not After : Oct 13 16:59:25 2026 GMT
Subject: CN=6ac528ed-3118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:b6:30:b2:9c:64:98:ec:c9:8f:f8:3e:d9:
4a:c6:18:65:d2:ea:9e:44:70:05:ab:1d:17:7e:14:
3f:c1:c2:b0:ed:ec:4f:23:13:d2:eb:7b:97:dc:3a:
bc:d7:cb:d8:c5:b9:8e:55:32:8a:cd:f1:11:b7:4f:
9c:7e:04:35:17:27:6d:41:13:cb:54:89:74:db:9f:
bf:71:bb:13:cc:8f:5f:a2:14:5b:5f:24:de:ef:ec:
e8:90:6b:15:2a:c3:60:cb:bc:77:a4:2c:fc:a1:60:
de:38:31:b3:b7:a9:e9:44:73:70:5f:e6:f4:d6:a9:
9d:99:78:49:56:a4:4e:ea:ba:19:46:12:e9:ab:85:
a8:46:c2:02:f3:36:d7:0a:5b:ba:57:3e:64:81:af:
7a:ca:f0:b7:7a:b2:25:d4:85:71:99:00:ee:22:c9:
f9:06:0b:53:62:d7:bc:96:8f:e3:50:44:9e:f4:84:
0e:a4:10:50:79:0f:da:b0:7c:20:16:90:cd:4b:d6:
62:af:ce:48:8b:33:1b:28:ac:bb:aa:0e:c5:3e:5f:
b6:20:52:6e:e2:bb:a9:eb:1f:2f:45:d0:8a:e3:72:
28:1f:f0:84:27:18:69:15:2e:ac:cd:7f:5e:34:28:
46:6a:08:8b:17:98:67:fb:80:a0:b4:f8:c4:34:b8:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:13:6F:83:F4:6C:7F:57:CC:C3:39:81:0B:AD:2C:D3:B6:FB:4E
X509v3 Authority Key Identifier:
keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ee:5b:86:d1:89:4c:e9:39:bd:d5:7e:5d:b3:ec:dd:08:c9:
dd:d6:93:2f:0e:62:5e:c0:6c:a9:a9:7c:6b:ee:6d:3c:1f:55:
c1:b1:be:b3:16:07:b8:da:4c:37:71:03:14:5c:3b:a5:f7:95:
04:0e:5f:5b:a4:32:78:ad:1d:32:93:dc:79:d2:48:2e:11:1d:
73:c1:93:68:90:ab:b4:c6:af:ce:54:66:40:da:b4:31:8a:7e:
fb:a0:86:4f:87:3b:39:f6:b1:34:f3:43:fc:ee:d3:06:81:62:
3a:8f:af:1d:00:aa:72:9a:4e:af:b3:ae:62:75:33:78:5e:b7:
7c:eb:b1:88:49:d2:b8:78:e1:59:bf:7b:bf:1e:4f:60:fc:0a:
5a:2c:42:d9:c2:de:81:2a:9e:b8:7b:01:29:88:57:ea:27:c8:
e2:34:a7:47:08:ac:5d:26:7d:9d:7f:8f:1e:16:d0:6b:c2:a7:
93:27:64:2c:20:27:04:74:ff:70:ba:1e:e4:ac:84:8c:be:cc:
5a:7e:8a:74:05:a5:c2:40:43:9a:96:84:fb:5b:ce:a5:5a:8e:
57:f4:b2:b9:7e:d9:f8:0a:82:e2:76:33:26:9e:75:cf:e5:10:
cf:8f:88:15:f6:48:81:e3:7f:da:d0:ff:a4:61:ac:6c:01:6f:
03:74:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:29:19 2026 by rpki-client