
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
File: JgCH2u-Rng2r-KLILwGF1RyYfFE.mft (raw, json)
Hash identifier: r+/nBzJJW0iOvQ8TxgaYYrulq3uyXAujdTjj+rVlOHE=
Subject key identifier: 3B:5E:60:93:76:0F:E2:E5:25:B8:43:06:7B:1F:C6:D0:F2:C3:06:63
Authority key identifier: 26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
Certificate issuer: /CN=A91B8782/serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
Manifest number: 1F
Signing time: Wed 07 Oct 2026 09:31:48 +0000
Manifest this update: Wed 07 Oct 2026 09:31:47 +0000
Manifest next update: Wed 14 Oct 2026 09:31:47 +0000
Files and hashes: 1: JgCH2u-Rng2r-KLILwGF1RyYfFE.crl (hash: 7mSPBLug/AwJzYF6M7+UEOZkq4I1PK7LPVcF4ri0jmw=)
2: F88E2564955211F19EAEED7D6411F970.roa (hash: pKiZMTH93sR7vU9mFLBYmtO9yBYDCzaSyoBxrPbbRDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8782, serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Validity
Not Before: Oct 7 09:31:47 2026 GMT
Not After : Oct 14 09:31:47 2026 GMT
Subject: CN=6ac61184-7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bc:63:ec:79:af:19:38:71:01:74:e7:82:96:
01:cb:c5:48:69:ed:73:95:d0:63:fa:9b:c9:ae:d9:
2f:e7:f5:7b:e7:f2:19:7d:b7:a6:5a:71:36:57:63:
03:78:1d:35:ff:29:0b:e1:f8:dc:1a:b3:e6:06:88:
c2:42:05:3b:89:8c:95:9c:ac:54:80:01:fd:64:97:
67:93:d3:dc:a8:47:d1:f7:06:f8:39:11:75:95:bc:
81:f8:d6:42:ea:62:10:67:c7:e3:aa:ec:9b:d0:7c:
06:1b:8a:e6:61:45:e3:41:1f:e7:71:fe:39:e0:41:
ef:ac:62:e3:8f:9d:aa:02:d4:96:75:52:be:48:fe:
86:35:fb:02:56:83:5e:f5:4b:18:8f:d6:be:e0:c9:
31:74:c9:c5:89:42:1a:c7:ef:36:62:80:90:c2:15:
4e:03:00:ab:e6:94:10:b7:ad:96:8c:92:77:d3:6b:
6b:f4:71:01:73:f2:72:0e:1b:8c:6f:2f:07:32:20:
ed:b7:1f:eb:52:28:1b:9e:d2:e7:0e:51:56:0b:d8:
28:9d:bc:34:2b:c1:0a:71:df:65:05:27:1a:57:76:
42:4f:01:ba:36:9e:02:dc:ca:04:6a:81:9d:16:35:
98:54:dc:70:71:56:1d:96:0a:67:e5:36:10:7f:6e:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:60:93:76:0F:E2:E5:25:B8:43:06:7B:1F:C6:D0:F2:C3:06:63
X509v3 Authority Key Identifier:
keyid:26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a7:37:69:b6:35:a4:06:6e:d3:4e:52:f5:58:da:2c:9f:d8:
4f:48:00:40:06:a6:23:4f:0e:b5:fd:af:8f:1f:05:6f:e2:ac:
ef:58:51:26:93:a2:f8:51:2f:64:c0:ec:3d:71:27:b4:7f:bf:
c5:1e:f0:0e:d5:d1:1d:b5:cd:83:5d:47:96:5c:40:e6:2b:d6:
a3:99:0b:8d:dc:9d:a9:7d:73:13:6b:29:a3:ff:95:23:67:f4:
a4:cb:20:75:00:ce:52:04:ce:b3:95:2b:f3:10:ac:df:28:db:
30:bc:3a:0f:a7:1f:b7:03:b7:42:03:6b:0d:4c:4c:6d:4f:d3:
70:7d:f0:2c:8b:1b:8e:6a:06:d6:f4:b4:56:d8:cc:f7:3b:28:
c6:4e:a1:55:41:a5:8b:2a:eb:cd:74:1b:62:35:35:d0:cd:34:
c1:b8:11:ce:4f:7c:00:bf:bb:cd:2d:94:cf:71:bb:d0:74:9b:
e2:04:43:42:77:bb:4c:5a:d8:5f:be:46:f3:12:ef:d9:8d:65:
1c:91:1d:0d:15:65:33:66:9e:c4:8f:b3:98:ea:90:2f:13:4c:
8b:c6:cc:b1:e3:5b:54:13:a5:c4:9f:62:e0:6f:d2:5c:3f:62:
50:b9:03:14:40:9d:42:6b:ef:7b:1b:12:d7:a7:cb:af:e3:47:
18:d4:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:14 2026 by rpki-client