
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier: zEgkoNvq7JWOC5uWa1lVrw7VmeGQJJleWdMty15Z2IU=
Subject key identifier: 5F:EE:7E:37:33:B4:06:1B:53:6E:5E:BB:DB:B3:76:23:01:1A:2D:07
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number: FC
Signing time: Sat 03 Oct 2026 07:54:52 +0000
Manifest this update: Sat 03 Oct 2026 07:54:52 +0000
Manifest next update: Sat 10 Oct 2026 07:54:52 +0000
Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: NflHHO0d0kjyvytRyMKkX2pC7C3j5Bp3tieuvbLIk2w=)
2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: vuLTolWemdL5ORncoMtpAT6VkMI3KntLr0DnhKdEBCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Validity
Not Before: Oct 3 07:54:52 2026 GMT
Not After : Oct 10 07:54:52 2026 GMT
Subject: CN=6ac0b4cc-8b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:22:d5:6e:97:64:ee:d5:63:82:06:55:6f:
36:6d:b5:c9:ef:50:bb:78:87:e3:d9:8b:df:8b:9d:
1e:27:ef:b1:fa:ad:d0:4a:38:fa:65:bd:d7:6b:69:
21:12:40:a3:21:2c:13:b1:69:c1:9a:55:84:9a:2b:
0e:24:17:7d:16:01:4a:47:e3:2f:b7:55:c5:ec:59:
dd:d3:ab:25:7c:af:2c:07:6b:73:a6:cf:ef:3a:e7:
57:93:66:9c:11:ae:47:ae:fb:2a:af:30:e9:ad:8e:
b2:2d:57:b1:e5:21:7a:d2:ef:61:22:a1:76:ce:b1:
39:b6:19:fd:6e:01:77:8d:80:17:1f:ae:13:af:76:
49:d5:12:b2:22:5a:90:c1:87:8a:ee:e8:82:ec:e9:
06:99:8f:fd:cd:04:32:07:51:01:13:66:52:7d:23:
c1:ad:a6:c1:a5:ad:fc:97:e4:a5:1f:a3:5f:54:b5:
b3:4d:10:02:81:0d:ca:c2:ec:56:29:b1:2b:91:fe:
d1:52:eb:db:20:1b:db:a6:11:67:3c:18:25:d2:88:
01:d5:bb:c3:51:f0:92:d7:88:45:09:3e:9a:63:92:
04:5e:41:bb:7d:ab:94:5f:ad:f9:fd:97:d3:f6:fe:
b0:32:c3:91:74:a9:e3:eb:50:b1:b7:81:d4:f6:f0:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:7E:37:33:B4:06:1B:53:6E:5E:BB:DB:B3:76:23:01:1A:2D:07
X509v3 Authority Key Identifier:
keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:3d:04:32:a7:bd:05:9f:79:9f:5a:2b:28:cb:b7:09:e2:fd:
72:09:94:a0:8f:0a:f9:9f:33:59:27:43:78:7e:41:78:b4:ac:
10:e6:d0:1c:35:f7:99:49:dd:ff:b1:fd:45:70:92:be:5e:29:
1d:ce:8d:fd:2b:83:47:1f:2a:f4:fb:0c:c2:ca:5e:e6:13:27:
37:45:21:95:ab:b1:94:29:10:4b:ea:da:51:a9:ba:f2:06:63:
7f:e3:d4:6c:97:4e:eb:ef:e2:0a:6e:23:45:3b:64:18:22:0b:
f0:a9:65:2f:28:ae:54:63:d2:23:11:62:20:f4:37:b9:37:6c:
75:c0:75:01:b1:15:6e:22:f9:a2:de:28:33:eb:8e:3e:2c:f4:
39:6c:80:9b:01:e6:73:f6:29:a0:e2:13:6e:e9:05:ac:5c:bb:
c0:be:5d:a1:04:d1:a1:32:8f:e0:cc:02:fa:37:70:61:0a:8f:
b6:9a:38:46:8a:16:47:6d:90:2d:f0:6f:65:48:fb:fd:24:45:
b5:6c:26:7a:fb:8e:c3:d1:fb:0d:a1:00:73:7c:28:6a:7e:54:
57:b0:31:2f:6b:f7:ad:a6:05:dd:59:ee:b2:16:8a:21:4c:c4:
6c:dc:7d:bb:70:3d:72:4a:34:78:2e:81:6e:b1:2b:f8:25:f0:
23:99:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:28 2026 by rpki-client