
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier: 0HYXuzXtJagjjzwrbzxIx8klPzU6RxJhZWH0aDTw4PE=
Subject key identifier: 08:76:E6:0B:77:C0:62:47:95:96:3E:D3:F4:CE:A4:A3:7D:DC:B8:D5
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number: 01EF
Signing time: Tue 13 Oct 2026 04:03:36 +0000
Manifest this update: Tue 13 Oct 2026 04:03:35 +0000
Manifest next update: Tue 20 Oct 2026 04:03:35 +0000
Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: QYlyjuQ4kX+D5xgqVEDVhYB9fpy6KUjCIgrUHHxFo4c=)
2: 683E73BA664A11F183E2ACC07047A888.roa (hash: zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=)
3: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Validity
Not Before: Oct 13 04:03:35 2026 GMT
Not After : Oct 20 04:03:35 2026 GMT
Subject: CN=6acdad98-3aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:b7:52:c9:68:44:70:e1:a0:93:bd:3f:a5:
fd:b2:73:6c:02:b6:03:e0:42:78:02:c7:46:77:1b:
b8:67:2a:d3:c0:bd:9d:2a:a8:76:d5:b5:0a:a7:c2:
47:9c:8f:f6:d8:d5:8f:49:11:a5:4b:9c:0a:e4:a4:
d7:a9:11:d6:0d:68:aa:70:67:9f:a6:cf:d7:c8:1f:
51:69:d9:8e:30:d5:3a:87:ca:2e:c1:9d:6f:54:7c:
23:40:fd:a0:00:fb:24:1d:4f:a3:73:59:f8:72:7b:
cf:59:d4:3e:50:8c:08:f2:7e:ce:d2:3d:08:0a:02:
88:26:35:6c:b9:d2:7e:84:c5:22:bb:d2:ca:77:19:
ce:d2:2d:52:b2:c4:b5:85:76:23:82:41:6b:49:ff:
0a:16:8e:60:f1:d6:87:55:90:bf:db:40:18:7b:65:
23:8f:2f:dd:4c:d4:3d:c8:8a:42:0a:17:b2:d5:6d:
e1:3e:fc:3f:0f:ec:73:b6:9f:e3:c2:60:eb:ab:95:
fa:26:48:7e:51:d7:c9:6c:99:e9:79:91:a0:e1:ff:
64:74:af:ab:69:e2:33:28:d3:c7:c5:cb:76:90:f4:
c4:74:7d:69:37:e0:90:6f:7b:52:91:97:a1:91:ab:
6f:12:ca:f4:6a:fa:52:e6:bc:9a:36:0c:6f:a6:45:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:E6:0B:77:C0:62:47:95:96:3E:D3:F4:CE:A4:A3:7D:DC:B8:D5
X509v3 Authority Key Identifier:
keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ef:ee:e9:9f:d6:7a:a0:65:30:56:52:11:eb:86:b4:74:b0:
e9:a0:9f:d3:a8:c1:06:5a:64:99:a9:cd:2a:0e:46:ba:00:16:
d6:29:4e:84:4b:4f:64:cb:c1:d0:3c:12:1b:eb:5a:2d:7a:1c:
29:83:68:3a:ef:6c:7d:79:c3:9b:aa:a2:a3:bc:06:49:b9:53:
b0:15:04:83:d1:7f:f5:de:31:64:52:f6:fa:a2:b0:22:a9:43:
57:44:ad:ad:e2:64:6c:b0:f6:9a:87:d7:c0:f9:1d:a8:85:91:
bf:38:11:7b:90:88:e4:67:ec:ba:62:4e:d3:a5:b9:38:8f:2a:
aa:17:7a:34:98:ed:d3:dd:8d:bf:a3:6c:d3:61:d7:62:98:05:
fe:0c:d4:8a:7d:a1:e0:01:c5:93:12:ed:fa:8f:8f:64:fd:ce:
4d:28:64:de:0f:03:ee:91:15:bb:d3:e3:85:0b:c2:6d:c8:9b:
e6:0a:77:01:6b:7c:00:b2:d8:42:35:38:55:5d:a5:fb:b4:60:
52:78:38:d0:0b:51:88:e0:bf:d7:f5:d0:cc:76:99:ec:6a:4d:
cf:e3:c0:de:ba:03:7c:c9:4f:d8:71:41:36:4f:5f:67:13:ae:
24:68:8f:09:c7:9a:5a:22:86:46:a6:73:ee:ec:ae:af:85:f1:
4c:31:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:07:28 2026 by rpki-client