
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft
File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json)
Hash identifier: 5RJ++atgK/ZBJJXEgydqwXban8R+I9YbevKF+IWqCHI=
Subject key identifier: A2:81:2B:00:48:5C:0E:E1:CD:89:31:66:F7:09:9A:DB:4F:C4:46:1E
Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88
Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488
Certificate serial: 0F85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft
Manifest number: 0F70
Signing time: Thu 08 Oct 2026 17:36:19 +0000
Manifest this update: Thu 08 Oct 2026 17:36:18 +0000
Manifest next update: Thu 15 Oct 2026 17:36:18 +0000
Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: 9Zk1y7frWK/klgCdNQyf0cg4fX+fWNQKWodsZVXm0C0=)
2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=)
3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3973 (0xf85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488
Validity
Not Before: Oct 8 17:36:18 2026 GMT
Not After : Oct 15 17:36:18 2026 GMT
Subject: CN=6ac7d493-f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:76:8a:63:0c:fc:a2:ac:b7:68:b8:fa:ff:
6a:5e:2c:00:31:9b:76:0b:f5:64:7a:63:e2:eb:1b:
36:54:62:bc:82:fc:d8:b3:af:c9:83:3b:75:4e:ff:
b4:23:3b:ec:9b:76:5b:04:eb:29:51:7a:14:70:2c:
38:6f:9f:25:b6:c1:44:9b:88:b2:97:78:32:60:d3:
d3:7f:41:f9:63:5d:d1:7a:1e:2c:4a:e8:4a:e3:76:
28:9a:38:0f:cf:6a:21:e4:42:29:01:a2:d7:03:6d:
66:d7:54:9c:b6:6b:37:7b:37:dc:da:3b:13:40:2c:
be:91:07:3e:08:38:46:66:e7:fc:8a:a5:cd:0c:48:
f2:ea:f7:82:31:7e:9e:75:f7:73:15:8e:ed:6b:07:
45:d0:0a:61:e7:2b:e7:43:1f:4d:23:83:b9:1b:2c:
c8:b6:04:7b:1d:89:9d:31:82:68:53:49:7e:56:02:
63:85:1a:7d:36:a7:4c:a3:51:24:ca:e0:29:72:d7:
15:38:6a:be:70:06:f9:8f:06:3c:c4:6a:de:af:49:
46:ae:2f:84:d9:95:3c:b2:59:fd:82:b3:c9:cf:da:
c2:b6:73:76:63:76:2f:fa:c4:e6:39:fa:02:84:53:
02:76:f2:bc:f6:bd:55:67:64:50:84:a4:b1:5c:6e:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:2B:00:48:5C:0E:E1:CD:89:31:66:F7:09:9A:DB:4F:C4:46:1E
X509v3 Authority Key Identifier:
keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:49:ad:fa:b2:70:58:7c:bf:0c:73:b6:96:ed:42:9c:21:
c5:6e:39:e4:94:6b:ad:f6:e2:ad:6e:79:92:cf:34:97:1c:5d:
89:c6:7f:7b:62:66:ce:31:d0:de:e1:2a:da:18:5c:79:2f:a2:
1e:dd:da:24:21:eb:64:1e:17:fa:7e:38:5d:0d:b1:80:47:49:
9c:f8:79:27:3e:4e:42:19:cc:48:94:5a:7a:6e:51:cc:56:e2:
f6:dd:96:5a:2a:2b:50:6a:c5:b4:c5:39:fc:f7:6f:91:29:5f:
18:5a:68:e7:f2:3d:9a:e5:f0:14:d3:11:fe:7f:13:cc:56:fb:
5e:50:f9:54:56:61:2d:f0:e2:88:33:a0:1b:39:fe:7f:7d:be:
08:3d:d0:8f:f2:12:04:06:f1:f6:0e:69:49:31:ce:82:2b:1d:
14:50:b9:c0:0c:0b:7c:bf:e0:2c:a0:59:29:77:e6:93:ff:fb:
dd:42:c1:8b:3b:ce:ae:d7:48:7e:de:94:cb:32:4c:db:7d:6b:
a9:53:b9:ba:d2:e0:7b:41:49:87:13:bc:a2:a5:76:62:4d:22:
5e:ab:43:43:3f:5f:d5:d8:90:d6:29:de:14:e5:d3:3f:1a:e4:
40:d2:9e:c3:7b:b7:10:fc:36:05:c4:ab:05:a9:25:5b:da:f2:
2c:56:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:41 2026 by rpki-client