
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier: LGklJpjkP+qm8gQQE6CIN4FVCs9pRj5XbZJovSm11tc=
Subject key identifier: B2:64:81:07:CF:79:96:61:6F:4B:BF:A0:4A:AC:F4:D6:91:B9:45:0D
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number: C9
Signing time: Wed 19 Aug 2026 07:33:25 +0000
Manifest this update: Wed 19 Aug 2026 07:33:24 +0000
Manifest next update: Wed 26 Aug 2026 07:33:24 +0000
Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: e+xO8ECR5cFApbAmVBpmFTopIltGGHpy7bxBRLC7Ynk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Validity
Not Before: Aug 19 07:33:24 2026 GMT
Not After : Aug 26 07:33:24 2026 GMT
Subject: CN=6a855c45-85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:68:82:77:7b:f8:e7:f5:65:61:00:19:ae:
44:b1:f6:f6:d2:db:84:f5:7c:1e:eb:23:24:5f:9b:
94:38:67:d1:3d:6e:af:c6:3e:43:4c:cf:d2:47:f3:
30:c3:6b:7a:9c:1f:4c:a9:46:36:ca:fb:e8:6b:ea:
a6:06:27:23:98:21:d4:89:73:ee:b5:bc:52:81:0d:
c7:d9:f2:1e:2f:11:83:03:b4:5b:37:9c:a5:38:c2:
e0:d9:fc:5e:61:fc:b5:96:70:09:c6:95:44:a3:aa:
31:3a:69:0b:e3:da:4c:ea:29:58:75:fb:b3:99:41:
bb:f7:e1:b3:90:12:8e:be:86:5d:f6:a8:09:f7:1f:
37:fd:a4:1a:65:90:83:1f:15:82:5b:c7:60:00:6a:
a7:49:7d:c4:5a:75:9c:5b:08:eb:37:1d:fa:be:e7:
4a:3a:00:3b:25:c8:ff:a0:fb:42:ba:c8:05:11:e7:
d2:84:ab:a4:55:1a:1b:39:4a:dc:3a:9f:83:8d:7f:
77:93:f0:82:d8:fb:51:24:8e:44:cf:07:54:c1:3c:
ab:e7:8d:95:07:27:5c:8f:f5:7e:70:7a:97:88:f8:
72:bb:3c:d5:08:f1:95:ff:57:50:e2:36:99:31:79:
73:42:52:08:02:4f:c9:df:e9:8d:13:c0:84:c6:bc:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:81:07:CF:79:96:61:6F:4B:BF:A0:4A:AC:F4:D6:91:B9:45:0D
X509v3 Authority Key Identifier:
keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:13:c4:a2:14:3d:45:e4:b7:ba:02:20:0c:f1:43:7d:4c:
df:01:2f:f3:07:c2:c9:9c:a7:54:6b:ac:7b:46:de:e4:ed:e2:
8a:c1:04:64:d1:6c:1a:61:b6:84:3b:ae:88:f2:a5:13:5c:e0:
be:21:c5:44:13:64:c5:b7:f4:b2:8b:97:59:66:50:ea:4d:35:
f4:c9:e5:94:67:34:4d:f3:b7:62:83:26:63:39:a7:c0:c9:b0:
5e:1a:24:b0:81:78:68:43:e9:62:04:c1:e3:3e:e6:48:c4:35:
63:4e:7a:65:58:04:1e:c7:6f:13:2e:dc:2a:ff:c0:59:1c:83:
71:d6:22:6f:f8:81:f2:50:9e:50:a9:38:39:b9:c3:fa:94:af:
d6:2b:28:e4:2b:fb:19:1e:96:ca:18:df:ae:5f:8f:ec:d6:37:
d0:2c:5f:50:81:df:2b:98:6f:01:f6:10:e6:b3:55:ce:4f:2a:
3a:39:f8:5c:9e:6e:7d:90:cc:b5:e5:37:f8:2e:e9:5a:a1:03:
ae:25:a4:8b:5d:f6:8e:05:e3:f0:24:98:3b:fc:24:87:b4:64:
8f:77:60:37:82:42:88:64:ee:6c:7b:0f:43:7b:3d:df:3a:28:
d8:69:8b:34:3e:1b:b9:28:96:84:ef:3a:70:0f:5d:40:48:6f:
aa:21:04:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ4OEMxMTAvBgNVBAUTKDI1QTE5NzU4MTZDRDlFODlGM0Q2RUE2QTc2MzAyMjQz
QkVDMzQ1RUUwHhcNMjYwODE5MDczMzI0WhcNMjYwODI2MDczMzI0WjAYMRYwFAYD
VQQDEw02YTg1NWM0NS04NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxdognd7+Of1ZWEAGa5Esfb20tuE9Xwe6yMkX5uUOGfRPW6vxj5DTM/SR/Mw
w2t6nB9MqUY2yvvoa+qmBicjmCHUiXPutbxSgQ3H2fIeLxGDA7RbN5ylOMLg2fxe
Yfy1lnAJxpVEo6oxOmkL49pM6ilYdfuzmUG79+GzkBKOvoZd9qgJ9x83/aQaZZCD
HxWCW8dgAGqnSX3EWnWcWwjrNx36vudKOgA7Jcj/oPtCusgFEefShKukVRobOUrc
Op+DjX93k/CC2PtRJI5EzwdUwTyr542VBydcj/V+cHqXiPhyuzzVCPGV/1dQ4jaZ
MXlzQlIIAk/J3+mNE8CExrw/OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJkgQfP
eZZhb0u/oEqs9NaRuUUNMB8GA1UdIwQYMBaAFCWhl1gWzZ6J89bqanYwIkO+w0Xu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDg4Qy80RjZENkY2MDZC
ODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9KYUdYV0JiTm5vbnoxdXBxZGpBaVE3N0RS
ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJlNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDg4Qy80RjZENkY2MDZCODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9KYUdYV0JiTm5v
bnoxdXBxZGpBaVE3N0RSZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaTITxKIUPUXkt7oCIAzxQ31M3wEv8wfCyZynVGuse0be5O3iisEEZNFsGmG2
hDuuiPKlE1zgviHFRBNkxbf0souXWWZQ6k019MnllGc0TfO3YoMmYzmnwMmwXhok
sIF4aEPpYgTB4z7mSMQ1Y056ZVgEHsdvEy7cKv/AWRyDcdYib/iB8lCeUKk4ObnD
+pSv1iso5Cv7GR6Wyhjfrl+P7NY30CxfUIHfK5hvAfYQ5rNVzk8qOjn4XJ5ufZDM
teU3+C7pWqEDriWki132jgXj8CSYO/wkh7Rkj3dgN4JCiGTubHsPQ3s93zoo2GmL
ND4buSiWhO86cA9dQEhvqiEETQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:34 2026 by rpki-client