
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: MaayVDSWgZA1Xz7eg16VATS24xt2l9IHy5pXSvh9rio=
Subject key identifier: 73:C1:07:57:0B:51:73:F7:13:5B:40:80:02:15:DA:B2:27:FB:80:D3
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: C9
Signing time: Wed 21 Oct 2026 07:22:32 +0000
Manifest this update: Wed 21 Oct 2026 07:22:31 +0000
Manifest next update: Wed 28 Oct 2026 07:22:31 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: cL7BTC5wMpY0MpQKd3I2IInbFBWVG3eb/Md3tp7lg1I=)
2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Oct 21 07:22:31 2026 GMT
Not After : Oct 28 07:22:31 2026 GMT
Subject: CN=6ad86838-d022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:ea:39:2f:e3:96:d7:f1:cb:58:f5:8c:a4:
d1:81:87:a7:0c:07:d1:00:e7:7e:31:75:31:68:34:
da:2e:d4:87:3d:38:00:f7:75:3d:04:54:1c:06:0c:
75:61:d9:4d:95:1e:90:33:8f:a8:38:37:7d:3c:3e:
c4:25:c7:3e:89:0d:d8:82:d8:d9:00:6e:3c:d3:83:
79:c2:16:77:74:e0:e2:b1:d4:16:a5:79:02:21:19:
6d:a9:85:02:fe:8e:ab:3b:2f:3c:60:e2:f3:14:a4:
ae:7d:10:48:f9:b3:23:47:38:26:15:21:87:bb:c4:
35:2a:38:19:e8:3b:7e:64:c3:d9:03:20:b4:a4:71:
6a:10:3f:ea:2e:04:9f:06:67:33:68:d0:a9:3e:64:
e2:59:06:2f:d1:b0:84:4b:ae:33:c2:48:6a:79:70:
46:78:55:a7:0c:87:68:94:57:53:bc:22:bd:ef:8a:
db:dd:c9:63:d8:4f:db:fd:13:69:a5:00:29:13:11:
a6:2b:dd:ef:6a:4f:69:ee:74:b8:24:6d:55:c0:f2:
1d:d5:9f:f6:2f:ef:2c:29:06:0e:da:0d:16:2c:c8:
70:14:94:ec:fb:3e:36:2c:2e:e5:30:a3:3c:07:5e:
59:ff:f7:20:da:ec:97:2f:c4:fb:f5:6a:63:13:f7:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:07:57:0B:51:73:F7:13:5B:40:80:02:15:DA:B2:27:FB:80:D3
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3e:ca:67:df:30:4e:7f:98:7a:53:95:f8:15:62:68:e6:1f:
eb:67:9c:13:68:02:a3:51:22:c3:86:92:4e:57:53:da:47:0c:
c5:eb:8f:4b:bb:7e:0d:98:f1:e6:57:4b:9d:3c:f0:a7:4d:21:
1d:16:82:d8:e1:bb:d6:98:1b:fa:57:df:68:0f:c2:f5:79:fd:
29:24:f1:4b:47:d3:d2:72:6c:7a:83:5b:53:cb:bc:3b:66:b0:
23:fd:64:80:ef:a4:89:94:ad:ef:23:ce:33:7d:59:33:18:36:
00:fe:a7:2d:0d:bc:c2:b9:9e:ff:a2:06:22:18:b4:8f:db:8e:
6a:3c:bf:0e:b8:49:d9:0a:ee:93:f0:04:c6:f0:da:71:ae:ea:
8f:e1:95:39:e8:94:2e:c6:f0:c5:e6:8c:ce:95:10:86:fc:b8:
1b:17:0a:fb:b8:60:d9:b5:3c:0f:66:5c:f3:dd:25:fa:d8:88:
0b:34:d6:b6:39:e2:5f:21:bc:15:fa:5a:02:71:a9:3d:a5:39:
e6:8c:bc:ba:28:5d:dd:1e:98:ea:4f:49:15:f8:91:54:63:bf:
39:95:6c:68:85:67:b0:67:49:4c:d0:8d:84:c1:bd:5c:a6:17:
f6:c1:0c:a5:34:f3:82:6b:6f:8a:9a:74:2d:b6:b3:b4:b8:71:
25:70:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:03 2026 by rpki-client