
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier: RjhHgPkAcPAa4cMeitWWJEz7LH795ZKR9+vwoN62FdU=
Subject key identifier: BB:B0:E7:F7:6C:7B:F4:73:2F:45:D8:5A:91:28:0C:64:A3:68:17:9A
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial: 0A12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number: 0A00
Signing time: Sun 04 Oct 2026 19:50:45 +0000
Manifest this update: Sun 04 Oct 2026 19:50:45 +0000
Manifest next update: Sun 11 Oct 2026 19:50:45 +0000
Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: 1itbUyo5OkPiVXKw+TWe2s1qchi3bELH/IgErqSCRM8=)
2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: 4O4VyvF9acyXinPLBl4hOfnMsxmNaJoJYc9kqSUJS5k=)
3: Qth6v7KMd5qFJNA6TDdt7ePexhY.asa (hash: w3Jx73hWTlVyP7CbVR5q4xyDLR2woi8kCMRhmuYJmI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Validity
Not Before: Oct 4 19:50:45 2026 GMT
Not After : Oct 11 19:50:45 2026 GMT
Subject: CN=6ac2ae15-53aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:c1:cc:f8:57:2a:b3:e3:34:b2:09:fb:2f:
ab:f4:15:c9:6e:6e:aa:54:a4:96:1c:71:85:c7:47:
43:9d:3a:a2:44:ba:7b:ad:54:6a:d1:af:1a:b5:c8:
86:f9:72:b1:ba:77:f3:3f:44:34:6a:33:f9:38:7c:
ed:a6:82:74:46:8a:ba:9f:92:db:65:22:87:66:dc:
2a:df:44:ee:46:ed:a7:d3:10:98:59:df:63:66:95:
7b:05:9b:3c:8e:7a:7c:ba:b3:4c:8c:60:14:34:0e:
cf:4f:29:b9:c4:cf:7a:76:0c:d5:f6:79:77:a0:f2:
47:5e:5b:4c:cb:82:8d:26:7f:63:e7:72:60:a6:d5:
f2:e6:5d:1d:64:9b:9d:b0:9d:5b:72:31:93:ab:27:
69:99:28:93:02:52:3a:0c:9f:9e:8f:db:1e:88:3d:
b5:64:19:b4:ca:74:68:72:35:08:b4:fb:4a:7d:1e:
d8:7c:38:eb:63:9b:a5:63:bf:66:04:55:ae:26:45:
cd:1a:c2:60:61:fd:44:e0:9b:62:b7:c4:f1:a0:8e:
4f:3a:e0:08:74:f0:8d:38:a6:78:c2:cb:62:af:e1:
68:79:60:fb:94:71:fe:1c:f1:4b:53:2f:f5:c4:03:
2c:20:92:7e:8b:dc:5f:83:a2:bf:a0:5d:36:ac:59:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:E7:F7:6C:7B:F4:73:2F:45:D8:5A:91:28:0C:64:A3:68:17:9A
X509v3 Authority Key Identifier:
keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:98:6f:de:27:02:d0:a9:a8:da:3c:ff:2e:4a:69:c6:b7:
52:e8:ed:12:27:f8:40:cf:d1:a3:4a:d0:7d:86:29:86:7d:50:
a4:84:46:65:56:ae:df:49:5e:aa:7e:9b:56:69:4a:5a:f4:47:
84:d6:b5:0a:cb:65:05:03:5f:9b:20:b0:fb:3e:2a:c7:7e:eb:
8c:c4:34:74:b2:e8:de:4e:35:02:ab:e1:b9:7b:fe:e7:a0:dc:
6e:d9:83:fa:0f:e5:ad:3f:36:6f:89:42:f8:91:8f:fd:35:31:
63:35:02:5c:c8:36:cb:59:9a:e3:7f:10:fa:56:b7:c7:ca:d4:
28:00:34:19:52:7e:2f:ed:d2:78:9d:b9:73:62:a7:b9:76:df:
86:bb:a7:dc:58:2b:56:e8:3b:c4:f0:0f:6f:70:26:77:8a:af:
ed:30:6c:92:4f:dd:c0:08:45:e4:6f:b6:61:fe:ce:b1:c9:0a:
55:04:0e:e0:4a:f4:be:4e:95:0c:ae:44:28:e2:4d:3a:41:07:
38:2c:fa:f7:2d:68:1e:1f:19:1f:8b:41:d3:06:67:5b:08:7a:
de:3b:7c:52:f4:6c:c7:f6:01:b7:36:12:8c:75:cc:d7:11:17:
3a:ea:ec:e4:2e:be:8a:94:95:ab:90:de:fb:3e:62:c9:7d:56:
29:ad:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:27:16 2026 by rpki-client