
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json)
Hash identifier: thvTCjDy90soPsTz3b7H5g+r7uddq5VaH7NHyJx85B0=
Subject key identifier: D6:4F:72:FA:F5:52:54:3B:B9:A0:77:B2:6B:45:F5:E9:E0:13:E8:C1
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
Manifest number: 02C5
Signing time: Fri 09 Oct 2026 01:48:59 +0000
Manifest this update: Fri 09 Oct 2026 01:48:58 +0000
Manifest next update: Fri 16 Oct 2026 01:48:58 +0000
Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: DjeFXEylKiduf9cpBfBnBeZjhKo8/UADHxhkNRS3CYo=)
2: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: iDRttbAq2dG33Z+GOcEvSaxwB+ZISIrhoHxT2VA+MAU=)
3: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: YbTHElizFzUtlbWyp+pwU08KL5opGYwYJhzV3rHc988=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Validity
Not Before: Oct 9 01:48:58 2026 GMT
Not After : Oct 16 01:48:58 2026 GMT
Subject: CN=6ac8480a-680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:cb:f9:9f:41:c9:e7:12:f3:a0:b1:a1:8e:
aa:ca:77:c8:6d:c3:f6:8c:e9:2d:8d:89:5e:fd:32:
22:ce:09:b0:8e:2b:4d:b5:e5:d9:9f:6e:aa:7e:28:
70:45:19:b7:3e:e4:1b:02:c9:fd:0c:df:cc:a8:8b:
fe:90:e8:8b:48:0d:44:8e:5b:9e:02:a3:c9:a1:94:
c6:5d:08:ac:21:8c:97:ea:30:78:78:46:35:c7:88:
01:e9:7d:70:f8:0d:a9:f3:35:be:02:66:18:1e:b3:
59:5f:62:c1:a2:03:11:2c:a3:79:36:42:2e:43:a9:
ba:ee:4a:58:52:75:98:63:21:3f:f2:66:1a:0f:44:
e3:8b:b2:a8:1f:d7:d8:d3:95:5e:63:1d:68:be:f6:
5d:26:1a:61:0c:e6:11:fc:e0:0b:f4:ef:55:55:fe:
ff:cc:e8:78:5b:89:29:f9:be:e0:24:6e:07:5c:6f:
1a:f1:dc:f9:0a:89:97:04:04:04:47:b2:b2:0d:b0:
b1:90:e9:46:6f:65:fb:8a:33:b5:e1:ce:d9:9d:a2:
ef:2b:ae:cf:91:2c:d8:8d:a0:3e:d5:7c:f2:e7:ce:
ed:a3:b5:38:8f:a7:82:28:3f:4d:98:fe:f7:93:a4:
9c:43:7c:f0:14:6c:02:d6:77:6a:4c:c1:f5:84:1f:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:72:FA:F5:52:54:3B:B9:A0:77:B2:6B:45:F5:E9:E0:13:E8:C1
X509v3 Authority Key Identifier:
keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:7e:a6:4f:14:5d:4a:c0:89:37:77:e3:02:db:c5:7c:54:
2a:29:58:28:99:0e:57:33:a8:91:82:8f:9d:76:70:e2:e9:75:
e4:99:44:c4:ab:77:03:ed:09:5d:76:c2:6f:0d:51:bb:ed:57:
11:d6:0a:98:7c:d8:df:9e:78:ed:d5:cb:9d:7b:d3:69:9e:27:
b2:be:2f:79:cf:7e:41:57:41:5b:ba:f6:67:6f:b8:bc:70:c7:
50:cb:de:7d:92:95:4e:e8:9e:31:76:d4:30:63:a4:12:2d:58:
81:cb:96:6b:2c:86:52:94:b7:28:09:7a:37:59:ba:d9:f7:24:
a6:86:7c:3a:8d:88:de:3c:ab:d6:50:a5:9d:29:77:5d:a6:5b:
1f:ef:64:35:d5:27:4f:11:8a:bb:66:a3:f4:1b:13:86:58:20:
e3:11:88:7c:c3:ab:88:e2:18:a7:4c:e4:35:ea:3e:41:1b:85:
9d:32:ce:3e:a4:3c:2d:a7:3d:e1:4e:eb:2e:8f:74:6a:f8:dd:
03:4e:ad:16:a7:66:0b:9a:40:5c:5b:6e:32:2f:f4:5d:33:66:
ab:63:fd:62:43:62:68:f3:40:36:cd:c9:3a:5a:51:67:50:60:
8c:7b:bc:44:29:f4:b5:23:18:30:6e:3e:c3:66:82:77:ff:56:
52:c0:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:19 2026 by rpki-client