
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier: I6BK/PLlKQFDempzNBIIn/Kov80RSLIDGd6RZNZgpps=
Subject key identifier: A7:57:A7:68:C5:4B:60:5F:AA:26:FD:80:C3:FD:36:59:68:61:CE:A4
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number: 20CC
Signing time: Sun 04 Oct 2026 16:21:14 +0000
Manifest this update: Sun 04 Oct 2026 16:21:13 +0000
Manifest next update: Sun 11 Oct 2026 16:21:13 +0000
Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: aYoepYv4gGW7+436vIbeHd//ZeumyGeQHDMWsea6DA0=)
2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Validity
Not Before: Oct 4 16:21:13 2026 GMT
Not After : Oct 11 16:21:13 2026 GMT
Subject: CN=6ac27cfa-7cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:61:77:a6:33:8a:6d:cb:03:2b:19:3f:e4:
29:d5:32:d4:2c:65:ec:75:54:2b:91:36:11:a0:c3:
40:06:a4:b6:6e:44:85:0b:8c:21:63:0d:ba:46:f4:
f5:2d:82:e2:59:29:7a:a1:96:12:7c:b1:a9:39:05:
03:e4:ce:f3:f0:7f:b6:d9:f8:54:ee:ea:a6:39:b2:
58:0d:34:1e:7b:6f:a5:47:f3:6f:6b:6f:65:2b:66:
1e:3f:c5:5d:a0:ab:ca:1b:44:73:e8:2d:b3:46:56:
bb:5a:d6:17:ed:9e:fc:97:a0:a3:da:bd:75:54:c5:
e4:ff:ce:fe:c6:ea:13:6b:07:3f:5a:28:de:fc:b8:
2b:6a:65:a7:5a:04:66:3f:f7:41:3d:6a:c4:c9:ba:
f4:e2:90:f7:f0:bb:97:db:fe:e3:16:1b:4f:ea:74:
59:74:72:8f:ca:a9:0d:af:50:59:3e:02:8b:de:8d:
a0:0c:da:cb:5d:4e:4f:88:3d:de:79:6d:28:40:45:
81:cd:12:83:bf:5c:a2:75:48:7c:1c:fe:ca:2a:81:
ba:dd:3c:ec:6b:f8:9d:92:06:0d:98:3f:34:0f:fd:
a5:8c:af:bd:0a:46:07:60:78:63:28:a1:38:0d:5c:
f5:bd:61:ac:26:ad:b0:5d:af:c1:bf:1e:d0:ff:b2:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:A7:68:C5:4B:60:5F:AA:26:FD:80:C3:FD:36:59:68:61:CE:A4
X509v3 Authority Key Identifier:
keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0e:61:78:00:c1:47:78:47:3d:b2:df:55:84:f5:12:e0:31:
31:af:3f:bc:5b:6c:cc:a8:9e:e4:d6:3c:78:88:94:33:b4:ba:
eb:4c:23:08:45:09:f0:6e:4f:c5:4a:90:81:20:81:a3:66:e7:
f0:5b:3b:9b:1a:1c:01:ba:17:1d:ed:a3:81:f6:62:15:5f:59:
a4:fc:f3:be:ac:21:3c:cb:28:a8:4e:c6:5b:d2:f8:33:4c:68:
4b:f3:79:c0:94:26:bc:b8:ef:02:66:27:0d:23:6c:32:67:a6:
37:55:8b:5f:6f:60:c3:7e:5f:dc:f0:d8:68:56:5a:8e:95:df:
b6:3d:fe:35:f5:f7:d5:79:15:6b:d8:64:49:8d:36:de:8d:ab:
f2:4c:5d:a5:30:9e:a0:12:96:0f:3d:0e:e7:af:94:9a:b5:33:
69:a4:7a:c3:47:96:cf:60:65:af:99:ca:33:be:24:e5:a6:0d:
8b:0b:0d:c8:3c:a6:50:0b:a4:ca:2e:26:ac:36:f9:d7:5a:54:
66:54:40:fc:6b:ba:96:c7:69:40:ee:d7:6c:57:70:d2:11:cf:
3a:d9:4b:a0:5c:eb:cb:48:49:b0:b7:30:2d:af:f0:b3:11:ea:
16:2e:d9:d6:8d:81:cb:03:94:57:9d:25:65:ba:ed:b1:b1:9a:
6a:28:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:38:20 2026 by rpki-client