
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json)
Hash identifier: d9DCcb5IJspiYX+ym7RL8kA37GzlhOqwM86uAvQ8l7g=
Subject key identifier: 2F:12:44:DA:EF:AC:D1:FF:3E:07:23:3D:98:11:3F:16:24:10:B3:19
Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Certificate serial: 0E70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
Manifest number: 0E63
Signing time: Tue 06 Oct 2026 17:50:36 +0000
Manifest this update: Tue 06 Oct 2026 17:50:36 +0000
Manifest next update: Tue 13 Oct 2026 17:50:36 +0000
Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: 5Vx3POoHSZhcbsilmTIPNdoQk9QBBeFZ6hs65/Rubmw=)
2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: dAxxWP7iROyexc1H6/pr8xqZ2wrqpIe59mmtmzeQV2M=)
3: VSgwMNF-Lh6aP3OyUk06qsjE3ZU.asa (hash: yBGg5/vo5lZ+NiCdb/9N+OfZ5c3WvT16Nu73znyg4So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3696 (0xe70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Validity
Not Before: Oct 6 17:50:36 2026 GMT
Not After : Oct 13 17:50:36 2026 GMT
Subject: CN=6ac534ec-88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:f0:af:7e:d0:9e:56:63:dd:ab:05:f2:11:
5c:e4:e6:64:e8:9d:11:ac:de:17:8e:34:86:d9:3b:
47:2a:b0:27:27:72:68:3a:95:3c:44:b8:9f:24:ab:
b7:9a:03:ef:34:7d:26:c6:63:03:f5:7b:be:46:87:
de:fb:0a:40:7d:dd:60:98:2f:da:23:94:bc:9b:b6:
7b:1a:45:2b:b4:5b:0a:8d:8f:d4:cf:76:34:8b:be:
50:ac:f9:ed:96:b8:af:50:93:98:0b:c6:3e:b5:9a:
45:48:ea:df:db:7b:2d:bd:5f:c2:95:93:4b:1e:60:
de:ad:b9:c0:01:f4:1a:40:3f:31:32:02:51:56:fb:
15:81:1a:35:56:4d:0e:23:6b:97:89:b4:f6:63:9f:
2f:86:5a:91:11:76:bb:9e:0e:ab:bf:3b:01:68:05:
c7:9d:35:39:54:e6:a8:c1:58:4a:cf:13:59:b4:4e:
d6:0e:2d:01:8f:b9:7b:9c:a3:a9:9c:c9:f7:1b:16:
3b:5d:a6:7d:c0:12:20:79:58:2f:fa:06:8d:01:d9:
3f:88:a3:82:d4:fa:da:b2:33:78:94:1a:02:a2:44:
84:6a:63:8f:fc:04:b1:44:51:e6:be:da:2a:85:14:
4f:fb:8c:78:e8:36:80:88:a7:df:4d:73:e6:e1:84:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:12:44:DA:EF:AC:D1:FF:3E:07:23:3D:98:11:3F:16:24:10:B3:19
X509v3 Authority Key Identifier:
keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ce:5b:ab:24:8f:f0:a1:07:8a:47:12:6d:01:80:ae:b5:1d:
e6:8e:e0:fa:97:ca:22:b0:55:c6:33:8c:df:a3:fd:d0:51:78:
f3:1f:4c:2c:96:2f:95:f3:5a:4f:e1:1d:87:e9:c6:cb:79:bf:
25:90:b4:11:a1:ff:fa:ae:33:60:19:b0:df:c3:de:6f:69:be:
5c:85:97:e2:6e:1c:8f:99:d2:a6:11:1d:a1:91:80:42:d3:c8:
c9:a7:46:7b:44:90:45:f8:ca:56:8e:54:97:d0:93:05:a2:77:
91:fd:4b:04:cf:f2:64:36:06:c4:9f:4f:a5:a7:96:64:bf:d4:
35:b9:66:40:df:0a:2f:4c:98:bd:0c:aa:4f:b4:e4:0d:f4:4a:
0d:2e:69:6a:85:0c:dc:4d:87:98:92:fd:76:4d:20:4d:bd:80:
b1:a6:fa:be:51:6e:31:86:5a:db:79:8c:3c:8c:8c:3c:36:fa:
91:32:05:d7:e2:59:ad:9b:3e:f9:50:65:46:4d:11:34:7a:da:
ab:e1:94:a6:50:e7:79:cf:01:64:92:db:d2:65:49:b5:11:0b:
3b:88:05:0a:55:2c:76:c1:1d:d6:05:a6:11:c9:5b:6e:61:cb:
d3:56:70:40:e0:6e:e7:1e:2e:19:60:34:d9:91:21:0c:3d:cc:
37:1d:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:12:45 2026 by rpki-client