
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier: 7oUrD9Uya/sQ9cuPD0y5rNFpzJBcqRWOlvZAoQ4/BsA=
Subject key identifier: B5:F9:92:AE:86:F8:3D:9F:2B:2D:03:16:2D:C7:42:49:13:80:A5:42
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial: 3026
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number: 300F
Signing time: Tue 06 Oct 2026 15:28:16 +0000
Manifest this update: Tue 06 Oct 2026 15:28:15 +0000
Manifest next update: Tue 13 Oct 2026 15:28:15 +0000
Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: puQO/RC5GIhx0eLUPBHh5C2KeUIqu6bFeWtrlXbzvPQ=)
2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: GY3dppS/8fUWS4cLQeoV/JTryVHMjd9AtVaUG4pWtjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12326 (0x3026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Validity
Not Before: Oct 6 15:28:15 2026 GMT
Not After : Oct 13 15:28:15 2026 GMT
Subject: CN=6ac51390-d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:7e:f5:74:48:9c:67:4f:7c:86:e1:8b:f4:
dc:4d:90:46:4e:3a:69:6e:29:25:da:89:4c:6c:5a:
bf:64:1e:5a:e3:27:70:15:d9:f8:a4:72:38:47:28:
8d:01:ed:b8:85:f7:9a:7b:8a:c5:ce:54:e7:53:32:
23:3f:a2:a0:2a:ec:0a:8a:fa:dc:e3:6e:b3:fb:59:
13:5e:3e:46:53:83:98:f7:ec:59:ad:d4:97:ab:33:
6d:12:10:db:9d:1d:71:10:61:39:d1:96:10:5b:48:
f2:f9:94:a8:0e:2f:5d:ae:87:c9:9c:8a:24:c1:ed:
c7:4f:64:70:be:fc:9f:5b:ab:e7:d7:c5:b8:de:dc:
bf:98:fb:1f:32:50:6f:2d:f4:62:a6:90:8f:e4:97:
e0:08:8d:2e:bc:b8:f6:83:4d:7f:fb:0b:68:d0:8d:
ff:e2:34:8a:b7:93:0e:3d:cf:b5:c4:20:40:79:8c:
56:9d:bf:1a:06:98:a6:fa:bd:90:d4:79:37:8d:67:
8f:0c:1b:e2:f0:2e:bd:fe:7b:9f:8b:a0:dc:2b:74:
1f:d8:58:73:48:23:ab:02:d9:3f:84:b2:82:dd:d1:
7f:f6:5e:90:77:3c:6e:9d:04:cb:3d:20:69:ec:65:
c0:ae:40:1d:b9:08:e9:8b:cc:84:63:d3:74:32:33:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:92:AE:86:F8:3D:9F:2B:2D:03:16:2D:C7:42:49:13:80:A5:42
X509v3 Authority Key Identifier:
keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:60:da:96:ef:50:e1:ee:16:97:5c:58:58:64:5c:8d:e8:45:
e8:af:53:73:3a:53:f5:d8:1f:95:c1:e8:da:cf:09:15:f6:de:
6e:8e:0e:9d:8f:44:c2:77:25:87:35:92:93:de:3f:ce:d8:ee:
3b:61:fa:28:e4:67:7e:0c:24:c9:55:f4:2c:83:2d:46:75:53:
c7:f4:1a:ef:02:ea:01:9f:bf:0e:14:63:0a:a9:e1:d0:7a:3e:
42:a6:3c:f6:93:47:eb:f9:4d:4c:df:49:ee:5a:88:cc:77:dd:
e7:90:ec:0f:54:d3:fd:4e:ba:24:83:2c:cc:ce:3b:5d:92:84:
6e:98:28:c4:5f:5a:6e:53:f8:43:67:cf:82:bf:5c:b4:ad:a0:
78:66:38:dc:be:4e:2b:a7:86:45:4c:a8:74:8e:c3:f9:e7:73:
25:8e:70:40:56:ce:ec:34:02:2f:41:57:77:46:5e:69:40:36:
2a:16:24:1b:75:6e:8f:e1:06:f2:b3:eb:c6:ac:18:14:41:73:
1d:57:c7:2c:ce:33:b5:39:4f:c9:03:28:37:ba:20:47:cf:2a:
99:ea:47:7a:d0:8d:9b:cf:2f:15:3c:5e:12:39:b9:6c:12:40:
3c:fe:51:6f:45:27:7c:e9:d5:95:29:f1:8e:29:70:6f:09:59:
7b:2c:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:07:01 2026 by rpki-client