
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: moKmti7bY1DkRjzraKBwwUKgardkKntNqT0uO4u35Ec=
Subject key identifier: DC:92:87:EB:62:04:F3:B3:F9:10:95:F9:1E:03:E8:1D:96:53:37:10
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 0363
Signing time: Sat 05 Sep 2026 00:35:58 +0000
Manifest this update: Sat 05 Sep 2026 00:35:57 +0000
Manifest next update: Sat 12 Sep 2026 00:35:57 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: d0I1SzZU+KyrOlrsoyhTnp8G47BxsdmGdDdLDMmT1ZA=)
2: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: 3tR98Qpp+cElPjcCs79m4oSOnnMvkWLHmAoCd/9m2C8=)
3: B502B0AE799311EE87452E15C4F9AE02.roa (hash: knDy628uBHc0xyl65AH5Q4Dg6SIjdEf/qj441Xa26zI=)
4: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: Y517FjnOIlJoEuMsljxEPUYQv1AnUzE1TBfadkK2NDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Sep 5 00:35:57 2026 GMT
Not After : Sep 12 00:35:57 2026 GMT
Subject: CN=6a9b63ed-459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:49:ee:69:2c:18:d7:bf:c6:7b:88:8b:4a:
b1:37:f3:57:02:e6:90:ce:50:85:82:6f:41:85:f6:
28:f9:6c:7a:12:01:28:2b:6d:03:b1:48:04:5a:3f:
2f:ad:29:2c:35:db:ec:65:6b:e1:34:b5:50:5e:36:
d3:33:2f:16:e7:55:c2:7a:b8:8f:98:20:8a:83:47:
01:5a:32:70:82:3d:d5:4b:15:cf:72:01:0a:12:12:
59:5a:6f:fb:ab:7f:b0:1c:0a:54:35:4f:bd:df:4b:
8e:50:09:0a:65:c7:c4:0b:d1:54:4a:ca:7d:9b:fc:
c7:2c:fc:b5:ed:07:52:9e:c8:99:37:34:6c:36:1c:
c7:7a:72:f9:47:e5:c9:6d:ff:8f:95:e5:13:05:dd:
0b:0e:29:ef:34:00:61:64:d7:38:53:ee:d4:77:28:
56:0c:f1:ac:55:d0:0c:e6:42:1b:ad:f3:ae:1a:82:
15:8a:2e:24:0f:11:7a:96:52:fd:10:61:fe:00:ba:
ad:08:71:e3:d9:2e:ba:46:03:01:31:9d:ab:e2:4d:
54:3c:68:74:6b:7d:98:53:1a:e8:bd:a5:83:32:3a:
52:49:90:38:7f:59:72:ed:81:fb:b8:9d:17:d7:5d:
b2:5a:a8:44:91:cb:82:5b:a5:e0:cf:ed:1d:f7:4a:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:92:87:EB:62:04:F3:B3:F9:10:95:F9:1E:03:E8:1D:96:53:37:10
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:7a:47:7d:12:8d:aa:09:ab:8e:48:bf:28:d7:ee:19:08:
d3:bf:5c:01:db:18:01:1f:bc:f4:6c:f9:74:9e:aa:06:b1:07:
a0:04:1d:0e:f0:64:b1:0a:a9:d4:ba:65:34:22:05:a5:b5:01:
4f:fb:27:d1:ba:0d:45:b8:62:3b:20:c8:d6:36:4a:df:71:f3:
61:21:b8:4c:cc:82:09:1b:0c:7e:b8:be:28:4a:e4:98:cc:0f:
22:48:c7:b1:35:7b:7e:30:bf:d8:bb:29:62:1b:bf:85:c7:c0:
2d:f3:cf:69:3f:3e:ec:91:40:01:82:d5:c2:08:b5:d7:68:69:
fd:2c:3b:5a:c5:19:dd:20:3b:1b:bc:8b:b6:4b:89:00:15:f1:
45:6c:12:be:3a:31:b5:a1:99:a9:c1:5c:f1:06:c4:62:83:52:
17:bb:00:ce:aa:3c:1c:87:9c:d7:81:f5:70:a9:43:e3:f9:24:
d2:3c:b6:10:3c:06:ca:33:75:a9:14:dc:d6:18:46:ce:0a:1d:
c0:94:89:57:7d:73:e2:5e:8c:a6:e7:02:c9:fb:b2:60:87:9b:
17:de:52:64:c0:39:38:09:65:93:ae:aa:72:32:04:10:2f:36:
5b:1d:b7:7d:17:43:24:b7:79:00:cf:a1:1a:87:37:94:07:53:
7b:7e:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:59 2026 by rpki-client