
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
File: Js6lcSyYfVN6eITq8DUAFr8UxMY.mft (raw, json)
Hash identifier: MIcE+W7L2+twLhvDpF8og1HuhTM345WDk785WK9/wJw=
Subject key identifier: 51:15:34:3C:EB:D0:98:B4:85:2E:EA:6D:8C:6C:BE:4F:1D:21:30:2D
Authority key identifier: 26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6
Certificate issuer: /CN=A91FAB2C/serialNumber=26CEA5712C987D537A7884EAF0350016BF14C4C6
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
Manifest number: 21
Signing time: Sat 17 Oct 2026 09:38:00 +0000
Manifest this update: Sat 17 Oct 2026 09:38:00 +0000
Manifest next update: Sat 24 Oct 2026 09:38:00 +0000
Files and hashes: 1: Js6lcSyYfVN6eITq8DUAFr8UxMY.crl (hash: AN0ol74cIelP12AA4NdttYYyhY7XpzMqzvM3gbl3V6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.crl
rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB2C, serialNumber=26CEA5712C987D537A7884EAF0350016BF14C4C6
Validity
Not Before: Oct 17 09:38:00 2026 GMT
Not After : Oct 24 09:38:00 2026 GMT
Subject: CN=6ad341f8-9b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:42:5d:28:eb:b3:b6:44:88:dd:8a:7e:9d:5c:
91:ca:c5:b8:ce:df:29:61:87:e8:76:5a:48:c1:d3:
90:26:3b:bc:6d:4a:99:68:52:a4:a0:11:e8:1d:f6:
f4:21:18:60:71:b9:02:af:d0:86:fe:4b:fd:bd:34:
14:32:51:49:21:f5:6d:b9:a2:ae:f0:1d:1c:f7:92:
60:3a:1e:e7:5f:9d:40:f8:f7:01:49:7a:34:51:e0:
b8:a8:46:d5:1b:dd:ea:55:7b:de:60:d7:6a:6a:ed:
0d:b2:dc:08:f4:cb:4a:35:c9:e9:ed:fb:42:8b:bc:
3b:ad:66:ee:6f:c1:55:07:95:df:64:7d:86:13:6f:
c5:a2:3b:c8:00:dc:a3:cd:c5:21:d7:bc:3d:89:ea:
a1:0d:fc:16:5c:e9:eb:b3:e5:b2:7d:5e:1c:1a:ff:
4c:9b:e2:f9:be:2d:c8:89:c7:33:60:83:1a:2b:41:
f7:77:3b:93:79:0d:42:a8:97:af:c8:6d:11:84:6d:
d8:3c:ed:a3:31:a6:a5:ed:81:4b:e4:a2:0e:26:ce:
fe:b5:38:10:98:b9:c2:7e:01:af:15:a5:84:a4:08:
fb:11:5b:3f:93:54:9e:1f:82:71:64:99:01:fd:88:
52:e7:4c:50:af:ec:08:f1:53:42:76:3e:22:bf:f0:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:15:34:3C:EB:D0:98:B4:85:2E:EA:6D:8C:6C:BE:4F:1D:21:30:2D
X509v3 Authority Key Identifier:
keyid:26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:aa:fc:e6:05:d2:19:6f:2c:a8:ec:5f:09:34:68:7b:59:66:
13:d5:78:77:8a:ab:1c:4c:ec:03:22:25:9c:bb:3b:41:c4:06:
5d:ea:6d:c7:a7:6f:59:8e:de:6f:f7:03:ca:2d:8a:78:8c:9d:
1e:57:27:3c:a8:78:fd:98:dd:c6:d6:28:da:fc:84:96:2d:e3:
90:ae:83:4e:7d:4d:76:69:9a:6d:af:30:f5:ab:22:a6:b5:c8:
ae:d2:11:59:f2:f3:9e:26:10:25:07:9f:68:b5:12:b1:52:1c:
14:b0:6d:24:b3:7e:48:f5:e5:de:a2:c4:dc:40:88:57:48:19:
87:c1:fb:82:f5:66:63:cb:1c:b5:ce:41:ce:12:93:7b:0b:90:
43:27:6c:4c:b9:15:5e:d4:d4:19:a8:04:69:1a:14:69:ac:ad:
c5:be:45:d6:af:6a:6a:17:1b:5b:38:bb:98:97:2e:8f:7e:42:
1a:78:fc:a8:04:53:a4:9f:90:0b:f6:9a:e6:43:7a:5a:d2:71:
e5:4b:80:e8:60:c1:ab:8e:4d:4e:83:35:39:d7:ef:5d:56:9b:
6b:17:6a:47:7b:8a:77:2d:b6:1a:ee:9c:e6:d4:3b:3a:5c:96:
70:21:c0:93:1f:db:ae:64:7c:6a:d0:33:e4:39:45:e1:6c:32:
3c:f0:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:39 2026 by rpki-client