
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: 3KnDHedaDxFODcwteE3Z3tFpo83gwTtfrlg59bzfcvg=
Subject key identifier: 48:08:BD:E8:EE:70:25:A2:69:AD:CD:E6:EC:8F:A2:46:C4:EF:7E:E1
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0C73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0C66
Signing time: Mon 12 Oct 2026 18:48:42 +0000
Manifest this update: Mon 12 Oct 2026 18:48:42 +0000
Manifest next update: Mon 19 Oct 2026 18:48:42 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: OFBXZWqU92sti8GPRFoDa2Mcan9cS9o8iDlngaqYYAs=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Oct 12 18:48:42 2026 GMT
Not After : Oct 19 18:48:42 2026 GMT
Subject: CN=6acd2b8a-02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:09:80:d3:65:d3:c2:77:82:85:ab:6f:a2:
1f:54:f2:32:52:26:55:f5:74:7c:64:eb:a3:c4:ef:
f3:12:13:f1:f8:94:18:91:11:e4:40:d5:a8:7a:a5:
98:71:9e:0f:7d:78:0d:b3:e4:70:c0:9c:dc:c9:8b:
c1:ee:ca:0f:a0:9d:f2:ac:c8:b3:58:17:42:20:5f:
00:d0:d1:62:06:4b:66:08:a9:51:37:a9:19:9c:77:
81:1e:43:6e:1a:0b:4e:35:8f:c7:df:5e:ad:03:ea:
bb:2f:56:03:29:93:54:ae:12:52:c2:5f:9e:99:e6:
15:28:a1:04:98:9a:66:9d:e7:61:39:61:8b:70:f0:
3e:eb:ed:5f:dd:88:ba:c8:89:76:2c:e0:88:90:81:
4e:b0:ac:6f:d9:b4:71:47:6c:61:91:07:68:4b:08:
b2:06:fa:0b:e9:14:15:ae:31:a2:b9:e6:c9:8d:64:
0f:b9:c8:a2:d1:19:5a:dd:2f:95:c1:cf:26:06:90:
0b:70:b5:35:77:d8:be:80:26:b8:b1:40:19:5e:b7:
39:b4:15:59:b4:23:7f:99:50:c4:4a:a1:44:5e:9f:
b5:eb:e2:49:8c:f1:e0:99:05:24:b8:2d:47:41:b6:
14:9d:69:21:e4:9a:46:f2:98:97:c4:ee:ef:7f:0f:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:BD:E8:EE:70:25:A2:69:AD:CD:E6:EC:8F:A2:46:C4:EF:7E:E1
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:d5:b7:92:6e:ed:fd:b4:e1:7a:de:e2:eb:7d:87:3e:76:45:
5a:35:af:f1:13:6e:0a:c9:8c:ee:38:a1:ed:37:a5:14:b2:7b:
3c:ef:49:5f:17:e3:d6:98:69:d3:35:77:08:5b:b2:b6:35:e9:
0e:68:ae:25:d4:6c:7d:c8:b9:85:79:1b:1f:3d:72:25:6f:44:
b2:f0:7b:3f:64:1e:28:85:f9:c9:45:67:a7:53:2b:ce:4c:ab:
30:80:11:6d:b8:0e:a8:7f:c9:09:cd:a8:a0:64:52:bc:7a:a6:
b6:ae:ec:86:3f:b8:2f:b4:f8:22:0e:9b:cd:24:44:71:a5:49:
69:18:fe:13:42:6b:4d:19:ea:89:54:11:7e:e8:7a:fc:c3:92:
76:99:33:8b:e8:9a:14:d0:b0:da:1e:5d:e8:9b:d2:c8:ae:fd:
aa:d3:fd:0f:9a:b9:e9:f4:80:6a:63:82:1e:f4:5a:7d:3a:4d:
0d:a0:ae:13:f9:e8:a8:c6:01:50:e5:30:40:1b:28:7b:1a:71:
8b:f8:d5:89:56:6a:85:5c:f3:63:c2:c1:8e:a7:4b:03:99:b1:
f8:9f:4a:dc:bc:3c:b1:aa:9e:a3:f6:fb:15:3e:42:20:1f:6f:
4d:db:0d:8a:a9:3f:7f:c4:43:9a:e9:e3:6f:11:91:5b:76:3c:
52:36:ec:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw
REUxMEY5QjkwHhcNMjYxMDEyMTg0ODQyWhcNMjYxMDE5MTg0ODQyWjAYMRYwFAYD
VQQDEw02YWNkMmI4YS0wMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19kJgNNl08J3goWrb6IfVPIyUiZV9XR8ZOujxO/zEhPx+JQYkRHkQNWoeqWY
cZ4PfXgNs+RwwJzcyYvB7soPoJ3yrMizWBdCIF8A0NFiBktmCKlRN6kZnHeBHkNu
GgtONY/H316tA+q7L1YDKZNUrhJSwl+emeYVKKEEmJpmnedhOWGLcPA+6+1f3Yi6
yIl2LOCIkIFOsKxv2bRxR2xhkQdoSwiyBvoL6RQVrjGiuebJjWQPucii0Rla3S+V
wc8mBpALcLU1d9i+gCa4sUAZXrc5tBVZtCN/mVDESqFEXp+16+JJjPHgmQUkuC1H
QbYUnWkh5JpG8piXxO7vfw8jAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgIveju
cCWiaa3N5uyPokbE737hMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx
MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3
d1pySWI4RTJFek1ONFEtYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr9W3km7t/bThet7i632HPnZFWjWv8RNuCsmM7jih7TelFLJ7PO9JXxfj1php
0zV3CFuytjXpDmiuJdRsfci5hXkbHz1yJW9EsvB7P2QeKIX5yUVnp1MrzkyrMIAR
bbgOqH/JCc2ooGRSvHqmtq7shj+4L7T4Ig6bzSREcaVJaRj+E0JrTRnqiVQRfuh6
/MOSdpkzi+iaFNCw2h5d6JvSyK79qtP9D5q56fSAamOCHvRafTpNDaCuE/noqMYB
UOUwQBsoexpxi/jViVZqhVzzY8LBjqdLA5mx+J9K3Lw8saqeo/b7FT5CIB9vTdsN
iqk/f8RDmunjbxGRW3Y8UjbsyA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:54:35 2026 by rpki-client